Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/qAoUl_pAKbEgYAh32aSixzt--10.roa
File: qAoUl_pAKbEgYAh32aSixzt--10.roa (raw, json)
Hash identifier: KUBx7q2dlkJAsgTxMqqhdRFJ601tnXpyXikB3cOWfUs=
Subject key identifier: A8:0A:14:97:FA:40:29:B1:20:60:08:77:D9:A4:A2:C7:3B:7E:FB:5D
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 01968B400494CBAA82A2AD4F2B4DEF42331F
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/qAoUl_pAKbEgYAh32aSixzt--10.roa
Signing time: Thu 01 May 2025 09:49:10 +0000
ROA not before: Thu 01 May 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208449
IP address blocks: 45.90.168.0/24 maxlen: 24
45.90.169.0/24 maxlen: 24
45.90.170.0/24 maxlen: 24
2a0d:f100::/29 maxlen: 32
2a0d:f100::/32 maxlen: 32
2a0d:f103::/32 maxlen: 32
2a0d:f107::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:40:04:94:cb:aa:82:a2:ad:4f:2b:4d:ef:42:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: May 1 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80a1497fa4029b120600877d9a4a2c73b7efb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:ea:80:51:00:a4:f9:60:0d:d7:2a:9d:5d:
c2:a5:a4:a4:2c:ec:21:d6:74:dd:25:fb:3a:d7:09:
ab:7a:df:c1:6a:a3:6f:86:c9:41:17:49:32:63:28:
cb:39:a0:1d:54:8a:b0:cd:de:64:ab:b8:62:b8:44:
a7:83:90:22:90:85:b1:62:5a:86:49:02:c9:72:fa:
75:72:73:49:c9:11:eb:83:af:66:c0:dd:71:cc:ac:
07:9f:75:03:f4:32:09:68:8c:ac:a0:40:d8:f2:ec:
fd:3c:22:4a:9f:45:c9:5e:f8:56:5c:b0:04:4a:24:
55:d6:83:3d:9e:3c:b6:54:4d:ca:53:a2:14:cb:f2:
03:d6:2a:17:ed:33:16:03:33:f9:cc:97:46:3f:32:
9c:04:2b:d0:e6:74:07:80:c6:ab:5f:a9:b5:21:04:
be:c7:49:95:d4:78:5a:52:f2:0b:26:06:65:9f:a0:
97:89:26:67:22:68:95:8b:5a:d5:b0:ca:7a:d7:c0:
e2:e1:03:5f:23:5c:90:f5:ae:d0:c6:e8:61:92:88:
0c:02:61:9f:70:ec:d2:9b:fe:4b:f7:23:8e:19:fa:
20:88:d9:28:72:cd:8c:1b:eb:54:4a:d3:42:48:14:
2c:98:c8:86:b5:69:ee:91:b2:46:e5:27:9c:1e:c4:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:14:97:FA:40:29:B1:20:60:08:77:D9:A4:A2:C7:3B:7E:FB:5D
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/qAoUl_pAKbEgYAh32aSixzt--10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.168.0-45.90.170.255
IPv6:
2a0d:f100::/29
Signature Algorithm: sha256WithRSAEncryption
24:3a:aa:99:2b:53:3b:ab:1c:7b:73:22:8f:2c:12:b2:a3:d0:
8f:0e:7d:42:1e:ac:ec:a0:3f:93:a2:e5:07:d2:5e:dc:43:d3:
c3:c0:56:ab:0e:46:76:44:b9:28:a9:78:b4:7d:fc:48:c4:f3:
02:89:02:1c:cd:be:72:57:82:e2:d4:30:d7:53:2f:c2:9b:da:
c4:72:43:40:22:23:d4:0b:03:7b:1d:5b:79:97:7d:c4:3c:19:
fe:2e:2b:c5:94:ab:d1:5d:41:8c:19:bd:33:9c:c5:20:98:e7:
b5:ce:3e:1c:f4:47:7f:b8:bf:a7:0b:3c:de:15:57:48:8b:ef:
01:70:19:69:c5:e2:87:16:f5:85:29:8a:84:dc:01:a4:44:fd:
f1:1d:2d:35:3b:62:c8:ab:51:77:a4:7a:f6:81:47:47:4d:10:
b3:70:75:9e:84:1e:5b:1f:20:c4:95:a7:14:71:e8:fb:06:72:
71:e3:97:75:52:34:4b:d5:fc:4f:76:99:90:ba:a5:20:fd:b0:
de:75:7c:4f:12:e2:5b:17:aa:f6:1e:5a:0c:df:33:9e:41:94:
d4:c4:ba:95:e1:2c:51:72:8f:fd:85:d7:2e:9a:4e:e4:9f:1a:
44:b2:c9:30:f9:bb:2c:ad:c5:90:9a:c6:81:73:6a:25:13:2e:
7a:0a:24:5b
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZaLQASUy6qCoq1PK03vQjMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0
MDZkNDMwHhcNMjUwNTAxMDk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODBhMTQ5N2ZhNDAyOWIxMjA2MDA4NzdkOWE0YTJjNzNiN2VmYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4fqgFEApPlgDdcqnV3CpaSkLOwh
1nTdJfs61wmret/BaqNvhslBF0kyYyjLOaAdVIqwzd5kq7hiuESng5AikIWxYlqG
SQLJcvp1cnNJyRHrg69mwN1xzKwHn3UD9DIJaIysoEDY8uz9PCJKn0XJXvhWXLAE
SiRV1oM9njy2VE3KU6IUy/ID1ioX7TMWAzP5zJdGPzKcBCvQ5nQHgMarX6m1IQS+
x0mV1HhaUvILJgZln6CXiSZnImiVi1rVsMp618Di4QNfI1yQ9a7QxuhhkogMAmGf
cOzSm/5L9yOOGfogiNkocs2MG+tUStNCSBQsmMiGtWnukbJG5SecHsThcwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKgKFJf6QCmxIGAId9mkosc7fvtdMB8GA1UdIwQY
MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt
ZTNlZWNmOWRmYWFkLzEvcUFvVWxfcEFLYkVnWUFoMzJhU2l4enQtLTEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk
LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAMtWqgD
BAAtWqowDQQCAAIwBwMFAyoN8QAwDQYJKoZIhvcNAQELBQADggEBACQ6qpkrUzur
HHtzIo8sErKj0I8OfUIerOygP5Oi5QfSXtxD08PAVqsORnZEuSipeLR9/EjE8wKJ
AhzNvnJXguLUMNdTL8Kb2sRyQ0AiI9QLA3sdW3mXfcQ8Gf4uK8WUq9FdQYwZvTOc
xSCY57XOPhz0R3+4v6cLPN4VV0iL7wFwGWnF4ocW9YUpioTcAaRE/fEdLTU7Ysir
UXekevaBR0dNELNwdZ6EHlsfIMSVpxRx6PsGcnHjl3VSNEvV/E92mZC6pSD9sN51
fE8S4lsXqvYeWgzfM55BlNTEupXhLFFyj/2F1y6aTuSfGkSyyTD5uyytxZCaxoFz
aiUTLnoKJFs=
-----END CERTIFICATE-----
Generated at Fri May 9 02:13:35 2025 by rpki-client