Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/E4X29T5PIFttxKq8EE38HPjpzXo.roa
File: E4X29T5PIFttxKq8EE38HPjpzXo.roa (raw, json)
Hash identifier: xJD9cI/sTuw6YTXkaJSB88L1OwC4kEF2x+8kBxXooCk=
Subject key identifier: 13:85:F6:F5:3E:4F:20:5B:6D:C4:AA:BC:10:4D:FC:1C:F8:E9:CD:7A
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01951AE66A2D380C620CA033B0E0A54F11C4
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/E4X29T5PIFttxKq8EE38HPjpzXo.roa
Signing time: Tue 18 Feb 2025 21:11:02 +0000
ROA not before: Tue 18 Feb 2025 21:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54903
IP address blocks: 95.164.128.0/21 maxlen: 24
95.164.136.0/21 maxlen: 24
95.164.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:e6:6a:2d:38:0c:62:0c:a0:33:b0:e0:a5:4f:11:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Feb 18 21:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1385f6f53e4f205b6dc4aabc104dfc1cf8e9cd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:51:a6:8b:de:07:a0:95:43:94:5f:ac:21:
ec:2b:3a:4b:4a:12:72:38:68:b8:93:98:06:78:b0:
01:86:0d:6f:94:f5:9c:94:07:a2:d1:af:a6:cd:cb:
fc:c3:d4:0e:5d:82:57:6e:a5:06:ff:8e:5a:c7:4f:
2d:91:1c:a8:77:ac:8a:37:36:b9:ca:56:71:44:c4:
f3:d8:f7:71:c2:5f:34:b8:29:c7:ea:21:f8:d2:5c:
1e:6c:64:72:19:c3:27:3a:33:65:4c:98:e2:c4:fb:
01:c1:25:4a:e3:60:80:c9:77:82:66:2d:f0:05:63:
15:ca:35:84:1d:39:6b:78:ed:0a:46:90:be:c3:c7:
91:93:56:3e:15:1b:b0:40:06:69:38:c0:c0:7d:ad:
1b:15:d4:5c:c2:18:ab:6a:5a:8b:27:2b:9e:0f:f2:
0e:f7:fb:5d:58:bd:0e:0f:bf:33:46:6f:9d:27:1b:
3a:47:1e:8e:af:f1:b3:1b:61:16:6a:fe:2f:f1:1e:
67:64:29:81:50:91:21:a9:46:05:b5:d9:20:38:aa:
28:51:35:5f:a6:bf:33:16:b9:f8:d4:ce:6c:1f:27:
ef:5d:20:be:01:3d:aa:16:28:78:85:9e:2b:f7:ca:
2a:34:51:ed:c3:36:4f:00:e8:81:a5:e3:64:c4:40:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:F6:F5:3E:4F:20:5B:6D:C4:AA:BC:10:4D:FC:1C:F8:E9:CD:7A
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/E4X29T5PIFttxKq8EE38HPjpzXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:d2:92:70:08:9d:cc:19:48:81:be:61:1a:3f:a7:e5:1f:c6:
82:22:f0:56:d5:aa:64:da:dd:9d:6a:43:6a:53:ef:c4:6a:81:
fe:e5:d7:01:67:2c:46:ca:1d:da:60:bd:97:e3:28:ed:37:4f:
5c:e2:fb:f9:3f:3a:1c:f0:21:aa:a8:ac:39:f7:f5:6b:f7:2b:
79:fb:2f:a3:61:b2:f1:73:0d:5f:47:b5:05:a2:9b:93:2c:f8:
e6:75:b8:ae:8f:51:a7:66:79:87:3e:c2:ac:6f:33:54:0e:fe:
1d:2b:ad:8c:53:5e:3e:72:51:c0:eb:00:24:9b:ec:11:66:a1:
d2:37:2e:28:52:93:f9:c6:10:77:d5:4e:31:a1:3e:eb:f6:99:
10:10:9b:57:43:d4:81:0b:a1:9f:d1:2f:ab:a0:b1:5e:4e:43:
ec:ab:3c:4a:fa:cd:68:0f:ae:86:b0:ce:81:dd:19:94:a6:f4:
2f:c9:95:f6:b0:51:f8:26:9f:6d:05:eb:59:a7:d8:1e:8f:36:
1a:c7:24:7c:b7:76:b4:44:80:04:0a:d9:65:06:bd:41:cb:d0:
1f:a1:a8:17:2c:38:b0:c0:96:9b:be:b2:9b:d1:65:d1:c2:e7:
04:ee:8c:24:b6:b7:89:7c:c8:42:47:10:bc:73:81:da:3e:07:
64:4e:01:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUa5motOAxiDKAzsOClTxHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjUwMjE4MjExMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzg1ZjZmNTNlNGYyMDViNmRjNGFhYmMxMDRkZmMxY2Y4ZTljZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQlRpoveB6CVQ5RfrCHsKzpLShJy
OGi4k5gGeLABhg1vlPWclAei0a+mzcv8w9QOXYJXbqUG/45ax08tkRyod6yKNza5
ylZxRMTz2Pdxwl80uCnH6iH40lwebGRyGcMnOjNlTJjixPsBwSVK42CAyXeCZi3w
BWMVyjWEHTlreO0KRpC+w8eRk1Y+FRuwQAZpOMDAfa0bFdRcwhiralqLJyueD/IO
9/tdWL0OD78zRm+dJxs6Rx6Or/GzG2EWav4v8R5nZCmBUJEhqUYFtdkgOKooUTVf
pr8zFrn41M5sHyfvXSC+AT2qFih4hZ4r98oqNFHtwzZPAOiBpeNkxEBSdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOF9vU+TyBbbcSqvBBN/Bz46c16MB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvRTRYMjlUNVBJRnR0eEtxOEVFMzhIUGpwelhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEX6SAMA0G
CSqGSIb3DQEBCwUAA4IBAQBK0pJwCJ3MGUiBvmEaP6flH8aCIvBW1apk2t2dakNq
U+/EaoH+5dcBZyxGyh3aYL2X4yjtN09c4vv5Pzoc8CGqqKw59/Vr9yt5+y+jYbLx
cw1fR7UFopuTLPjmdbiuj1GnZnmHPsKsbzNUDv4dK62MU14+clHA6wAkm+wRZqHS
Ny4oUpP5xhB31U4xoT7r9pkQEJtXQ9SBC6Gf0S+roLFeTkPsqzxK+s1oD66GsM6B
3RmUpvQvyZX2sFH4Jp9tBetZp9gejzYaxyR8t3a0RIAECtllBr1By9AfoagXLDiw
wJabvrKb0WXRwucE7owktreJfMhCRxC8c4HaPgdkTgHC
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:05 2025 by rpki-client