Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4-EsjAVdf144tiP1S6W0cZWLEr0.roa
File: 4-EsjAVdf144tiP1S6W0cZWLEr0.roa (raw, json)
Hash identifier: aAjI6dZi6XfNi5J1N/GfpcAZ6m9XLEd8XE04/FjSVu4=
Subject key identifier: E3:E1:2C:8C:05:5D:7F:5E:38:B6:23:F5:4B:A5:B4:71:95:8B:12:BD
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D615073FE6D7E5E2A74AC2D3AA3488
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4-EsjAVdf144tiP1S6W0cZWLEr0.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39669
IP address blocks: 89.44.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:07:3f:e6:d7:e5:e2:a7:4a:c2:d3:aa:34:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3e12c8c055d7f5e38b623f54ba5b471958b12bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:a2:9a:87:34:f3:d5:fb:64:96:d3:25:2e:
37:03:88:c5:e7:3d:50:27:83:fa:b1:bc:03:2a:a3:
9b:29:77:15:0f:71:76:1c:de:38:52:c5:1a:77:ac:
4e:ba:0b:6f:0c:c8:d6:88:e7:d5:df:0d:14:59:be:
ab:5a:b4:d1:81:16:6f:f8:b9:c2:3a:d5:af:72:0a:
f1:22:39:a7:7c:38:da:14:a6:63:2b:65:a2:66:7b:
75:ad:12:ba:08:5a:11:98:c6:02:1f:68:b6:fd:d7:
2f:21:26:ae:2c:02:db:6e:a3:94:65:07:2a:33:5b:
b2:c3:ed:4e:7e:ca:f7:82:ce:f4:1e:7f:c9:20:c0:
32:9c:79:f5:36:bd:9a:e9:f0:94:f0:45:59:12:8b:
c5:ca:d9:36:07:9f:68:30:c2:38:60:f5:5d:4b:16:
88:20:fe:3f:30:06:fe:e9:eb:16:47:7a:7c:e6:96:
b3:10:e4:86:49:b2:1c:20:69:69:5f:e5:98:fa:d6:
cf:73:f1:a0:5c:5c:aa:2b:a0:33:4d:f0:ba:3f:2f:
19:61:5d:10:b7:c8:8c:6e:73:88:35:54:7c:bb:1b:
c6:5b:c1:99:6c:ba:66:ad:38:9b:5e:cf:cb:f2:53:
da:94:44:c8:ed:ac:bd:68:dd:5b:fc:e6:c1:7f:a5:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:2C:8C:05:5D:7F:5E:38:B6:23:F5:4B:A5:B4:71:95:8B:12:BD
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/4-EsjAVdf144tiP1S6W0cZWLEr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:79:9d:4d:3d:4d:87:c5:28:80:68:5f:f5:19:49:75:b8:2c:
96:15:07:11:e0:20:92:1b:bb:24:89:d8:89:59:07:32:49:73:
94:c3:c0:56:d2:b7:d3:10:43:ba:e6:a7:eb:05:25:ad:09:cf:
09:d6:c4:a8:8f:4d:36:40:cc:50:de:ec:6d:d5:8b:d5:43:2e:
f6:33:17:ea:35:69:c5:73:8d:68:8f:5a:1b:93:e0:0c:24:e2:
96:99:29:bb:88:2c:f7:2f:47:56:c6:e3:fa:25:80:83:bc:57:
55:0a:3e:e2:b8:df:5f:e9:bd:ba:d0:6e:7b:d5:f3:75:1e:1c:
03:a3:e9:46:37:c7:36:98:eb:2e:6e:e4:38:00:3e:a2:2d:fe:
a7:0c:cf:16:0e:17:26:12:c9:06:db:ff:35:44:db:c7:39:22:
52:56:8e:4a:94:92:0a:93:aa:49:f5:6f:58:89:f3:e4:b6:5e:
6d:f0:49:18:24:16:f1:91:c8:4a:96:7a:60:18:09:78:47:bf:
47:6a:18:09:e4:2d:9d:4f:55:b2:97:d1:02:ff:6f:49:1e:96:
6d:39:52:06:02:c9:e7:b8:16:9c:81:27:1a:17:78:14:fa:1a:
08:9d:b2:82:1e:cd:2c:28:62:32:d2:93:6e:24:00:ed:d8:64:
71:05:31:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1hUHP+bX5eKnSsLTqjSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjUwMTAxMDc0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2UxMmM4YzA1NWQ3ZjVlMzhiNjIzZjU0YmE1YjQ3MTk1OGIxMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOaimoc089X7ZJbTJS43A4jF5z1Q
J4P6sbwDKqObKXcVD3F2HN44UsUad6xOugtvDMjWiOfV3w0UWb6rWrTRgRZv+LnC
OtWvcgrxIjmnfDjaFKZjK2WiZnt1rRK6CFoRmMYCH2i2/dcvISauLALbbqOUZQcq
M1uyw+1Ofsr3gs70Hn/JIMAynHn1Nr2a6fCU8EVZEovFytk2B59oMMI4YPVdSxaI
IP4/MAb+6esWR3p85pazEOSGSbIcIGlpX+WY+tbPc/GgXFyqK6AzTfC6Py8ZYV0Q
t8iMbnOINVR8uxvGW8GZbLpmrTibXs/L8lPalETI7ay9aN1b/ObBf6XjXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPhLIwFXX9eOLYj9UultHGVixK9MB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvNC1Fc2pBVmRmMTQ0dGlQMVM2VzBjWldMRXIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz
LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSzgMA0G
CSqGSIb3DQEBCwUAA4IBAQCweZ1NPU2HxSiAaF/1GUl1uCyWFQcR4CCSG7skidiJ
WQcySXOUw8BW0rfTEEO65qfrBSWtCc8J1sSoj002QMxQ3uxt1YvVQy72MxfqNWnF
c41oj1obk+AMJOKWmSm7iCz3L0dWxuP6JYCDvFdVCj7iuN9f6b260G571fN1HhwD
o+lGN8c2mOsubuQ4AD6iLf6nDM8WDhcmEskG2/81RNvHOSJSVo5KlJIKk6pJ9W9Y
ifPktl5t8EkYJBbxkchKlnpgGAl4R79HahgJ5C2dT1Wyl9EC/29JHpZtOVIGAsnn
uBacgScaF3gU+hoInbKCHs0sKGIy0pNuJADt2GRxBTHL
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:00:52 2025 by rpki-client