Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4FL_MopJIrHEPZ9-l6czVUEFptM.roa
File: 4FL_MopJIrHEPZ9-l6czVUEFptM.roa (raw, json)
Hash identifier: tb0m4/lMN4BcQbyFp5B9pMCtlUVUJU+5d+EnpLrYGiA=
Subject key identifier: E0:52:FF:32:8A:49:22:B1:C4:3D:9F:7E:97:A7:33:55:41:05:A6:D3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A39B90F8320B31BB93E880F8257C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4FL_MopJIrHEPZ9-l6czVUEFptM.roa
Signing time: Thu 02 Jan 2025 17:51:17 +0000
ROA not before: Thu 02 Jan 2025 17:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199239
IP address blocks: 185.226.173.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a3:9b:90:f8:32:0b:31:bb:93:e8:80:f8:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e052ff328a4922b1c43d9f7e97a733554105a6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:8b:51:69:8f:49:f1:ac:d1:fe:94:98:f8:
b7:00:06:b2:88:98:7d:6e:d6:5b:9a:86:2d:67:5a:
e6:70:ad:26:78:14:8e:08:83:85:cb:2a:0a:b0:92:
4e:a6:a5:c4:9b:65:41:c0:0f:46:1f:91:9b:3d:a8:
b9:3d:86:db:4b:7c:41:81:2e:38:6b:d8:58:0d:0a:
d1:99:59:94:cf:bd:e8:da:b5:0b:6e:ca:c1:7d:39:
e3:fc:35:3a:f4:34:c2:87:f9:e4:d5:0e:1d:76:06:
a8:28:20:76:9c:b1:63:ad:6e:54:b3:e0:54:de:6e:
01:f1:28:16:e6:93:5f:1b:97:11:22:91:73:19:04:
ba:d4:30:67:3f:0f:90:8e:ad:75:89:ec:54:0d:e4:
0e:68:91:df:18:8a:0e:c4:6f:05:44:3e:21:85:3b:
83:61:5b:17:39:4d:7c:6e:44:88:79:f9:8c:7f:55:
92:16:ce:a9:d5:16:88:5c:25:85:25:33:c9:7c:68:
51:c2:82:63:3b:6e:bd:f1:86:31:6b:09:fa:e1:52:
3f:78:87:78:e8:95:f9:9e:45:d2:e5:fb:bd:81:39:
d9:98:8b:83:45:41:e7:3b:00:b0:fd:c7:ff:86:6e:
ac:8d:77:b3:52:bc:42:63:a9:40:a4:72:46:c3:12:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:52:FF:32:8A:49:22:B1:C4:3D:9F:7E:97:A7:33:55:41:05:A6:D3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4FL_MopJIrHEPZ9-l6czVUEFptM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.173.0/24
185.226.175.0/24
Signature Algorithm: sha256WithRSAEncryption
28:34:5e:7a:1f:a4:d5:cf:12:7f:5b:08:30:38:00:c6:7f:bb:
5a:c3:1d:50:4b:6e:2b:0f:06:7e:37:91:c5:73:18:30:8d:4c:
19:1f:c3:6e:17:44:99:0e:5b:19:a1:56:7d:d3:98:49:2c:d1:
13:24:d6:8d:e2:33:da:ce:53:56:71:68:b6:f6:ae:6c:bf:af:
61:6c:82:48:ab:fd:fb:2a:d3:41:a7:af:e7:10:57:27:ed:f0:
5c:3f:68:35:60:2b:d9:1c:4c:fa:21:06:d4:ae:f6:f4:5b:7a:
70:23:dd:9b:5d:9d:fe:ac:89:69:b4:46:82:33:66:fc:5a:f4:
4c:59:bd:d8:25:59:e5:79:4d:67:84:dc:90:4e:64:1d:b3:7f:
57:de:79:80:dc:8c:69:89:1c:85:5e:7f:96:50:07:ac:7d:27:
0b:70:89:85:91:c7:09:45:ec:e2:9d:fc:52:40:43:3c:90:2b:
ca:6c:53:3a:e2:ee:b7:1d:ab:89:fa:71:a2:3b:de:57:bc:cf:
2c:65:d5:f5:21:93:5f:89:a6:9b:fb:06:54:28:4a:b7:12:ac:
c5:c9:09:99:72:8f:00:60:ac:43:0c:09:c9:f4:1e:a2:50:90:
a7:3b:1e:b4:fb:19:d4:6b:ab:2a:72:52:ce:fc:07:04:c4:dd:
b5:13:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:09 2025 by rpki-client