Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/jQWzz1KtPVeMOk9juszbTA9KSZM.roa
File: jQWzz1KtPVeMOk9juszbTA9KSZM.roa (raw, json)
Hash identifier: tyZR5R+Av5TR5d+AMDxHfCQO1+yCBaGSUIry75HEJTI=
Subject key identifier: 8D:05:B3:CF:52:AD:3D:57:8C:3A:4F:63:BA:CC:DB:4C:0F:4A:49:93
Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial: 01961AC7ECA9AA779143DB7B0DE1B6632F8A
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/jQWzz1KtPVeMOk9juszbTA9KSZM.roa
Signing time: Wed 09 Apr 2025 13:40:31 +0000
ROA not before: Wed 09 Apr 2025 13:40:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 57.250.40.0/24 maxlen: 24
57.250.42.0/24 maxlen: 24
57.250.56.0/24 maxlen: 24
57.250.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:c7:ec:a9:aa:77:91:43:db:7b:0d:e1:b6:63:2f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Validity
Not Before: Apr 9 13:40:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d05b3cf52ad3d578c3a4f63baccdb4c0f4a4993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:2d:93:8e:63:1e:c2:bd:18:7b:aa:9e:5c:
05:ab:ec:89:b4:0d:d3:68:9a:4d:5e:54:19:8f:d4:
c4:e2:db:b0:c3:83:8c:64:ba:d5:35:5b:0e:19:0d:
4f:e0:58:58:11:2f:ab:9c:e1:0d:9e:12:20:9c:c2:
77:29:56:8c:5f:a3:4a:96:db:b8:37:56:ce:94:2b:
cc:43:48:30:01:e9:5b:3b:9d:9d:b9:28:8c:89:66:
06:d7:dd:50:02:fc:6f:2e:d6:5c:0e:ee:1a:1e:da:
33:80:aa:46:db:ff:d7:e1:82:c7:95:61:d5:b4:44:
f9:dc:eb:a6:02:bc:57:16:a8:7d:71:d4:61:d9:0b:
c9:c1:b0:02:d6:ac:8a:e6:bf:9b:85:ee:b8:21:64:
a4:85:e4:e1:1c:df:25:f5:51:3b:d9:fe:d1:ed:99:
b0:f3:26:2c:16:4f:36:71:33:0c:43:b0:11:2d:ca:
ce:05:94:fa:a5:b7:53:49:4f:a8:83:54:7d:36:f3:
8c:db:31:e6:86:d7:7f:36:b6:d4:83:56:54:73:64:
18:9d:34:fd:6d:a2:e4:41:6c:a8:d3:34:b3:d2:c9:
b8:83:9b:76:2c:1e:7a:7f:7f:56:bc:4a:aa:7f:01:
0d:3e:8d:68:c8:20:4e:31:5f:2a:6a:12:86:a2:26:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:B3:CF:52:AD:3D:57:8C:3A:4F:63:BA:CC:DB:4C:0F:4A:49:93
X509v3 Authority Key Identifier:
keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/jQWzz1KtPVeMOk9juszbTA9KSZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.250.40.0/24
57.250.42.0/24
57.250.56.0/24
57.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:89:8e:95:2a:b2:42:a4:33:5d:ca:0c:16:19:d9:ce:3d:37:
8e:91:bd:f2:af:8f:1b:54:04:7c:7a:59:fa:47:db:6b:8c:bf:
2b:e3:d5:98:90:17:5d:a5:c5:9b:bd:a1:53:b6:76:54:ea:1e:
84:1e:0c:cc:f6:bb:bf:a1:59:aa:ae:73:15:44:6d:ff:c7:7d:
b7:eb:54:1c:04:1a:d9:1c:7d:87:f1:aa:f7:46:0e:09:ae:b4:
7a:66:fc:f0:8e:07:82:3c:01:3a:ab:00:4e:56:0c:74:78:35:
84:e3:18:c7:72:08:2b:45:ee:7a:80:a4:05:9f:78:77:b9:38:
49:60:0b:f9:34:cb:03:b6:1c:f3:38:84:87:4c:ce:68:a7:6c:
bc:0f:04:bc:dc:ba:53:9f:49:3c:c9:60:07:47:d9:ab:c2:a3:
a0:ab:4d:09:2e:7d:e2:de:76:c2:02:b6:b2:4e:b2:86:53:a2:
e9:a4:da:99:bc:a0:f2:2f:3e:97:b9:84:81:41:5e:fc:2a:89:
2a:0e:04:d6:a2:63:ce:db:4a:21:9c:f2:dc:28:c0:d7:79:9b:
1e:df:7b:89:5d:8b:8f:97:72:81:c6:9a:2e:00:f4:d2:44:9d:
fb:18:16:1a:f0:1d:4c:44:94:b6:ec:49:f4:32:7a:aa:19:10:
d6:ef:24:9a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZYax+ypqneRQ9t7DeG2Yy+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjUwNDA5MTM0MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDA1YjNjZjUyYWQzZDU3OGMzYTRmNjNiYWNjZGI0YzBmNGE0OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78tk45jHsK9GHuqnlwFq+yJtA3T
aJpNXlQZj9TE4tuww4OMZLrVNVsOGQ1P4FhYES+rnOENnhIgnMJ3KVaMX6NKltu4
N1bOlCvMQ0gwAelbO52duSiMiWYG191QAvxvLtZcDu4aHtozgKpG2//X4YLHlWHV
tET53OumArxXFqh9cdRh2QvJwbAC1qyK5r+bhe64IWSkheThHN8l9VE72f7R7Zmw
8yYsFk82cTMMQ7ARLcrOBZT6pbdTSU+og1R9NvOM2zHmhtd/NrbUg1ZUc2QYnTT9
baLkQWyo0zSz0sm4g5t2LB56f39WvEqqfwENPo1oyCBOMV8qahKGoiYM6wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFI0Fs89SrT1XjDpPY7rM20wPSkmTMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvalFXenoxS3RQVmVNT2s5anVzemJUQTlLU1pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAOfooAwQA
OfoqAwQAOfo4AwQAOfo6MA0GCSqGSIb3DQEBCwUAA4IBAQBuiY6VKrJCpDNdygwW
GdnOPTeOkb3yr48bVAR8eln6R9trjL8r49WYkBddpcWbvaFTtnZU6h6EHgzM9ru/
oVmqrnMVRG3/x32361QcBBrZHH2H8ar3Rg4JrrR6ZvzwjgeCPAE6qwBOVgx0eDWE
4xjHcggrRe56gKQFn3h3uThJYAv5NMsDthzzOISHTM5op2y8DwS83LpTn0k8yWAH
R9mrwqOgq00JLn3i3nbCArayTrKGU6LppNqZvKDyLz6XuYSBQV78KokqDgTWomPO
20ohnPLcKMDXeZse33uJXYuPl3KBxpouAPTSRJ37GBYa8B1MRJS27En0MnqqGRDW
7ySa
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:42 2025 by rpki-client