Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa
File: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (raw, json)
Hash identifier: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=
Subject key identifier: BA:A2:3E:7B:D4:39:FA:88:DA:F6:BB:CF:53:54:1C:48:10:60:A7:86
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0195B2E335E04D14B7585B6B34F89319BF18
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa
Signing time: Thu 20 Mar 2025 09:29:49 +0000
ROA not before: Thu 20 Mar 2025 09:29:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25697
IP address blocks: 85.9.192.0/21 maxlen: 21
95.111.212.0/22 maxlen: 22
194.113.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b2:e3:35:e0:4d:14:b7:58:5b:6b:34:f8:93:19:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Mar 20 09:29:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baa23e7bd439fa88daf6bbcf53541c481060a786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:c2:d5:e2:6b:7a:ab:49:3c:38:b5:38:6a:
c6:c9:7c:2a:f8:66:77:0b:76:70:2e:f1:22:41:6d:
cf:7e:ba:4b:f9:e0:86:b1:c7:91:a0:39:45:cb:c8:
fd:90:2e:8e:10:d0:8f:d2:77:85:35:c9:9e:60:b7:
e6:eb:38:d3:57:bd:41:97:e3:04:29:35:e9:e1:45:
6d:47:bc:73:5e:6d:79:2b:3e:47:66:a7:32:f2:7e:
b4:4c:1a:7c:32:bb:62:18:3f:5e:40:e5:b4:05:aa:
40:ba:c4:0a:12:64:cc:f0:10:5e:be:f5:d4:65:5e:
3a:b5:83:69:ff:39:ee:f0:6c:1d:cd:ce:04:b1:0c:
a0:2e:25:ad:18:6a:83:79:da:8d:71:f7:05:c8:09:
9a:38:f1:ed:40:13:d8:97:dc:fa:94:47:23:53:38:
08:82:3e:dc:d3:a6:56:05:0b:c9:d7:7c:50:1d:32:
11:5b:88:6b:f5:cf:0a:2f:d7:6d:fd:d7:01:30:33:
e6:3f:0c:60:a7:7e:78:d0:78:f4:c5:86:99:78:5e:
c6:e9:1c:79:6d:73:3d:d3:fa:26:ea:b3:0d:80:d3:
b1:89:01:58:a2:b8:11:d9:bf:e0:12:ac:d9:82:b9:
65:23:60:27:94:81:44:93:12:21:2e:76:33:33:da:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A2:3E:7B:D4:39:FA:88:DA:F6:BB:CF:53:54:1C:48:10:60:A7:86
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.192.0/21
95.111.212.0/22
194.113.72.0/22
Signature Algorithm: sha256WithRSAEncryption
59:26:a0:ce:e0:06:1b:90:d8:60:5f:2a:80:7c:4c:20:d4:57:
df:08:1b:9d:b9:df:27:da:36:d8:00:6a:d6:30:65:6b:b6:c9:
ba:ac:64:6f:d8:9d:8c:3f:64:6f:78:7b:c5:aa:c1:1c:24:b8:
0e:ae:2b:8e:62:05:bd:3d:51:0d:76:f1:20:9c:3e:ba:f5:e0:
16:22:69:ff:45:8c:d2:22:50:71:d5:a3:06:59:1b:9c:bf:21:
a7:bb:1c:eb:89:d6:a9:1e:18:e2:e8:88:d9:47:0e:eb:e6:e1:
80:bf:14:24:29:12:67:5b:78:72:41:b9:5d:ac:83:46:5d:a1:
7d:ca:22:e2:28:51:d7:49:19:44:c8:55:c1:c5:0c:c6:e6:bc:
0b:a6:3c:32:e6:11:e8:fe:83:70:31:b3:bf:11:91:8a:c2:21:
01:e4:6a:bc:a2:3d:8e:6d:8d:b7:e7:a8:9a:fa:9d:a9:f0:55:
4f:e5:64:8e:ae:85:09:38:e9:05:88:34:a2:dd:3c:01:8b:53:
b3:35:11:59:8d:3f:81:9d:67:da:ad:fc:59:95:e8:6b:87:31:
72:99:fe:52:0b:94:db:73:a5:8f:dd:45:e4:61:11:c1:2c:e8:
34:e0:b2:e5:e4:95:fa:b6:c5:3f:d6:2c:b7:7f:73:40:f1:45:
6b:55:98:fe
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZWy4zXgTRS3WFtrNPiTGb8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjUwMzIwMDkyOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWEyM2U3YmQ0MzlmYTg4ZGFmNmJiY2Y1MzU0MWM0ODEwNjBhNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA003C1eJreqtJPDi1OGrGyXwq+GZ3
C3ZwLvEiQW3PfrpL+eCGsceRoDlFy8j9kC6OENCP0neFNcmeYLfm6zjTV71Bl+ME
KTXp4UVtR7xzXm15Kz5HZqcy8n60TBp8MrtiGD9eQOW0BapAusQKEmTM8BBevvXU
ZV46tYNp/znu8Gwdzc4EsQygLiWtGGqDedqNcfcFyAmaOPHtQBPYl9z6lEcjUzgI
gj7c06ZWBQvJ13xQHTIRW4hr9c8KL9dt/dcBMDPmPwxgp3540Hj0xYaZeF7G6Rx5
bXM90/om6rMNgNOxiQFYorgR2b/gEqzZgrllI2AnlIFEkxIhLnYzM9rFmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLqiPnvUOfqI2va7z1NUHEgQYKeGMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvdXFJLWU5UTUtb2phOXJ2UFUxUWNTQkJncDRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVQnAAwQC
X2/UAwQCwnFIMA0GCSqGSIb3DQEBCwUAA4IBAQBZJqDO4AYbkNhgXyqAfEwg1Fff
CBudud8n2jbYAGrWMGVrtsm6rGRv2J2MP2RveHvFqsEcJLgOriuOYgW9PVENdvEg
nD669eAWImn/RYzSIlBx1aMGWRucvyGnuxzridapHhji6IjZRw7r5uGAvxQkKRJn
W3hyQbldrINGXaF9yiLiKFHXSRlEyFXBxQzG5rwLpjwy5hHo/oNwMbO/EZGKwiEB
5Gq8oj2ObY2356ia+p2p8FVP5WSOroUJOOkFiDSi3TwBi1OzNRFZjT+BnWfarfxZ
lehrhzFymf5SC5Tbc6WP3UXkYRHBLOg04LLl5JX6tsU/1iy3f3NA8UVrVZj+
-----END CERTIFICATE-----
Generated at Sun Apr 13 08:08:39 2025 by rpki-client