Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/4MiALt5VQvZmZRNJbgiFndSZM4w.roa
File: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (raw, json)
Hash identifier: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=
Subject key identifier: E0:C8:80:2E:DE:55:42:F6:66:65:13:49:6E:08:85:9D:D4:99:33:8C
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 019427B53EC9E616B6D9E2D86380FB322D3A
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/4MiALt5VQvZmZRNJbgiFndSZM4w.roa
Signing time: Thu 02 Jan 2025 15:49:36 +0000
ROA not before: Thu 02 Jan 2025 15:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394973
IP address blocks: 213.19.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3e:c9:e6:16:b6:d9:e2:d8:63:80:fb:32:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 15:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c8802ede5542f6666513496e08859dd499338c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:f8:09:08:45:2b:7e:c4:86:ed:c9:18:31:
68:20:3b:8d:73:00:02:86:f9:0a:51:b7:fe:5f:cd:
da:01:51:66:d0:f4:f9:ca:09:a3:d4:c0:b2:ff:9b:
c1:18:8e:87:70:e7:59:10:45:f0:48:89:66:ea:7f:
e8:c4:f8:c4:e5:ef:41:40:8f:72:67:4c:0b:37:60:
12:cc:2a:ab:15:01:68:df:36:80:23:fb:b1:8d:bd:
c5:9c:b1:af:c4:80:51:41:74:02:5c:3c:fa:86:d7:
a1:1c:4a:b2:25:68:e4:d5:4f:60:e0:5b:8e:9b:be:
da:17:3f:04:7f:10:cb:77:c7:3f:5f:4e:aa:3f:0e:
4a:fa:cd:38:28:c6:2a:71:08:ff:f2:cd:91:00:63:
cc:7d:63:d3:cd:e2:54:10:33:f0:9b:dc:7f:f4:0b:
03:3b:a6:c4:cb:c0:87:35:c3:69:e1:18:37:67:19:
e6:b9:0c:3e:0b:f2:ab:5c:9f:b2:29:e5:bc:a0:71:
80:18:9f:73:01:96:2f:0f:a0:02:2d:bb:fb:44:75:
d6:7a:9d:62:24:6c:86:9b:24:5e:c2:82:f4:52:fc:
2e:20:a1:23:f6:ca:b7:23:bd:81:bc:f3:94:5f:23:
87:04:26:36:fe:25:3d:64:f6:83:29:01:32:97:de:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C8:80:2E:DE:55:42:F6:66:65:13:49:6E:08:85:9D:D4:99:33:8C
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/4MiALt5VQvZmZRNJbgiFndSZM4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.19.145.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:21:31:5b:41:de:6e:b2:22:73:f3:bf:d4:ed:5b:d3:35:
e7:60:c2:99:27:9a:9d:54:5e:f5:3a:8d:c6:b3:c0:b1:b0:02:
d3:17:01:56:7f:6c:64:da:6e:b2:eb:23:c7:a3:ee:b2:30:95:
2d:fb:55:f7:ca:01:a8:7e:5c:3c:33:c8:3a:a8:41:62:e8:37:
d6:65:61:3d:a6:0d:0d:77:aa:6d:7c:b1:8f:35:2b:af:20:84:
de:c0:ae:b5:71:ea:cb:b7:a9:ee:80:70:14:bd:0d:37:31:07:
ea:94:e6:3b:e7:38:5a:72:8b:12:0c:e8:68:23:45:ee:9d:67:
e9:1f:55:2b:2c:1c:2c:3c:26:19:8c:89:38:32:89:8d:e5:b4:
f1:a6:92:bc:a7:04:ba:ee:b3:02:de:5f:fb:a8:59:70:bd:41:
51:ce:b1:4e:45:a8:3d:d6:64:e1:92:a2:f1:7f:5f:6c:e2:66:
77:08:49:80:fd:27:4f:ca:79:6a:31:a1:11:0b:af:8a:eb:8a:
d6:58:19:be:07:13:8c:cd:0b:4c:66:82:89:c4:59:e0:2a:12:
a0:15:f2:31:f5:96:45:a5:ea:74:cc:de:5d:8b:66:33:bb:f2:
06:a2:7a:28:0f:de:a1:14:1c:b6:60:23:32:9b:b3:63:1d:23:
5d:41:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:16 2025 by rpki-client