Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QAujE-iKBhHQS4Uru9THOkoSzsg.roa
File: QAujE-iKBhHQS4Uru9THOkoSzsg.roa (raw, json)
Hash identifier: m7SDc1YZowtKcUGjFOeQhIcz91/8noc9mQR1ad4E/AA=
Subject key identifier: 40:0B:A3:13:E8:8A:06:11:D0:4B:85:2B:BB:D4:C7:3A:4A:12:CE:C8
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01963F878E7019FFEB72E27DADDEB3F793F7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QAujE-iKBhHQS4Uru9THOkoSzsg.roa
Signing time: Wed 16 Apr 2025 16:56:10 +0000
ROA not before: Wed 16 Apr 2025 16:56:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 5.42.192.0/24 maxlen: 24
5.42.195.0/24 maxlen: 24
5.42.209.0/24 maxlen: 24
5.42.210.0/24 maxlen: 24
46.149.173.0/24 maxlen: 24
91.213.230.0/24 maxlen: 24
91.246.56.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
91.247.169.0/24 maxlen: 24
91.247.170.0/24 maxlen: 24
185.225.190.0/24 maxlen: 24
193.9.20.0/24 maxlen: 24
193.200.199.0/24 maxlen: 24
194.26.204.0/24 maxlen: 24
194.55.170.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
212.18.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:87:8e:70:19:ff:eb:72:e2:7d:ad:de:b3:f7:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 16 16:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=400ba313e88a0611d04b852bbbd4c73a4a12cec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:d2:9e:06:9b:95:f7:ac:4b:8f:ec:d4:ff:
d7:89:be:da:8e:2d:8c:87:33:48:a8:4c:99:26:04:
ed:9c:e8:73:a2:3a:bd:0f:c6:5b:e0:ae:8f:1b:1e:
77:fd:dd:29:ba:ca:16:fd:fa:46:23:05:e0:e2:67:
60:42:da:d3:86:ec:88:ce:fd:d8:5d:2d:3d:6e:bd:
c7:8c:e3:0d:1d:15:54:8a:aa:8f:fd:f1:35:11:bd:
68:7e:da:a4:6f:dc:3f:19:ec:3c:b1:1b:bb:f1:98:
dc:81:19:b4:63:c2:26:ce:4a:a5:f8:79:ec:18:32:
5e:7e:f2:3d:af:34:dd:2b:de:d5:33:55:b2:49:a7:
de:bd:bc:5b:3c:7f:48:6d:ab:48:ee:ad:0f:e1:28:
7b:d0:0c:f3:75:9b:ad:00:f5:88:04:88:50:f4:6d:
bd:1d:3a:50:22:b0:1e:8a:94:96:02:95:a6:c9:77:
c3:f0:5b:0a:29:95:1c:24:22:b5:4e:35:d1:5a:fb:
56:95:a6:40:55:67:a3:65:bc:ba:61:d5:29:c8:90:
41:8a:cc:1b:80:f0:7c:c2:47:78:4a:16:f6:4d:f8:
da:64:03:78:eb:42:86:e9:d9:e4:8b:69:5c:b1:c8:
dd:7a:aa:6b:0b:58:f3:79:8e:2f:6f:55:62:55:5a:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:A3:13:E8:8A:06:11:D0:4B:85:2B:BB:D4:C7:3A:4A:12:CE:C8
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QAujE-iKBhHQS4Uru9THOkoSzsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
5.42.195.0/24
5.42.209.0-5.42.210.255
46.149.173.0/24
91.213.230.0/24
91.246.56.0/24
