Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/wqj7UB7atlo4UtptagO8D4QVpv4.roa
File: wqj7UB7atlo4UtptagO8D4QVpv4.roa (raw, json)
Hash identifier: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=
Subject key identifier: C2:A8:FB:50:1E:DA:B6:5A:38:52:DA:6D:6A:03:BC:0F:84:15:A6:FE
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 0194228D553FFAE98F7D7A5215B85024FE68
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/wqj7UB7atlo4UtptagO8D4QVpv4.roa
Signing time: Wed 01 Jan 2025 15:47:55 +0000
ROA not before: Wed 01 Jan 2025 15:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35302
IP address blocks: 85.15.230.0/24 maxlen: 24
95.131.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:55:3f:fa:e9:8f:7d:7a:52:15:b8:50:24:fe:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Jan 1 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2a8fb501edab65a3852da6d6a03bc0f8415a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9c:a9:a8:35:8f:fe:b2:7f:f3:0e:e6:59:78:
11:3f:27:95:2e:b2:15:c2:54:29:fa:18:0f:c8:ab:
66:e8:b0:6c:20:85:c6:30:47:62:95:d7:f0:4c:7d:
94:54:57:93:e8:ea:13:4e:02:a2:13:05:de:bd:6e:
e9:f3:1b:1c:ea:ca:07:cf:49:3e:a7:0c:9b:a3:44:
e2:2c:82:ed:87:06:1f:6a:88:5f:16:c7:ae:50:47:
7c:f6:c1:16:ef:1c:fe:fe:cd:65:78:39:23:ce:97:
87:20:fb:cc:72:63:8a:05:88:56:98:66:09:d3:ab:
d9:47:ff:01:5c:77:aa:6b:db:94:29:50:07:42:9d:
d9:d0:2e:db:17:82:f7:5f:8c:04:15:46:b5:ce:92:
7a:24:70:86:dd:ad:e6:8d:af:d9:c1:42:d3:0b:38:
ed:e6:cb:c8:64:07:62:d4:d0:3f:06:80:72:f0:14:
20:de:7d:e6:3f:3c:2f:31:1a:79:60:cf:d4:79:5e:
92:b6:cf:e1:f2:bc:e3:a0:74:7f:7f:aa:37:ee:38:
cf:b3:a9:db:0f:7b:40:6c:82:2a:97:82:37:bd:fb:
fc:cd:b9:bb:74:04:62:ea:58:e3:e2:83:34:05:32:
c0:d4:f3:4b:39:3d:d1:6b:d0:ce:97:bf:a5:07:8c:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A8:FB:50:1E:DA:B6:5A:38:52:DA:6D:6A:03:BC:0F:84:15:A6:FE
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/wqj7UB7atlo4UtptagO8D4QVpv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.15.230.0/24
95.131.118.0/23
Signature Algorithm: sha256WithRSAEncryption
51:a9:e6:cf:61:79:68:d4:db:39:df:d1:b6:6f:e1:72:82:ea:
16:71:9d:76:0d:e3:7a:8a:72:fa:eb:15:30:a8:f4:89:82:ed:
4e:fa:3c:b1:46:42:dd:7c:3c:c5:d9:c7:e3:65:c3:2c:f5:ba:
94:20:63:3d:bd:57:00:60:44:4f:dd:e8:14:81:ef:c7:cb:9f:
ae:1a:07:e1:2b:b4:c2:ed:8d:75:13:e5:90:1f:d9:a6:46:0a:
b3:79:6b:8e:d6:be:50:88:d4:50:c4:b0:0f:72:3c:0f:ba:3f:
6e:4a:a9:19:62:4b:05:51:87:bd:96:e4:18:29:98:90:45:25:
1a:67:8c:9f:eb:19:5f:8b:a5:43:ea:68:fb:40:44:d9:a0:c8:
85:ad:25:e8:7d:9f:d8:4b:6a:26:b3:f9:af:17:db:e9:1e:75:
fd:cd:16:14:2e:61:9d:aa:f6:ec:a4:69:44:8b:be:03:70:70:
c6:a3:fa:ee:7c:0a:c3:69:b9:fc:16:10:54:7d:26:ef:a8:4b:
a1:db:25:74:71:41:69:ce:d1:2b:1e:2e:7e:c2:f8:f4:5e:91:
f3:1f:82:61:e6:dd:e7:3d:ac:39:7e:8e:1b:fc:8e:b5:2c:d3:
1d:04:42:d5:9b:29:e4:34:7f:a7:59:21:ed:b4:97:d9:54:c7:
04:18:44:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQijVU/+umPfXpSFbhQJP5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTc1MjI1ZjM4NmNlOTgwMTE5ZjY5ODg0ZjliZTdjNmEy
YjNiMzMwHhcNMjUwMTAxMTU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE4ZmI1MDFlZGFiNjVhMzg1MmRhNmQ2YTAzYmMwZjg0MTVhNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJypqDWP/rJ/8w7mWXgRPyeVLrIV
wlQp+hgPyKtm6LBsIIXGMEdildfwTH2UVFeT6OoTTgKiEwXevW7p8xsc6soHz0k+
pwybo0TiLILthwYfaohfFseuUEd89sEW7xz+/s1leDkjzpeHIPvMcmOKBYhWmGYJ
06vZR/8BXHeqa9uUKVAHQp3Z0C7bF4L3X4wEFUa1zpJ6JHCG3a3mja/ZwULTCzjt
5svIZAdi1NA/BoBy8BQg3n3mPzwvMRp5YM/UeV6Sts/h8rzjoHR/f6o37jjPs6nb
D3tAbIIql4I3vfv8zbm7dARi6ljj4oM0BTLA1PNLOT3Ra9DOl7+lB4zJKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMKo+1Ae2rZaOFLabWoDvA+EFab+MB8GA1UdIwQY
MBaAFI8XUiXzhs6YARn2mIT5vnxqKzszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjct
NjFiNzcyZDc1MWVjLzEvd3FqN1VCN2F0bG80VXRwdGFnTzhENFFWcHY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZWM3Y2EtYTQwMi00YzVkLWExYjctNjFiNzcyZDc1MWVj
LzEvanhkU0pmT0d6cGdCR2ZhWWhQbS1mR29yT3pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVQ/mAwQB
X4N2MA0GCSqGSIb3DQEBCwUAA4IBAQBRqebPYXlo1Ns539G2b+FyguoWcZ12DeN6
inL66xUwqPSJgu1O+jyxRkLdfDzF2cfjZcMs9bqUIGM9vVcAYERP3egUge/Hy5+u
GgfhK7TC7Y11E+WQH9mmRgqzeWuO1r5QiNRQxLAPcjwPuj9uSqkZYksFUYe9luQY
KZiQRSUaZ4yf6xlfi6VD6mj7QETZoMiFrSXofZ/YS2oms/mvF9vpHnX9zRYULmGd
qvbspGlEi74DcHDGo/rufArDabn8FhBUfSbvqEuh2yV0cUFpztErHi5+wvj0XpHz
H4Jh5t3nPaw5fo4b/I61LNMdBELVmynkNH+nWSHttJfZVMcEGETD
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:41:12 2025 by rpki-client