Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4EVIucA70gYtRBC_kvd8S_jO4G4.roa
File: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (raw, json)
Hash identifier: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=
Subject key identifier: E0:45:48:B9:C0:3B:D2:06:2D:44:10:BF:92:F7:7C:4B:F8:CE:E0:6E
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019549F18504003EA9F4A1C206BD21F28A68
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4EVIucA70gYtRBC_kvd8S_jO4G4.roa
Signing time: Fri 28 Feb 2025 00:25:19 +0000
ROA not before: Fri 28 Feb 2025 00:25:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213501
IP address blocks: 2a0d:d940:9003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:49:f1:85:04:00:3e:a9:f4:a1:c2:06:bd:21:f2:8a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Feb 28 00:25:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e04548b9c03bd2062d4410bf92f77c4bf8cee06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:58:c1:eb:4e:b7:51:c4:55:85:5e:66:37:
73:27:b9:7f:16:c4:60:b3:71:b7:43:6e:64:45:a9:
79:18:42:42:e2:29:ac:90:29:17:7a:1d:a8:7b:0e:
7f:76:b6:21:c4:a1:ff:af:9c:e1:4d:fa:27:e9:af:
49:fd:d6:7d:8a:3e:78:75:d2:99:61:fc:84:44:ec:
aa:14:a0:59:5f:d6:57:1b:44:03:d6:58:8d:8b:99:
b8:16:40:85:2a:cd:1d:fc:18:e2:c5:36:c4:28:40:
fa:6c:4d:9d:14:3d:0f:43:02:5a:9d:37:88:9c:28:
75:93:72:35:4e:e3:c4:d6:d6:ea:0b:68:79:66:49:
6b:c3:7b:cc:19:6d:d7:00:7c:96:a6:e5:b2:92:a5:
15:85:87:55:0b:41:ba:65:f4:3e:5b:8a:a6:a9:6f:
56:b6:ab:2e:36:91:d6:fd:4b:12:61:68:83:2a:a1:
22:a3:af:33:d8:1a:1e:29:8b:9f:08:70:43:3e:00:
7b:c5:fc:06:96:61:36:ef:b5:2a:88:79:f9:14:48:
21:f3:3a:b1:4e:ea:15:40:00:a9:08:09:d0:bd:34:
7f:17:20:9d:ae:a9:1b:3f:1e:17:32:c2:a1:d9:fe:
13:db:84:6e:12:26:bd:cd:bb:78:b7:99:ff:e5:12:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:45:48:B9:C0:3B:D2:06:2D:44:10:BF:92:F7:7C:4B:F8:CE:E0:6E
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/4EVIucA70gYtRBC_kvd8S_jO4G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:9003::/48
Signature Algorithm: sha256WithRSAEncryption
6c:31:0b:20:a7:e6:f0:ef:2c:41:2d:4f:18:99:73:6e:fd:9e:
7b:19:64:0c:89:81:12:04:53:66:86:2a:f2:b7:0d:60:e9:b7:
ce:cf:c4:20:a9:3a:52:f0:c5:a1:9f:23:2b:7f:69:d3:c4:06:
8e:73:1b:a5:58:7a:9c:db:5f:5c:64:c0:9e:48:ec:c6:73:79:
1f:73:69:91:d3:f4:b5:93:ed:60:68:27:17:b7:2c:58:7b:41:
01:e8:d8:c0:de:79:96:85:5a:7f:e8:be:56:38:31:49:5f:8b:
ca:21:2a:0c:6d:74:55:d9:f3:ba:43:9b:df:38:7d:6c:6a:7a:
2e:8f:67:82:19:fd:2a:b9:2c:e3:33:48:71:c9:dd:45:c4:ef:
3e:6b:9d:68:8c:aa:64:5b:0c:c5:da:32:39:9b:97:ac:19:e1:
ea:a5:db:57:26:d4:cc:29:fa:55:e0:b8:8b:0e:37:1d:40:93:
9e:c9:b6:75:38:f5:eb:55:fd:32:85:9f:9f:ba:f0:e4:ae:0f:
4b:d2:d3:cb:38:39:91:41:7b:e0:ba:fb:0f:6c:76:68:29:87:
f2:0d:bf:d1:1d:13:66:8f:05:58:15:76:ea:01:cf:2b:42:89:
00:58:18:7b:1d:e0:75:73:a1:1b:0f:b7:77:4c:07:b4:d9:a4:
da:92:ab:2e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZVJ8YUEAD6p9KHCBr0h8opoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUwMjI4MDAyNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDQ1NDhiOWMwM2JkMjA2MmQ0NDEwYmY5MmY3N2M0YmY4Y2VlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lBYwetOt1HEVYVeZjdzJ7l/FsRg
s3G3Q25kRal5GEJC4imskCkXeh2oew5/drYhxKH/r5zhTfon6a9J/dZ9ij54ddKZ
YfyEROyqFKBZX9ZXG0QD1liNi5m4FkCFKs0d/BjixTbEKED6bE2dFD0PQwJanTeI
nCh1k3I1TuPE1tbqC2h5Zklrw3vMGW3XAHyWpuWykqUVhYdVC0G6ZfQ+W4qmqW9W
tqsuNpHW/UsSYWiDKqEio68z2BoeKYufCHBDPgB7xfwGlmE277UqiHn5FEgh8zqx
TuoVQACpCAnQvTR/FyCdrqkbPx4XMsKh2f4T24RuEia9zbt4t5n/5RLnQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOBFSLnAO9IGLUQQv5L3fEv4zuBuMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvNEVWSXVjQTcwZ1l0UkJDX2t2ZDhTX2pPNEc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg3ZQJAD
MA0GCSqGSIb3DQEBCwUAA4IBAQBsMQsgp+bw7yxBLU8YmXNu/Z57GWQMiYESBFNm
hirytw1g6bfOz8QgqTpS8MWhnyMrf2nTxAaOcxulWHqc219cZMCeSOzGc3kfc2mR
0/S1k+1gaCcXtyxYe0EB6NjA3nmWhVp/6L5WODFJX4vKISoMbXRV2fO6Q5vfOH1s
anouj2eCGf0quSzjM0hxyd1FxO8+a51ojKpkWwzF2jI5m5esGeHqpdtXJtTMKfpV
4LiLDjcdQJOeybZ1OPXrVf0yhZ+fuvDkrg9L0tPLODmRQXvguvsPbHZoKYfyDb/R
HRNmjwVYFXbqAc8rQokAWBh7HeB1c6EbD7d3TAe02aTakqsu
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:41 2025 by rpki-client