Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/UQAL-JJc9xbj3dvWQx-rKxJywfk.roa
File: UQAL-JJc9xbj3dvWQx-rKxJywfk.roa (raw, json)
Hash identifier: arBBklCXAnQ+7dDU+siDZljmex4Eu/z9+wzjqqM7ap4=
Subject key identifier: 51:00:0B:F8:92:5C:F7:16:E3:DD:DB:D6:43:1F:AB:2B:12:72:C1:F9
Certificate issuer: /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial: 0194282321A8B9069B4B03D2052F7EC719A5
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/UQAL-JJc9xbj3dvWQx-rKxJywfk.roa
Signing time: Thu 02 Jan 2025 17:49:38 +0000
ROA not before: Thu 02 Jan 2025 17:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61031
IP address blocks: 185.69.132.0/23 maxlen: 23
185.69.132.0/24 maxlen: 24
185.69.134.0/23 maxlen: 23
185.69.135.0/24 maxlen: 24
185.245.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:21:a8:b9:06:9b:4b:03:d2:05:2f:7e:c7:19:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Validity
Not Before: Jan 2 17:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51000bf8925cf716e3dddbd6431fab2b1272c1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:d2:20:12:1f:a9:ad:56:d6:1b:c9:5f:65:
0a:99:a4:7b:bf:a4:73:c8:42:ed:b8:42:16:97:f7:
8f:e7:c7:9e:75:03:e3:73:d9:49:3a:8a:71:47:bc:
2d:79:16:c3:f7:27:75:5e:77:05:ec:5f:f7:78:6b:
56:5f:3c:29:61:4e:97:7a:79:b7:8b:b2:3c:d8:4f:
fb:68:e1:b5:29:b0:ae:71:33:4f:07:0c:e8:4e:1e:
9d:78:13:69:15:35:54:60:d4:aa:e2:73:74:6d:89:
fc:e3:a5:12:18:90:d5:de:2f:87:64:20:7c:c0:91:
67:bc:fc:e2:e4:48:25:16:b9:2c:2d:a3:f5:52:fb:
2e:6b:3d:5d:c2:39:c0:11:56:f5:88:63:63:10:e3:
a2:49:ce:3f:21:2a:1d:bc:03:31:9b:c4:6b:80:5c:
66:8d:e1:f3:fa:7a:2e:eb:68:69:6e:d9:39:71:fd:
1b:e8:78:65:37:a3:f0:b2:9d:6c:c1:98:07:2f:3a:
04:f1:37:8f:35:a6:77:ff:eb:f0:81:30:65:db:c4:
f9:50:15:14:75:ad:df:21:fc:35:85:86:52:e2:c2:
05:c5:d3:0c:b5:2f:a3:28:cb:f7:c5:c9:f3:b0:ee:
e1:83:1f:c7:7f:b5:8a:75:65:01:7e:1a:cb:45:db:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:00:0B:F8:92:5C:F7:16:E3:DD:DB:D6:43:1F:AB:2B:12:72:C1:F9
X509v3 Authority Key Identifier:
keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/UQAL-JJc9xbj3dvWQx-rKxJywfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.132.0/22
185.245.23.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:0e:77:2a:62:3e:bc:04:24:3d:7e:01:08:d4:e4:f5:4d:9c:
7b:d3:93:51:f3:7c:3c:ac:c1:ff:3f:64:07:0b:80:ec:a4:37:
38:a7:b3:58:58:a7:28:74:e4:fb:0e:a4:54:fb:29:4d:2f:fa:
e7:f2:93:d5:fc:71:fb:08:ac:81:d0:15:6a:7b:2c:cb:f1:a4:
38:6e:b9:f8:33:75:e9:f5:87:50:25:15:44:07:10:99:00:55:
bc:93:57:a3:86:47:cd:4e:18:07:bf:e1:e0:e2:dc:71:62:b8:
01:3f:03:9a:79:63:cb:e9:34:3b:8a:90:84:f0:a0:ff:8b:8d:
2e:88:be:aa:17:03:f5:cf:38:f1:b8:8d:fa:07:c3:27:ba:bf:
9c:97:12:bc:61:73:96:bf:0a:26:c0:29:f6:38:67:16:4c:4f:
e5:3e:08:5c:be:4b:bf:ea:99:14:57:5b:92:95:b8:3c:29:cb:
21:56:f2:b6:7b:37:f1:bf:10:2d:ad:7b:07:53:89:68:5d:96:
e2:57:88:a2:2d:a8:e5:cd:b4:ab:91:9d:be:c0:84:52:e7:27:
89:9d:ff:01:ee:fe:41:5b:ba:51:36:4c:21:46:59:e2:c2:5b:
10:7d:94:dc:1c:82:9d:f5:93:bd:f6:92:4c:66:71:27:60:72:
a0:fb:2d:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoIyGouQabSwPSBS9+xxmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViOTMzYTFhYjFjNzE1ZTBiM2IyYzdmZmEwZTEwMzg0NTYx
NGQzN2IwHhcNMjUwMTAyMTc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAwMGJmODkyNWNmNzE2ZTNkZGRiZDY0MzFmYWIyYjEyNzJjMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor3SIBIfqa1W1hvJX2UKmaR7v6Rz
yELtuEIWl/eP58eedQPjc9lJOopxR7wteRbD9yd1XncF7F/3eGtWXzwpYU6Xenm3
i7I82E/7aOG1KbCucTNPBwzoTh6deBNpFTVUYNSq4nN0bYn846USGJDV3i+HZCB8
wJFnvPzi5EglFrksLaP1Uvsuaz1dwjnAEVb1iGNjEOOiSc4/ISodvAMxm8RrgFxm
jeHz+nou62hpbtk5cf0b6HhlN6Pwsp1swZgHLzoE8TePNaZ3/+vwgTBl28T5UBUU
da3fIfw1hYZS4sIFxdMMtS+jKMv3xcnzsO7hgx/Hf7WKdWUBfhrLRdveoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFEAC/iSXPcW493b1kMfqysScsH5MB8GA1UdIwQY
MBaAFOuTOhqxxxXgs7LH/6DhA4RWFNN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQt
MmRkNmUxMTEzZjM0LzEvVVFBTC1KSmM5eGJqM2R2V1F4LXJLeEp5d2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2UzZDgtOWRlYi00MmJmLTg5NGQtMmRkNmUxMTEzZjM0
LzEvNjVNNkdySEhGZUN6c3NmX29PRURoRllVMDNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUWEAwQA
ufUXMA0GCSqGSIb3DQEBCwUAA4IBAQDdDncqYj68BCQ9fgEI1OT1TZx705NR83w8
rMH/P2QHC4DspDc4p7NYWKcodOT7DqRU+ylNL/rn8pPV/HH7CKyB0BVqeyzL8aQ4
brn4M3Xp9YdQJRVEBxCZAFW8k1ejhkfNThgHv+Hg4txxYrgBPwOaeWPL6TQ7ipCE
8KD/i40uiL6qFwP1zzjxuI36B8Mnur+clxK8YXOWvwomwCn2OGcWTE/lPghcvku/
6pkUV1uSlbg8KcshVvK2ezfxvxAtrXsHU4loXZbiV4iiLajlzbSrkZ2+wIRS5yeJ
nf8B7v5BW7pRNkwhRlniwlsQfZTcHIKd9ZO99pJMZnEnYHKg+y1w
-----END CERTIFICATE-----
Generated at Thu Apr 17 21:54:58 2025 by rpki-client