Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/QibySFZaXewQr4QESSxx19Q8JHM.roa
File: QibySFZaXewQr4QESSxx19Q8JHM.roa (raw, json)
Hash identifier: zVxfg7PiMWQ6UyYxsZ1jAEqz1KJPUVidd+WK6y5CEjE=
Subject key identifier: 42:26:F2:48:56:5A:5D:EC:10:AF:84:04:49:2C:71:D7:D4:3C:24:73
Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial: 0194252182247F53750241876EBC24D7DE90
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/QibySFZaXewQr4QESSxx19Q8JHM.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201902
IP address blocks: 5.182.8.0/22 maxlen: 24
185.59.92.0/22 maxlen: 24
2a02:6a20::/48 maxlen: 48
2a02:6a20:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:82:24:7f:53:75:02:41:87:6e:bc:24:d7:de:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4226f248565a5dec10af8404492c71d7d43c2473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:19:5a:bd:7b:db:ed:57:fb:1c:62:88:b0:
25:c5:c0:e1:1d:99:f7:90:06:ae:f3:31:9b:d8:ca:
b1:11:a7:71:a4:ec:9f:9c:5e:1d:e2:65:2e:bd:6f:
de:df:55:5e:16:f4:9d:f5:a7:c2:3b:7b:fd:3b:5c:
06:a5:f1:0f:cb:9e:41:e8:bc:f0:51:73:2e:ef:b8:
2e:5c:d6:78:ca:05:8f:f1:87:1e:7d:56:03:20:49:
4e:68:b1:ad:66:3b:88:e4:c4:49:97:60:27:13:f8:
40:43:24:8f:24:60:31:47:ab:f6:8f:6c:0f:c8:38:
36:e8:c1:97:f9:53:18:56:51:1b:4a:3b:f0:f3:39:
51:59:04:76:98:c7:7e:d6:36:31:be:13:af:a9:c7:
a1:00:1a:0d:48:9b:63:9a:46:80:f4:10:2b:4a:45:
95:29:10:ac:bf:5c:49:43:0d:52:b1:e1:3e:b2:69:
b1:b9:04:b6:97:75:44:e1:f8:4f:fa:25:5d:85:bf:
55:a8:f8:b4:49:ee:f2:f3:ca:f5:17:90:98:c8:c7:
4f:80:dd:79:d9:53:0e:2d:ac:9c:43:5a:80:91:ed:
37:a8:6a:4f:06:60:b5:52:7f:d8:f7:c1:05:b9:f9:
1f:99:73:62:ee:4a:ae:85:2f:3c:e7:4c:ad:6c:27:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:F2:48:56:5A:5D:EC:10:AF:84:04:49:2C:71:D7:D4:3C:24:73
X509v3 Authority Key Identifier:
keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/QibySFZaXewQr4QESSxx19Q8JHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.8.0/22
185.59.92.0/22
IPv6:
2a02:6a20::/48
2a02:6a20:10::/48
Signature Algorithm: sha256WithRSAEncryption
0d:a6:88:dd:17:c1:f4:8d:84:9e:c4:76:05:2e:2c:c8:7c:27:
c7:62:97:11:97:6d:9a:70:d3:b2:fa:f0:3f:51:62:d2:84:bf:
6a:6d:1b:6c:e7:7e:a2:8f:72:25:36:46:b2:38:d2:e1:b7:20:
5e:29:f6:d1:5a:3b:72:48:fb:7c:c5:89:c0:88:b8:d6:52:73:
a2:6a:32:1c:83:08:84:bc:07:2f:5c:1a:7f:28:09:52:c5:d0:
0e:bb:49:11:bf:84:4e:e9:4c:b5:39:2c:64:38:34:26:a7:18:
f1:95:37:09:43:78:ba:f5:3d:95:78:83:bc:0f:e0:d1:99:77:
8c:26:18:6b:85:b0:1c:aa:23:66:f2:20:d4:85:d2:4f:21:70:
40:7f:69:80:dd:b5:1b:cf:ba:b7:ce:6c:96:e5:5d:01:41:5e:
b2:51:a7:f4:51:8a:fd:7d:19:7c:2d:76:07:34:1f:29:1a:03:
e8:86:7f:01:7d:b3:27:59:64:da:a0:68:34:75:97:0a:13:92:
2e:8b:7e:9c:4c:eb:e9:b9:74:92:3c:aa:d5:49:cb:5b:af:fd:
b9:d2:68:15:9a:59:a5:fa:8e:cc:41:8c:67:bd:8b:9c:8d:92:
10:6b:a0:2e:c6:c8:94:53:57:96:36:36:04:d0:e5:a7:89:bb:
c2:53:8c:06
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZQlIYIkf1N1AkGHbrwk196QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm
ZmRmYjYwHhcNMjUwMTAyMDM0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjI2ZjI0ODU2NWE1ZGVjMTBhZjg0MDQ0OTJjNzFkN2Q0M2MyNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqacZWr172+1X+xxiiLAlxcDhHZn3
kAau8zGb2MqxEadxpOyfnF4d4mUuvW/e31VeFvSd9afCO3v9O1wGpfEPy55B6Lzw
UXMu77guXNZ4ygWP8YcefVYDIElOaLGtZjuI5MRJl2AnE/hAQySPJGAxR6v2j2wP
yDg26MGX+VMYVlEbSjvw8zlRWQR2mMd+1jYxvhOvqcehABoNSJtjmkaA9BArSkWV
KRCsv1xJQw1SseE+smmxuQS2l3VE4fhP+iVdhb9VqPi0Se7y88r1F5CYyMdPgN15
2VMOLaycQ1qAke03qGpPBmC1Un/Y98EFufkfmXNi7kquhS8850ytbCdIbwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFEIm8khWWl3sEK+EBEkscdfUPCRzMB8GA1UdIwQY
MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt
NTUzY2I3NzY5Y2E5LzEvUWlieVNGWmFYZXdRcjRRRVNTeHgxOVE4SkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5
LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCBbYIAwQC
uTtcMBgEAgACMBIDBwAqAmogAAADBwAqAmogABAwDQYJKoZIhvcNAQELBQADggEB
AA2miN0XwfSNhJ7EdgUuLMh8J8dilxGXbZpw07L68D9RYtKEv2ptG2znfqKPciU2
RrI40uG3IF4p9tFaO3JI+3zFicCIuNZSc6JqMhyDCIS8By9cGn8oCVLF0A67SRG/
hE7pTLU5LGQ4NCanGPGVNwlDeLr1PZV4g7wP4NGZd4wmGGuFsByqI2byINSF0k8h
cEB/aYDdtRvPurfObJblXQFBXrJRp/RRiv19GXwtdgc0HykaA+iGfwF9sydZZNqg
aDR1lwoTki6LfpxM6+m5dJI8qtVJy1uv/bnSaBWaWaX6jsxBjGe9i5yNkhBroC7G
yJRTV5Y2NgTQ5aeJu8JTjAY=
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:10 2025 by rpki-client