91.246.62.0/24
91.247.169.0-91.247.170.255
185.225.190.0/24
193.9.20.0/24
193.200.199.0/24
194.26.204.0/24
194.55.170.0/24
194.59.246.0/24
212.18.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:45:34:55:35:c4:5a:d9:18:8c:ac:3f:7d:4a:56:d1:4f:2b:
9b:9e:5e:d3:09:00:2c:71:fe:89:84:b6:5c:9e:22:03:72:04:
ea:b7:a7:fc:b7:3c:73:84:6d:a9:4c:3b:2c:0d:80:f9:60:9b:
cc:d7:cf:34:08:1e:ca:9f:8e:01:25:55:b8:fc:fb:ed:ce:7d:
4b:6e:c8:7a:f8:de:42:4f:3c:fe:7c:6c:20:39:b5:c0:76:e5:
b3:3d:ac:50:38:af:ac:46:58:5b:60:1a:8d:c5:e3:cb:f1:8e:
1f:5c:bc:c9:52:0c:79:f0:13:9f:ac:e0:04:e6:6b:6b:5c:44:
a2:cf:64:20:aa:3e:6a:5c:51:a3:f2:6b:a2:f3:8f:8b:b3:33:
ab:b1:f2:13:2e:5d:5a:55:39:e5:2b:c3:e6:cf:f5:3b:fb:b2:
df:27:69:c9:b7:30:d9:d4:fe:d3:cb:a1:a3:2b:8d:65:20:10:
9e:5b:c7:da:d5:f5:f5:fa:8f:58:74:bc:ae:38:27:2f:ef:11:
cf:ba:8c:0b:ce:dc:5d:f7:24:29:6e:93:be:ff:5d:cc:9b:de:
28:a4:e0:4f:fc:08:c3:04:5c:38:a9:06:ee:a0:24:14:7d:a2:
2c:b0:d4:b3:71:a6:d0:46:5a:e5:08:db:44:79:a5:fe:d7:91:
c4:e7:85:c1
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZY/h45wGf/rcuJ9rd6z95P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjUwNDE2MTY1NjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDBiYTMxM2U4OGEwNjExZDA0Yjg1MmJiYmQ0YzczYTRhMTJjZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu/SngablfesS4/s1P/Xib7aji2M
hzNIqEyZJgTtnOhzojq9D8Zb4K6PGx53/d0pusoW/fpGIwXg4mdgQtrThuyIzv3Y
XS09br3HjOMNHRVUiqqP/fE1Eb1oftqkb9w/Gew8sRu78ZjcgRm0Y8Imzkql+Hns
GDJefvI9rzTdK97VM1WySafevbxbPH9IbatI7q0P4Sh70AzzdZutAPWIBIhQ9G29
HTpQIrAeipSWApWmyXfD8FsKKZUcJCK1TjXRWvtWlaZAVWejZby6YdUpyJBBiswb
gPB8wkd4Shb2TfjaZAN460KG6dnki2lcscjdeqprC1jzeY4vb1ViVVov2wIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFEALoxPoigYR0EuFK7vUxzpKEs7IMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvUUF1akUtaUtCaEhRUzRVcnU5VEhPa29TenNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAAUqwAME
AAUqwzAMAwQABSrRAwQABSrSAwQALpWtAwQAW9XmAwQAW/Y4AwQAW/Y+MAwDBABb
96kDBABb96oDBAC54b4DBADBCRQDBADByMcDBADCGswDBADCN6oDBADCO/YDBADU
EngwDQYJKoZIhvcNAQELBQADggEBAFtFNFU1xFrZGIysP31KVtFPK5ueXtMJACxx
/omEtlyeIgNyBOq3p/y3PHOEbalMOywNgPlgm8zXzzQIHsqfjgElVbj8++3OfUtu
yHr43kJPPP58bCA5tcB25bM9rFA4r6xGWFtgGo3F48vxjh9cvMlSDHnwE5+s4ATm
a2tcRKLPZCCqPmpcUaPya6Lzj4uzM6ux8hMuXVpVOeUrw+bP9Tv7st8nacm3MNnU
/tPLoaMrjWUgEJ5bx9rV9fX6j1h0vK44Jy/vEc+6jAvO3F33JCluk77/Xcyb3iik
4E/8CMMEXDipBu6gJBR9oiyw1LNxptBGWuUI20R5pf7XkcTnhcE=
-----END CERTIFICATE-----
Generated at Fri May 9 07:29:31 2025 by rpki-client