Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4Zct-UA2loSt3irTG6EROEOgPVU.roa
File: 4Zct-UA2loSt3irTG6EROEOgPVU.roa (raw, json)
Hash identifier: NLd8vf2slw/QIb/HBdVGn4XmU0dDovssu3lZU415Pao=
Subject key identifier: E1:97:2D:F9:40:36:96:84:AD:DE:2A:D3:1B:A1:11:38:43:A0:3D:55
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 0197CB6EC095B3163143ABB986D3D7920A0F
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4Zct-UA2loSt3irTG6EROEOgPVU.roa
Signing time: Wed 02 Jul 2025 13:58:42 +0000
ROA not before: Wed 02 Jul 2025 13:58:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44431
IP address blocks: 193.220.160.0/24 maxlen: 24
193.220.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:6e:c0:95:b3:16:31:43:ab:b9:86:d3:d7:92:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Jul 2 13:58:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1972df940369684adde2ad31ba1113843a03d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:0f:d5:3a:33:8f:3f:49:de:9d:46:ad:81:
f7:ef:41:e6:96:33:16:a9:86:f5:69:fd:16:53:69:
4b:ba:7b:af:c4:38:71:d0:92:78:88:98:b4:c1:12:
42:4d:d4:b8:96:99:1e:02:a2:e2:e2:fe:ae:8a:d3:
4f:0f:25:f0:a5:f3:b7:c9:0a:37:e6:59:e1:e4:38:
db:19:d5:fc:0f:8a:2c:6b:f4:2e:05:1f:2b:e0:24:
18:b8:2c:c9:08:77:a5:c7:2c:e2:c5:5b:a7:1d:5f:
47:49:82:41:98:26:d0:dc:79:ae:71:59:ad:59:33:
86:2c:6c:58:a0:19:9e:a2:3d:f3:a5:d2:70:71:b2:
51:cb:e3:18:15:20:ff:5f:24:57:46:1f:00:4e:f3:
cd:4e:06:f5:c9:ea:4a:cb:50:23:97:2a:a7:48:bb:
f2:02:87:e3:f9:f1:4c:32:d3:f7:65:f5:eb:0e:87:
db:62:14:6f:96:dc:e0:0d:df:7d:57:71:e8:89:70:
4b:33:bb:4e:22:1c:62:f8:63:32:b0:ea:22:2e:19:
2d:88:a6:6b:1e:6e:42:75:23:ed:17:18:74:7c:24:
5b:ca:60:f3:0f:c4:67:36:36:31:26:69:97:fa:90:
83:c0:4a:33:b5:59:f3:27:cf:f5:ff:f1:a6:8a:e0:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:2D:F9:40:36:96:84:AD:DE:2A:D3:1B:A1:11:38:43:A0:3D:55
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/4Zct-UA2loSt3irTG6EROEOgPVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.220.160.0/24
193.220.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:de:c6:7e:99:53:f2:21:11:95:f2:d9:c1:76:0f:91:1f:eb:
5a:6d:f0:f1:e3:22:65:1e:44:c2:47:cd:c3:fe:41:5c:e5:3c:
97:f7:b0:47:88:de:73:34:c0:db:b6:a0:45:41:f9:f6:8c:86:
a0:ac:9b:02:8b:79:7c:89:7b:eb:0a:6c:cb:91:50:a5:86:66:
db:f6:17:d4:61:1f:90:c5:d3:40:1a:66:d6:cc:87:14:9c:24:
4a:e2:61:65:f2:50:fd:57:3c:65:88:90:c5:7d:33:f3:79:30:
3d:32:fb:89:0c:48:ce:5a:df:13:d4:db:bc:9c:d0:3c:89:f3:
fd:b6:1f:6f:b7:1e:1d:2f:bc:e7:1e:4a:d6:ba:f1:cc:32:00:
c0:0d:49:34:00:2c:fa:00:3f:8e:b5:6a:8d:0b:af:e3:8b:1d:
0d:ae:a0:4b:82:77:1c:35:35:dc:26:31:fd:36:91:c5:d8:0a:
8c:37:9a:0c:7b:b6:53:af:af:e9:19:e9:6c:7c:08:5c:67:24:
88:e4:ab:ea:40:3e:0d:4e:ba:81:de:17:0b:27:0f:01:4e:5e:
45:28:3b:39:56:ff:f3:29:e9:14:ec:e2:23:e5:a6:23:1e:76:
db:a5:a8:dc:e9:f4:b6:ac:fe:8a:6e:07:aa:33:48:9c:cc:72:
03:e7:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:45:33 2025 by rpki-client