Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4apTKEXG8Kl77uB6tVy3ISf5IgE.roa
File: 4apTKEXG8Kl77uB6tVy3ISf5IgE.roa (raw, json)
Hash identifier: 910sHgEkzQ/Ye/g9QeIqT0SZQ0CKvbErMI2m52fobm4=
Subject key identifier: E1:AA:53:28:45:C6:F0:A9:7B:EE:E0:7A:B5:5C:B7:21:27:F9:22:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195423FF6F369F6D95A54BED418BE8D9275
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4apTKEXG8Kl77uB6tVy3ISf5IgE.roa
Signing time: Wed 26 Feb 2025 12:34:03 +0000
ROA not before: Wed 26 Feb 2025 12:34:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 62.76.230.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:3f:f6:f3:69:f6:d9:5a:54:be:d4:18:be:8d:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 26 12:34:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1aa532845c6f0a97beee07ab55cb72127f92201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:e6:ea:a4:50:5f:15:d6:d5:d5:62:e9:ce:
0f:1f:f8:3a:db:fd:75:86:e8:cf:da:ea:b3:e3:14:
3f:03:99:83:62:46:e3:ec:b9:63:55:90:68:0a:cb:
d3:07:ce:e4:fc:cf:89:eb:44:ef:06:8e:e9:7c:63:
33:97:a5:ad:97:72:0f:db:0f:a5:e7:eb:35:69:bb:
ca:24:af:21:66:fd:75:3c:0c:b6:c8:c2:20:dd:6f:
53:c6:a9:9d:31:d1:c3:37:53:26:13:a8:c3:e7:ef:
df:56:8b:67:6f:d8:ff:74:06:39:38:c9:d0:41:4c:
61:6d:f8:8a:ce:64:34:d7:49:4b:7f:9f:e9:b0:74:
7c:7f:3e:f2:7b:1e:2e:f3:cf:a0:88:d2:a7:ca:2e:
f8:d5:c7:09:1a:0a:43:6d:b6:ae:64:22:91:03:40:
da:c4:ce:d6:be:6e:3d:6b:5b:f5:d2:9a:d1:49:ba:
f4:d4:0e:32:4e:3b:43:69:24:ed:be:41:16:6a:4d:
90:bf:0f:a4:d7:59:5f:d5:89:d5:1b:42:22:6e:ce:
00:09:82:f4:ca:75:da:3f:db:3b:1d:6c:15:76:eb:
0e:c8:ad:9d:e8:98:99:1a:6f:e7:b5:41:1f:0c:50:
42:f2:1b:db:b2:95:ca:ce:0e:f2:21:9c:5a:af:6c:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:53:28:45:C6:F0:A9:7B:EE:E0:7A:B5:5C:B7:21:27:F9:22:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4apTKEXG8Kl77uB6tVy3ISf5IgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
193.124.90.0/24
194.87.59.0/24
194.87.64.0/24
194.87.75.0/24
194.87.91.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6f:96:f2:da:19:5f:b6:7a:c4:e7:4e:be:ef:0e:98:2e:9c:
b6:ca:35:5a:5e:39:c2:66:c4:fb:e3:ff:04:dc:3e:c7:a0:29:
80:24:30:9c:cb:ec:34:3c:b4:d6:d3:0f:2b:10:21:57:4a:65:
03:61:06:fb:1d:53:e6:2c:db:bf:b4:91:75:c2:ef:dd:b9:14:
b1:75:90:55:ea:2f:06:9b:b7:ca:ae:bd:4a:ea:ea:a4:89:83:
78:d3:8e:cf:8f:94:df:8e:07:fc:6f:f8:f7:ba:59:96:28:01:
27:ae:a0:25:fd:6f:45:ab:46:86:d3:21:de:40:fd:8e:65:45:
a9:9b:e0:be:2a:c2:d2:16:30:ee:d8:d9:b2:99:51:d5:13:15:
c3:9d:1a:31:7b:79:91:4d:97:81:57:63:76:76:38:45:d2:15:
d3:49:07:5b:6f:f4:9a:e9:36:a3:b7:2c:f6:1c:4e:94:14:6a:
3d:49:cf:44:ca:b7:0b:41:a5:a9:5a:50:f4:a9:0a:dd:a3:e6:
9b:fd:8c:11:57:9c:38:02:46:3a:b0:59:33:4e:73:29:49:b5:
32:52:3a:d8:60:6b:38:2b:e8:ad:b6:89:ca:4e:b6:24:ac:21:
ad:1e:dc:62:7d:5f:da:7d:f9:d7:ce:39:9e:a2:47:32:ad:64:
18:a4:15:30
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZVCP/bzafbZWlS+1Bi+jZJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwMjI2MTIzNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWFhNTMyODQ1YzZmMGE5N2JlZWUwN2FiNTVjYjcyMTI3ZjkyMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBvm6qRQXxXW1dVi6c4PH/g62/11
hujP2uqz4xQ/A5mDYkbj7LljVZBoCsvTB87k/M+J60TvBo7pfGMzl6Wtl3IP2w+l
5+s1abvKJK8hZv11PAy2yMIg3W9TxqmdMdHDN1MmE6jD5+/fVotnb9j/dAY5OMnQ
QUxhbfiKzmQ010lLf5/psHR8fz7yex4u88+giNKnyi741ccJGgpDbbauZCKRA0Da
xM7Wvm49a1v10prRSbr01A4yTjtDaSTtvkEWak2Qvw+k11lf1YnVG0Iibs4ACYL0
ynXaP9s7HWwVdusOyK2d6JiZGm/ntUEfDFBC8hvbspXKzg7yIZxar2zwQwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOGqUyhFxvCpe+7gerVctyEn+SIBMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNGFwVEtFWEc4S2w3N3VCNnRWeTNJU2Y1SWdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAPkzmAwQA
wXxaAwQAwlc7AwQAwldAAwQAwldLAwQAwldbAwQAwzo/MA0GCSqGSIb3DQEBCwUA
A4IBAQBtb5by2hlftnrE506+7w6YLpy2yjVaXjnCZsT74/8E3D7HoCmAJDCcy+w0
PLTW0w8rECFXSmUDYQb7HVPmLNu/tJF1wu/duRSxdZBV6i8Gm7fKrr1K6uqkiYN4
047Pj5Tfjgf8b/j3ulmWKAEnrqAl/W9Fq0aG0yHeQP2OZUWpm+C+KsLSFjDu2Nmy
mVHVExXDnRoxe3mRTZeBV2N2djhF0hXTSQdbb/Sa6Tajtyz2HE6UFGo9Sc9EyrcL
QaWpWlD0qQrdo+ab/YwRV5w4AkY6sFkzTnMpSbUyUjrYYGs4K+ittonKTrYkrCGt
HtxifV/affnXzjmeokcyrWQYpBUw
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:12:54 2025 by rpki-client