Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1RgkxaT3trlcWJ_d2Id80-hh7mo.roa
File: 1RgkxaT3trlcWJ_d2Id80-hh7mo.roa (raw, json)
Hash identifier: u4inV2GcSC1By83cUxCpIznGqV2yO4zF13YuBN76JRg=
Subject key identifier: D5:18:24:C5:A4:F7:B6:B9:5C:58:9F:DD:D8:87:7C:D3:E8:61:EE:6A
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4D51B6ACF3E901D8C2C327CBDD41
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1RgkxaT3trlcWJ_d2Id80-hh7mo.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198335
IP address blocks: 213.198.104.0/21 maxlen: 24
213.198.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4d:51:b6:ac:f3:e9:01:d8:c2:c3:27:cb:dd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51824c5a4f7b6b95c589fddd8877cd3e861ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:b3:cf:e3:c9:4b:39:3b:2c:3f:f8:05:22:
c5:e1:2b:51:bf:b9:95:2c:1e:89:90:91:d2:e1:53:
f7:eb:0f:a8:45:c5:ce:5f:65:df:73:f5:a3:13:0b:
21:2f:bf:68:16:04:47:87:c0:db:42:ed:d6:a5:02:
dd:f9:2e:63:bd:56:c5:66:0f:a0:f0:b4:b8:14:8a:
ee:a1:96:a8:ce:0c:90:0d:2e:2a:3e:05:b5:7f:94:
19:24:45:d4:d8:45:48:95:e6:42:f9:c9:04:60:a4:
f4:14:91:a5:86:ab:79:9b:41:86:e1:36:06:ec:22:
28:9a:16:41:db:a9:33:d2:94:67:29:2a:0b:c8:ce:
26:c7:18:33:ab:91:cd:e0:5e:d7:be:53:ac:83:79:
1a:87:99:2c:b3:f3:52:23:c1:69:de:e2:a7:76:9a:
03:ac:f1:c9:b2:5a:d4:9b:77:24:d1:69:b5:0b:72:
6a:55:33:8c:33:37:95:1c:b2:7a:6f:77:43:b2:df:
86:02:46:77:5f:43:be:62:74:16:ab:c2:d6:f0:6b:
5a:1d:a9:ca:ac:46:9a:18:be:08:bd:dd:a9:b9:79:
5f:36:1e:cf:28:9c:52:6d:ab:02:78:6a:15:7d:bd:
28:7a:cd:dd:c9:07:a2:fb:f7:d8:26:83:fb:d7:f9:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:18:24:C5:A4:F7:B6:B9:5C:58:9F:DD:D8:87:7C:D3:E8:61:EE:6A
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1RgkxaT3trlcWJ_d2Id80-hh7mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.104.0/21
Signature Algorithm: sha256WithRSAEncryption
25:71:de:6d:21:6d:8c:a7:b6:f3:c3:b8:08:bb:f3:dc:0b:aa:
f3:e8:a8:05:b0:c2:9d:a1:77:b8:45:8d:ce:02:27:6d:9b:a9:
ad:32:79:be:b6:28:b6:24:7d:6e:6c:d4:6c:3f:94:89:df:89:
88:1a:2a:34:0c:ff:02:32:dc:d7:e6:d6:5a:a3:d3:4d:1d:17:
e2:56:34:89:3d:ae:66:2b:6f:e2:cd:c2:98:ae:d9:4b:91:b9:
7d:51:3c:9f:4b:64:f2:48:36:24:37:7d:81:5c:d3:e5:7f:0b:
bc:c0:32:16:cb:ab:43:ea:15:d5:80:e1:7d:7b:d9:a0:04:c2:
49:6b:30:ff:82:49:90:0f:11:0a:a4:8b:d3:5b:41:5f:e0:2e:
1b:cd:6c:59:26:49:33:4d:9c:44:c6:bd:20:89:74:7b:89:b8:
1c:9f:d0:f6:95:22:30:20:33:08:1b:b7:8c:bb:aa:c7:dc:5d:
41:75:7a:5b:ec:ca:2b:91:fb:0d:43:7f:a5:55:a9:16:e4:ca:
29:2a:66:fc:c2:b5:64:bb:2b:8e:cb:a3:76:7a:99:c5:d6:9f:
6e:65:1c:97:1e:93:51:f6:46:98:b3:a0:5d:35:cd:6a:2e:cd:
23:1e:1d:05:a2:e3:45:c3:06:8b:ab:3d:4a:38:b8:60:fc:ab:
bf:cb:ad:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj01Rtqzz6QHYwsMny91BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjUwMTAyMDU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTE4MjRjNWE0ZjdiNmI5NWM1ODlmZGRkODg3N2NkM2U4NjFlZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Gzz+PJSzk7LD/4BSLF4StRv7mV
LB6JkJHS4VP36w+oRcXOX2Xfc/WjEwshL79oFgRHh8DbQu3WpQLd+S5jvVbFZg+g
8LS4FIruoZaozgyQDS4qPgW1f5QZJEXU2EVIleZC+ckEYKT0FJGlhqt5m0GG4TYG
7CIomhZB26kz0pRnKSoLyM4mxxgzq5HN4F7XvlOsg3kah5kss/NSI8Fp3uKndpoD
rPHJslrUm3ck0Wm1C3JqVTOMMzeVHLJ6b3dDst+GAkZ3X0O+YnQWq8LW8GtaHanK
rEaaGL4Ivd2puXlfNh7PKJxSbasCeGoVfb0oes3dyQei+/fYJoP71/kQrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUYJMWk97a5XFif3diHfNPoYe5qMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvMVJna3hhVDN0cmxjV0pfZDJJZDgwLWhoN21vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1cZoMA0G
CSqGSIb3DQEBCwUAA4IBAQAlcd5tIW2Mp7bzw7gIu/PcC6rz6KgFsMKdoXe4RY3O
Aidtm6mtMnm+tii2JH1ubNRsP5SJ34mIGio0DP8CMtzX5tZao9NNHRfiVjSJPa5m
K2/izcKYrtlLkbl9UTyfS2TySDYkN32BXNPlfwu8wDIWy6tD6hXVgOF9e9mgBMJJ
azD/gkmQDxEKpIvTW0Ff4C4bzWxZJkkzTZxExr0giXR7ibgcn9D2lSIwIDMIG7eM
u6rH3F1BdXpb7MorkfsNQ3+lVakW5MopKmb8wrVkuyuOy6N2epnF1p9uZRyXHpNR
9kaYs6BdNc1qLs0jHh0FouNFwwaLqz1KOLhg/Ku/y62D
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:30 2025 by rpki-client