Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa
File: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (raw, json)
Hash identifier: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=
Subject key identifier: D1:0F:43:C9:82:6A:E1:86:C1:2F:B2:01:66:13:16:7F:71:E1:CD:B0
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 019421446C4CA34504547E15CCB7A03BA2DD
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198183
IP address blocks: 130.255.88.0/24 maxlen: 24
130.255.89.0/24 maxlen: 24
130.255.90.0/24 maxlen: 24
130.255.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6c:4c:a3:45:04:54:7e:15:cc:b7:a0:3b:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10f43c9826ae186c12fb2016613167f71e1cdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:ff:b7:31:67:3d:5c:de:c9:1e:e0:0b:e5:
76:9c:a4:f8:97:0e:19:00:91:7c:55:3a:05:60:de:
d5:cb:a0:2d:72:67:21:ce:28:65:90:40:dd:a5:b3:
b4:a9:9a:04:e5:9b:55:6e:6f:4e:e4:a0:2f:07:39:
0d:f4:64:e9:ab:2a:1e:96:e5:99:ab:bb:3a:65:23:
71:1e:a8:fa:25:ef:a7:33:53:1b:2f:95:0d:ca:b9:
6f:c2:05:fa:b1:ff:16:b7:22:54:37:03:54:bd:15:
4c:25:44:24:03:ec:29:ae:b1:0a:10:da:a2:b6:f7:
a9:4c:f8:31:bb:b9:35:15:82:e7:d5:57:52:5a:e5:
f0:b5:ce:7c:38:80:bc:c5:4e:03:26:8d:93:54:ad:
26:a2:8c:06:cd:4c:06:5b:9c:0a:fc:5e:e5:0b:2f:
e0:c7:9e:be:fd:7b:ea:98:c6:df:85:77:92:13:22:
b8:de:9a:3a:e6:2e:c8:f3:da:29:8f:97:61:1a:98:
ce:65:89:0b:2e:65:2d:df:3a:06:67:28:0d:9b:86:
ac:2c:dd:1a:e3:10:7c:20:cb:79:5a:24:4d:c3:0d:
49:30:c6:cc:11:f8:c3:ce:50:79:e2:db:ce:06:72:
0c:13:e7:e0:d7:94:a2:f9:f4:90:e2:c8:1f:86:e5:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:43:C9:82:6A:E1:86:C1:2F:B2:01:66:13:16:7F:71:E1:CD:B0
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:00:ea:2e:18:bc:65:2f:1f:b2:44:97:70:f1:a1:0c:62:86:
dd:4c:40:00:09:b4:e6:5d:c7:0c:92:13:28:bd:da:31:69:35:
d3:d0:45:2a:31:3c:d9:5c:16:55:b1:99:f2:35:6c:d5:71:4e:
cf:1b:b0:4a:4f:98:b0:a2:c7:01:53:ff:bd:cc:01:9a:69:e7:
08:22:e8:85:5c:37:96:70:ca:89:20:73:a5:86:eb:b3:14:8a:
4d:91:91:e1:eb:81:4a:2a:93:82:1b:94:79:d8:b3:bf:5f:a7:
9c:29:80:0f:c3:85:e4:cc:d1:5b:5d:a7:8e:1d:27:80:c8:29:
4c:a4:49:38:21:2a:6f:04:da:a7:77:a8:97:dd:b0:32:36:9c:
10:44:53:83:dc:16:61:89:bb:03:e3:df:b4:dd:76:df:78:80:
9d:a5:36:2b:b0:2e:c3:ed:95:e9:12:3f:bb:92:f9:81:90:1d:
09:86:e1:56:aa:f7:53:c5:4b:27:b8:7a:6a:72:ee:c9:f6:76:
9c:f4:ad:1a:71:92:81:a6:f4:4a:fa:53:7d:9c:36:f4:88:fb:
70:5d:84:f1:5e:e5:f7:68:41:a9:52:f3:dc:70:5d:6d:45:eb:
6c:64:90:e5:c6:02:f4:d5:33:2b:42:c2:d0:3d:67:01:b6:8d:
13:6c:9b:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRGxMo0UEVH4VzLegO6LdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYWVkZjJmODEyOGY0OGViODExM2JmYWY0ZDY3ZDkwMTA0
OTA5M2EwHhcNMjUwMTAxMDk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTBmNDNjOTgyNmFlMTg2YzEyZmIyMDE2NjEzMTY3ZjcxZTFjZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY7/tzFnPVzeyR7gC+V2nKT4lw4Z
AJF8VToFYN7Vy6AtcmchzihlkEDdpbO0qZoE5ZtVbm9O5KAvBzkN9GTpqyoeluWZ
q7s6ZSNxHqj6Je+nM1MbL5UNyrlvwgX6sf8WtyJUNwNUvRVMJUQkA+wprrEKENqi
tvepTPgxu7k1FYLn1VdSWuXwtc58OIC8xU4DJo2TVK0moowGzUwGW5wK/F7lCy/g
x56+/XvqmMbfhXeSEyK43po65i7I89opj5dhGpjOZYkLLmUt3zoGZygNm4asLN0a
4xB8IMt5WiRNww1JMMbMEfjDzlB54tvOBnIME+fg15Si+fSQ4sgfhuXptQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEPQ8mCauGGwS+yAWYTFn9x4c2wMB8GA1UdIwQY
MBaAFKuu3y+BKPSOuBE7+vTWfZAQSQk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgt
ZmM0NjBmZjk4ZTMxLzEvMFE5RHlZSnE0WWJCTDdJQlpoTVdmM0hoemJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgtZmM0NjBmZjk4ZTMx
LzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv9YMA0G
CSqGSIb3DQEBCwUAA4IBAQDBAOouGLxlLx+yRJdw8aEMYobdTEAACbTmXccMkhMo
vdoxaTXT0EUqMTzZXBZVsZnyNWzVcU7PG7BKT5iwoscBU/+9zAGaaecIIuiFXDeW
cMqJIHOlhuuzFIpNkZHh64FKKpOCG5R52LO/X6ecKYAPw4XkzNFbXaeOHSeAyClM
pEk4ISpvBNqnd6iX3bAyNpwQRFOD3BZhibsD49+03XbfeICdpTYrsC7D7ZXpEj+7
kvmBkB0JhuFWqvdTxUsnuHpqcu7J9nac9K0acZKBpvRK+lN9nDb0iPtwXYTxXuX3
aEGpUvPccF1tRetsZJDlxgL01TMrQsLQPWcBto0TbJs9
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:24:59 2025 by rpki-client