Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa
File: 4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa (raw, json)
Hash identifier: 1LrkJHOzTguh6JvPCNh6V6i/J0BR7h6wEY/GDxBjoTQ=
Subject key identifier: E0:06:59:82:BF:85:B5:9E:42:ED:47:AB:BB:18:69:52:39:AA:7E:94
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 01955D0407B2B23B560C2E4923307BE48379
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa
Signing time: Mon 03 Mar 2025 17:18:19 +0000
ROA not before: Mon 03 Mar 2025 17:18:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58074
IP address blocks: 193.169.142.0/24 maxlen: 24
194.6.201.0/24 maxlen: 24
195.78.124.0/23 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:04:07:b2:b2:3b:56:0c:2e:49:23:30:7b:e4:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Mar 3 17:18:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0065982bf85b59e42ed47abbb18695239aa7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:6c:2b:9e:29:2f:55:30:f4:82:38:26:14:
99:31:cf:b4:7e:2e:b5:c1:f6:85:56:6d:ba:4c:a3:
6d:d4:92:2d:bb:b1:cb:0d:95:ed:91:d3:74:9e:1c:
30:fc:b4:26:72:1e:17:98:41:1c:68:e9:2c:56:03:
f4:da:ba:cf:ce:5f:89:11:41:4e:a2:9f:28:91:03:
89:d1:9b:26:1d:3f:95:09:7b:40:6e:c4:83:60:31:
45:b2:54:2d:c2:0c:2d:57:be:5e:53:e6:0e:52:5c:
9e:9e:2a:ff:4a:bc:bd:e0:1e:78:69:32:6e:9a:24:
4c:6e:50:2c:12:0f:5c:11:60:2b:c7:1f:4b:b3:f2:
b0:99:6d:fe:62:c2:19:26:45:a0:d1:40:81:22:76:
11:ef:4b:2d:68:91:e2:50:35:22:57:60:f7:18:e7:
78:60:f0:59:f1:8f:48:17:d2:6a:34:1c:88:56:a0:
9f:92:e7:d7:32:4e:9e:61:09:7f:f2:f0:24:da:97:
35:01:d1:29:4c:ca:f0:d6:00:be:eb:5b:a9:8c:2d:
d1:28:f5:43:38:14:d0:86:c9:bd:31:84:79:60:a3:
bf:67:f9:68:85:66:84:ac:98:8d:49:5c:73:51:42:
06:59:86:0f:1d:0b:95:b2:20:f4:7b:b6:c4:ec:79:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:06:59:82:BF:85:B5:9E:42:ED:47:AB:BB:18:69:52:39:AA:7E:94
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/24
194.6.201.0/24
195.78.124.0/23
195.88.38.0/23
195.245.82.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1b:2d:36:78:1a:88:f7:cc:29:17:eb:1d:93:31:d9:39:c3:
8f:f3:35:41:d8:d5:78:ec:d8:15:b2:e8:47:e3:c7:58:5c:70:
37:6f:80:cb:06:ab:c5:cb:72:68:a1:29:f3:48:6a:c9:f6:8c:
8d:04:e6:b6:54:b4:38:4c:28:9d:15:cb:85:3b:c3:da:16:be:
79:3e:d8:3d:80:00:36:21:4d:4a:8a:0b:94:d5:4d:15:6d:d3:
65:8e:d7:2c:99:a9:9e:16:41:a2:64:e7:f4:a3:d9:f0:f9:1a:
d0:41:7f:13:29:13:aa:21:fe:5c:c4:08:a7:7f:64:6d:88:87:
c0:2b:ee:10:83:73:1b:d4:0c:3e:c4:7f:ab:f4:46:21:04:50:
2a:bd:66:2a:ea:5a:7e:97:57:e8:d7:38:60:9b:78:ec:f0:cc:
2b:0d:37:37:62:9e:ad:63:21:01:c6:ef:3c:c0:7d:3b:ea:41:
79:67:bb:e8:fc:36:d9:40:c9:99:0f:7f:44:f3:62:2d:6b:bf:
c5:28:88:bc:f1:fd:c1:60:1c:b1:9c:46:3d:83:44:1f:53:23:
4c:2c:2d:16:d0:7e:47:7f:1a:3d:d5:83:12:9d:cd:46:89:f1:
8c:83:05:97:13:8c:f3:47:60:5a:84:78:95:ab:d2:47:a8:a3:
b0:48:6d:b5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZVdBAeysjtWDC5JIzB75IN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjUwMzAzMTcxODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA2NTk4MmJmODViNTllNDJlZDQ3YWJiYjE4Njk1MjM5YWE3ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdsK54pL1Uw9II4JhSZMc+0fi61
wfaFVm26TKNt1JItu7HLDZXtkdN0nhww/LQmch4XmEEcaOksVgP02rrPzl+JEUFO
op8okQOJ0ZsmHT+VCXtAbsSDYDFFslQtwgwtV75eU+YOUlyenir/Sry94B54aTJu
miRMblAsEg9cEWArxx9Ls/KwmW3+YsIZJkWg0UCBInYR70staJHiUDUiV2D3GOd4
YPBZ8Y9IF9JqNByIVqCfkufXMk6eYQl/8vAk2pc1AdEpTMrw1gC+61upjC3RKPVD
OBTQhsm9MYR5YKO/Z/lohWaErJiNSVxzUUIGWYYPHQuVsiD0e7bE7HkBcwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOAGWYK/hbWeQu1Hq7sYaVI5qn6UMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvNEFaWmdyLUZ0WjVDN1VlcnV4aHBVam1xZnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwamOAwQA
wgbJAwQBw058AwQBw1gmAwQAw/VSMA0GCSqGSIb3DQEBCwUAA4IBAQAyGy02eBqI
98wpF+sdkzHZOcOP8zVB2NV47NgVsuhH48dYXHA3b4DLBqvFy3JooSnzSGrJ9oyN
BOa2VLQ4TCidFcuFO8PaFr55Ptg9gAA2IU1KiguU1U0VbdNljtcsmameFkGiZOf0
o9nw+RrQQX8TKROqIf5cxAinf2RtiIfAK+4Qg3Mb1Aw+xH+r9EYhBFAqvWYq6lp+
l1fo1zhgm3js8MwrDTc3Yp6tYyEBxu88wH076kF5Z7vo/DbZQMmZD39E82Ita7/F
KIi88f3BYByxnEY9g0QfUyNMLC0W0H5Hfxo91YMSnc1GifGMgwWXE4zzR2BahHiV
q9JHqKOwSG21
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:32:30 2025 by rpki-client