Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa
File: Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa (raw, json)
Hash identifier: LgVK8QzqzxXRBoaRVwOGyvbyUR8+tzyJ/aC8MkNxkXE=
Subject key identifier: 43:A2:CF:7E:74:E4:C5:05:15:C6:D8:9E:CD:57:D5:F5:B0:F8:51:0C
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 01966C4D0A851C6FB129315F06E8DC9F6BC2
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa
Signing time: Fri 25 Apr 2025 09:35:10 +0000
ROA not before: Fri 25 Apr 2025 09:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 84.239.30.0/23 maxlen: 23
84.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:4d:0a:85:1c:6f:b1:29:31:5f:06:e8:dc:9f:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Apr 25 09:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a2cf7e74e4c50515c6d89ecd57d5f5b0f8510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:7c:17:c8:5c:4e:f8:a6:a3:c1:28:75:c5:
12:b5:68:6a:8b:d5:92:32:14:c3:90:b4:29:84:37:
b7:98:56:68:18:49:4b:71:a0:e7:7d:51:d3:74:ca:
b5:46:81:50:78:27:08:6f:2e:a0:c3:18:7e:a2:6e:
2a:c7:b9:a8:14:04:ab:77:a6:80:c1:a2:68:f4:bf:
33:04:c5:0b:25:f7:c7:fd:fe:9e:54:47:6d:be:8e:
2c:8f:ef:27:25:ef:93:bf:9d:c4:60:e4:fe:7e:81:
66:a1:93:83:60:6d:21:84:32:bf:ee:61:50:2c:e8:
32:87:d9:7a:c5:3e:da:e5:ac:b2:c1:64:be:46:eb:
a7:73:6a:c6:22:04:10:d5:5d:ae:2a:9b:08:0c:62:
cf:36:b2:07:af:f4:ae:f3:b9:d5:89:a2:7d:4d:21:
42:26:e0:d9:c4:dd:e4:00:eb:fa:b5:52:1d:9e:0d:
12:bf:6c:db:c7:a9:28:11:be:05:79:13:59:47:43:
d6:e2:76:ff:2f:ed:3e:7c:30:1d:d4:d3:c1:92:fd:
b0:ec:24:82:4b:f7:b1:61:1b:4e:98:d9:aa:40:d0:
84:6e:6b:37:76:eb:06:49:bb:00:59:f3:85:8f:47:
e5:3a:e0:83:b3:6e:43:83:b5:b6:ce:2b:44:f9:59:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:CF:7E:74:E4:C5:05:15:C6:D8:9E:CD:57:D5:F5:B0:F8:51:0C
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Q6LPfnTkxQUVxtiezVfV9bD4UQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.30.0/23
Signature Algorithm: sha256WithRSAEncryption
66:e8:48:61:b7:0b:80:8d:d5:5b:6f:1f:9b:e1:c6:c8:f8:00:
41:2e:de:5c:48:21:a3:55:bb:47:b9:a9:ba:c5:56:04:f0:fb:
09:72:7b:4b:57:b0:cb:53:7b:07:bd:c7:d0:59:cf:d2:c5:93:
e5:28:2f:c4:00:87:5a:e3:0e:e3:e7:dc:32:3b:19:19:9d:4e:
e0:17:10:b3:05:e2:eb:6f:fc:57:80:81:d2:8d:64:d8:37:df:
5b:03:00:ab:56:88:5d:d2:31:97:60:d3:e0:7f:63:e5:78:01:
8e:47:e1:dd:06:74:e0:96:07:f3:57:72:32:f7:f9:78:3d:22:
ec:97:72:96:20:42:7c:a8:76:d2:b8:eb:5e:9f:6b:31:94:1d:
84:51:fe:0d:98:70:3a:2a:0e:2a:cb:db:ac:03:f2:5a:0b:67:
ac:7a:37:bc:8e:68:95:d2:20:45:0e:ec:e6:8c:08:89:33:d4:
9d:0a:68:01:1a:b4:ee:3f:ed:8b:3b:39:76:4e:90:bf:8f:b0:
ad:69:4a:ef:ac:e6:c3:08:78:7e:72:6c:56:79:90:ab:e1:78:
82:36:93:b9:9b:c0:ee:ae:44:69:4a:ba:55:08:a3:be:26:61:
07:a0:ee:f6:d1:38:4b:86:f4:96:f6:b5:99:9e:e6:23:aa:43:
16:1e:82:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZsTQqFHG+xKTFfBujcn2vCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjUwNDI1MDkzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2EyY2Y3ZTc0ZTRjNTA1MTVjNmQ4OWVjZDU3ZDVmNWIwZjg1MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPJ8F8hcTvimo8EodcUStWhqi9WS
MhTDkLQphDe3mFZoGElLcaDnfVHTdMq1RoFQeCcIby6gwxh+om4qx7moFASrd6aA
waJo9L8zBMULJffH/f6eVEdtvo4sj+8nJe+Tv53EYOT+foFmoZODYG0hhDK/7mFQ
LOgyh9l6xT7a5ayywWS+Ruunc2rGIgQQ1V2uKpsIDGLPNrIHr/Su87nViaJ9TSFC
JuDZxN3kAOv6tVIdng0Sv2zbx6koEb4FeRNZR0PW4nb/L+0+fDAd1NPBkv2w7CSC
S/exYRtOmNmqQNCEbms3dusGSbsAWfOFj0flOuCDs25Dg7W2zitE+VlMxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOiz3505MUFFcbYns1X1fWw+FEMMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvUTZMUGZuVGt4UVVWeHRpZXpWZlY5YkQ0VVF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVO8eMA0G
CSqGSIb3DQEBCwUAA4IBAQBm6EhhtwuAjdVbbx+b4cbI+ABBLt5cSCGjVbtHuam6
xVYE8PsJcntLV7DLU3sHvcfQWc/SxZPlKC/EAIda4w7j59wyOxkZnU7gFxCzBeLr
b/xXgIHSjWTYN99bAwCrVohd0jGXYNPgf2PleAGOR+HdBnTglgfzV3Iy9/l4PSLs
l3KWIEJ8qHbSuOten2sxlB2EUf4NmHA6Kg4qy9usA/JaC2eseje8jmiV0iBFDuzm
jAiJM9SdCmgBGrTuP+2LOzl2TpC/j7CtaUrvrObDCHh+cmxWeZCr4XiCNpO5m8Du
rkRpSrpVCKO+JmEHoO720ThLhvSW9rWZnuYjqkMWHoIm
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:26:18 2025 by rpki-client