Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qSlaLn-7EYhvBs__DrzBebluApA.roa
File: qSlaLn-7EYhvBs__DrzBebluApA.roa (raw, json)
Hash identifier: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=
Subject key identifier: A9:29:5A:2E:7F:BB:11:88:6F:06:CF:FF:0E:BC:C1:79:B9:6E:02:90
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019621485ADE4EE48866070807668A2FA51C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qSlaLn-7EYhvBs__DrzBebluApA.roa
Signing time: Thu 10 Apr 2025 19:58:32 +0000
ROA not before: Thu 10 Apr 2025 19:58:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 5.181.0.0/23 maxlen: 24
91.199.133.0/24 maxlen: 24
91.229.239.0/24 maxlen: 24
146.19.213.0/24 maxlen: 24
159.253.120.0/24 maxlen: 24
194.110.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:48:5a:de:4e:e4:88:66:07:08:07:66:8a:2f:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Apr 10 19:58:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9295a2e7fbb11886f06cfff0ebcc179b96e0290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:7f:29:dc:98:8e:08:1b:1b:78:3e:5e:d3:
d9:59:32:41:eb:41:5c:e7:2a:61:82:ef:f2:bf:7f:
00:28:06:d4:e9:4c:09:b9:0c:89:df:01:0e:1f:0f:
7b:8f:6a:44:25:be:bf:22:65:ac:81:3d:04:5f:75:
83:6d:3b:51:15:7d:de:de:d7:3c:5e:53:f5:56:7d:
f9:ed:ef:25:7b:9a:6e:82:82:97:0d:e1:62:5d:d9:
85:1e:26:b5:3c:2d:f0:4c:dc:40:68:32:82:45:84:
38:0f:ae:67:6f:45:09:01:01:4c:43:6e:49:94:92:
34:e0:73:c9:a6:d8:b1:79:e4:ad:4a:ce:64:04:fb:
83:c0:16:86:2d:4e:eb:b7:7b:21:18:0f:6e:de:0b:
01:96:11:66:47:19:47:77:38:f3:f3:89:95:7e:64:
be:6d:4c:d1:0b:ab:70:2a:46:c7:fd:a7:2a:4e:6f:
79:0b:b4:a6:87:87:47:10:7e:51:b2:3c:1a:cd:00:
42:f7:0a:66:50:22:e1:60:58:68:0f:33:89:98:ea:
a1:d8:45:ed:3d:5a:08:57:f3:6a:5d:4e:2d:bf:68:
87:aa:a7:fa:dd:18:55:35:94:25:2b:db:77:2f:1a:
e0:40:09:81:9a:2f:14:ae:67:8e:99:b1:9a:dd:ed:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:5A:2E:7F:BB:11:88:6F:06:CF:FF:0E:BC:C1:79:B9:6E:02:90
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/qSlaLn-7EYhvBs__DrzBebluApA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.0.0/23
91.199.133.0/24
91.229.239.0/24
146.19.213.0/24
159.253.120.0/24
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:24:2e:e3:94:cb:d2:79:a1:ef:02:70:6a:b9:e3:c6:6b:7b:
2a:38:21:21:c8:f4:fe:ac:0f:30:d8:73:63:3f:ad:89:1b:7f:
5c:fc:f2:57:6c:2b:c5:7e:8f:4d:4d:a1:4b:d2:52:da:81:42:
f2:b0:18:24:cd:13:2f:ad:05:28:f4:b2:0c:e2:27:8c:cb:7c:
8a:5e:cb:f1:8a:1d:24:f7:84:0b:af:74:46:56:a5:12:6a:b9:
08:cf:36:c8:0d:33:47:41:fd:4b:75:b5:67:11:0e:64:58:ff:
4f:e7:de:14:2b:8c:67:d1:e7:a2:fe:f9:fe:f2:29:d6:4b:44:
ba:07:eb:5c:af:5f:47:13:15:cd:4f:b4:6f:93:96:ae:66:8b:
60:63:92:d0:dd:1d:5c:82:2f:ef:61:21:3e:d2:8f:25:65:d6:
5b:00:44:48:c8:bc:b4:36:dd:21:55:7c:5e:cb:eb:ab:f6:54:
79:d3:7b:39:10:41:05:bb:90:da:01:0e:f9:3d:b7:7b:36:68:
99:72:d3:df:4e:12:d8:19:9e:9d:b3:e3:bc:84:e4:c9:c9:25:
aa:bd:cc:e4:5a:38:87:cd:10:5b:56:c1:a6:a9:8f:f9:1a:ff:
96:eb:f7:ca:dc:ce:c4:2b:82:04:bb:de:1b:ce:63:ed:e3:a8:
f7:1f:e6:4c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZYhSFreTuSIZgcIB2aKL6UcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjUwNDEwMTk1ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTI5NWEyZTdmYmIxMTg4NmYwNmNmZmYwZWJjYzE3OWI5NmUwMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipl/KdyYjggbG3g+XtPZWTJB60Fc
5yphgu/yv38AKAbU6UwJuQyJ3wEOHw97j2pEJb6/ImWsgT0EX3WDbTtRFX3e3tc8
XlP1Vn357e8le5pugoKXDeFiXdmFHia1PC3wTNxAaDKCRYQ4D65nb0UJAQFMQ25J
lJI04HPJptixeeStSs5kBPuDwBaGLU7rt3shGA9u3gsBlhFmRxlHdzjz84mVfmS+
bUzRC6twKkbH/acqTm95C7Smh4dHEH5RsjwazQBC9wpmUCLhYFhoDzOJmOqh2EXt
PVoIV/NqXU4tv2iHqqf63RhVNZQlK9t3LxrgQAmBmi8UrmeOmbGa3e2AjwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKkpWi5/uxGIbwbP/w68wXm5bgKQMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvcVNsYUxuLTdFWWh2QnNfX0RyekJlYmx1QXBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBbUAAwQA
W8eFAwQAW+XvAwQAkhPVAwQAn/14AwQAwm73MA0GCSqGSIb3DQEBCwUAA4IBAQA6
JC7jlMvSeaHvAnBquePGa3sqOCEhyPT+rA8w2HNjP62JG39c/PJXbCvFfo9NTaFL
0lLagULysBgkzRMvrQUo9LIM4ieMy3yKXsvxih0k94QLr3RGVqUSarkIzzbIDTNH
Qf1LdbVnEQ5kWP9P594UK4xn0eei/vn+8inWS0S6B+tcr19HExXNT7Rvk5auZotg
Y5LQ3R1cgi/vYSE+0o8lZdZbAERIyLy0Nt0hVXxey+ur9lR503s5EEEFu5DaAQ75
Pbd7NmiZctPfThLYGZ6ds+O8hOTJySWqvczkWjiHzRBbVsGmqY/5Gv+W6/fK3M7E
K4IEu94bzmPt46j3H+ZM
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:35:43 2025 by rpki-client