Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/4vBZmgBMnVCe-FhubPi7IwTZR7U.roa
File: 4vBZmgBMnVCe-FhubPi7IwTZR7U.roa (raw, json)
Hash identifier: pC9viwrfXhDTa2hNSC3okPZXSzJEUX3jBZCttoAMuYA=
Subject key identifier: E2:F0:59:9A:00:4C:9D:50:9E:F8:58:6E:6C:F8:BB:23:04:D9:47:B5
Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Certificate serial: 019423D72BE2B089F2D62E23DDE697010F32
Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/4vBZmgBMnVCe-FhubPi7IwTZR7U.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137488
IP address blocks: 185.119.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:e2:b0:89:f2:d6:2e:23:dd:e6:97:01:0f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2f0599a004c9d509ef8586e6cf8bb2304d947b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:2a:0d:a7:5e:b8:df:a2:9d:35:e9:25:77:
8f:2b:73:60:9c:3a:cd:9e:a7:3e:8e:e9:80:90:a6:
43:9d:70:75:5b:20:45:76:f0:28:88:eb:ee:2f:ff:
2a:d2:c6:59:42:ef:82:e2:cb:30:4e:9e:ec:ae:50:
67:59:05:d1:77:13:a9:4c:4f:7a:76:eb:4d:0c:94:
a1:c6:c6:d7:be:e2:ff:0b:87:a2:51:b9:06:bb:31:
81:12:eb:41:d7:92:90:2b:28:06:1f:f9:3a:6f:18:
7f:ff:2b:bd:8e:07:37:84:e0:7d:7a:26:06:86:a8:
1f:dd:2e:4b:04:fb:e8:05:6e:58:79:df:0a:d5:cf:
24:bf:29:40:41:da:c6:e3:1e:6e:68:ab:94:90:10:
75:c5:b9:59:62:69:fb:71:52:97:32:ff:29:b3:99:
11:6e:9d:f2:5a:01:ea:82:c6:8d:cd:1d:de:b2:20:
cf:a4:55:cd:9d:5e:88:27:c1:99:3c:39:b1:d1:67:
de:b1:65:e3:20:b2:98:e7:4f:23:fc:18:fc:d8:0b:
2c:55:58:3c:ce:7f:2d:fc:0c:60:d7:a7:cf:1b:31:
90:15:fe:86:d7:cb:32:ff:6d:25:60:5c:cf:9e:9b:
c2:d6:b2:fe:14:eb:4a:6b:b5:b9:33:76:62:a4:28:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F0:59:9A:00:4C:9D:50:9E:F8:58:6E:6C:F8:BB:23:04:D9:47:B5
X509v3 Authority Key Identifier:
keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/4vBZmgBMnVCe-FhubPi7IwTZR7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.219.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3b:77:66:e5:ce:6d:cb:8f:c9:40:9e:4c:20:a2:ff:58:ab:
14:37:e2:6a:76:6d:a7:d8:27:5f:4a:84:0e:ad:1f:17:78:4a:
e7:fb:ac:f2:dc:3c:ef:fc:b3:04:74:c3:68:97:26:f8:47:7a:
d0:12:e9:b4:e3:ff:26:d6:e8:53:60:97:eb:dc:37:f3:06:e1:
f6:68:41:59:1e:1d:d5:96:35:84:9f:e0:83:00:05:ce:7e:d4:
65:bb:d7:dd:9a:0e:7d:5d:db:7a:5e:16:df:df:4a:08:a1:b6:
b9:59:ce:b6:1c:38:c9:8e:9a:6b:33:0d:22:48:e2:32:97:a3:
e9:2f:0d:4a:68:51:29:74:4f:40:ff:be:3f:ce:05:00:eb:2e:
cf:cd:5c:de:f7:63:f3:ff:0c:f8:3e:96:72:e0:9d:f8:b6:6a:
44:c8:6a:99:ef:ba:da:5b:33:cb:e2:16:ff:78:77:dd:50:55:
e4:e1:39:37:22:28:25:d7:32:68:66:5c:c7:34:66:74:ae:d7:
ef:ec:42:26:22:04:ed:f5:03:24:93:8e:9a:d8:ca:12:cc:c4:
42:6c:4b:55:45:6a:62:62:c4:db:8e:00:f6:bf:56:f9:e7:db:
db:54:e8:65:2f:c8:3a:0e:b7:04:6d:93:c6:93:da:b7:94:ed:
3e:48:a3:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yvisIny1i4j3eaXAQ8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5
ZmE1NWEwHhcNMjUwMTAxMjE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmYwNTk5YTAwNGM5ZDUwOWVmODU4NmU2Y2Y4YmIyMzA0ZDk0N2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTQqDadeuN+inTXpJXePK3NgnDrN
nqc+jumAkKZDnXB1WyBFdvAoiOvuL/8q0sZZQu+C4sswTp7srlBnWQXRdxOpTE96
dutNDJShxsbXvuL/C4eiUbkGuzGBEutB15KQKygGH/k6bxh//yu9jgc3hOB9eiYG
hqgf3S5LBPvoBW5Yed8K1c8kvylAQdrG4x5uaKuUkBB1xblZYmn7cVKXMv8ps5kR
bp3yWgHqgsaNzR3esiDPpFXNnV6IJ8GZPDmx0WfesWXjILKY508j/Bj82AssVVg8
zn8t/Axg16fPGzGQFf6G18sy/20lYFzPnpvC1rL+FOtKa7W5M3ZipCiKiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLwWZoATJ1QnvhYbmz4uyME2Ue1MB8GA1UdIwQY
MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt
MWNmMGZlYWFhM2VhLzEvNHZCWm1nQk1uVkNlLUZodWJQaTdJd1RaUjdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh
LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXfbMA0G
CSqGSIb3DQEBCwUAA4IBAQAAO3dm5c5ty4/JQJ5MIKL/WKsUN+Jqdm2n2CdfSoQO
rR8XeErn+6zy3Dzv/LMEdMNolyb4R3rQEum04/8m1uhTYJfr3DfzBuH2aEFZHh3V
ljWEn+CDAAXOftRlu9fdmg59Xdt6Xhbf30oIoba5Wc62HDjJjpprMw0iSOIyl6Pp
Lw1KaFEpdE9A/74/zgUA6y7PzVze92Pz/wz4PpZy4J34tmpEyGqZ77raWzPL4hb/
eHfdUFXk4Tk3Iigl1zJoZlzHNGZ0rtfv7EImIgTt9QMkk46a2MoSzMRCbEtVRWpi
YsTbjgD2v1b559vbVOhlL8g6DrcEbZPGk9q3lO0+SKOy
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:20:02 2025 by rpki-client