Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/R4scpsswEHtZHUE-nwU3HaURKXg.roa
File: R4scpsswEHtZHUE-nwU3HaURKXg.roa (raw, json)
Hash identifier: og9/o35XSt8h5Pisf2/20OBVwfKzhDJ2QToFc39vgzg=
Subject key identifier: 47:8B:1C:A6:CB:30:10:7B:59:1D:41:3E:9F:05:37:1D:A5:11:29:78
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 019426D99AD75AF4471CB52EF4865F965287
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/R4scpsswEHtZHUE-nwU3HaURKXg.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 79.142.188.0/24 maxlen: 24
79.142.189.0/24 maxlen: 24
79.142.190.0/24 maxlen: 24
79.142.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9a:d7:5a:f4:47:1c:b5:2e:f4:86:5f:96:52:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=478b1ca6cb30107b591d413e9f05371da5112978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:f7:b4:ba:2c:c3:92:57:69:41:b5:e2:11:
5a:10:a8:08:48:92:37:a8:e7:b9:cb:e2:a6:a9:38:
d3:4b:e6:95:0a:7c:c0:85:f3:b4:79:5f:fb:7d:b3:
51:64:dd:26:cf:67:a8:f2:57:5b:7a:8f:1e:db:55:
dd:1f:ba:a4:1c:8d:28:23:e3:2a:50:a5:d9:a2:28:
b9:5f:ac:fc:88:b1:6e:23:d9:8d:51:c7:df:6d:29:
0e:3e:d6:e6:5e:e1:cb:1e:e1:d9:5a:69:fd:98:b5:
1e:1d:14:dc:d0:8d:07:8a:e1:ce:45:ea:aa:5e:ea:
69:e7:1d:3c:99:7e:08:89:0c:7a:5d:9f:01:83:68:
9d:2f:68:a6:d2:fe:33:b8:d0:b1:a9:80:6a:8e:02:
d8:c1:68:34:7d:00:f1:7a:f9:cc:0a:ac:05:77:83:
c9:f6:72:6b:a6:0c:6e:91:ee:c9:fb:58:fe:80:cd:
d9:de:11:42:e0:4c:9f:4f:b4:78:ad:02:0c:f3:c3:
2c:ed:5c:07:49:55:39:cf:9b:6f:e7:17:3f:2c:dd:
48:50:3d:19:25:db:e1:7e:5d:20:e7:d4:e3:c4:c9:
d2:c2:5c:e7:21:13:5e:fc:6c:3c:d3:39:7c:2d:b5:
e3:c1:5d:13:2d:95:8b:74:ba:d7:dc:cc:75:52:f1:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8B:1C:A6:CB:30:10:7B:59:1D:41:3E:9F:05:37:1D:A5:11:29:78
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/R4scpsswEHtZHUE-nwU3HaURKXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:b0:de:ce:26:c5:64:c9:ae:91:97:2e:4d:1a:51:0e:32:35:
d2:af:b9:e0:50:65:1c:1b:ca:6d:07:e0:17:78:08:bb:d8:eb:
b4:9a:ef:c9:25:ce:3f:a1:1d:a8:27:a3:df:c3:c7:4f:d4:f8:
6c:a1:5d:96:d5:73:01:e8:bf:c9:ac:ba:e9:43:6e:47:c5:fe:
dd:48:7d:f8:fb:0c:67:fc:59:4f:ba:d1:0c:e5:1f:fe:72:b6:
19:f5:6f:c9:c9:b0:c7:d2:e9:ce:cf:b2:d9:8c:76:6c:da:f5:
ed:88:86:3e:91:d8:61:bf:5d:3a:42:3d:6d:44:44:31:65:65:
fe:14:79:67:5b:1c:87:89:c2:b8:57:49:be:f3:cb:c8:78:40:
d2:d4:c5:bf:71:9b:bb:33:06:cc:07:2b:77:94:1d:c0:9f:cb:
86:db:59:bc:26:e8:8c:9a:5c:6e:3e:05:3b:9b:1c:9f:c8:7f:
3e:ee:a2:3d:7d:fe:7d:08:fc:8b:39:d5:fa:b4:a0:5a:10:37:
ee:44:ca:32:1e:13:c1:02:e6:18:8b:cd:31:08:27:45:52:c2:
56:9e:59:18:ac:15:9c:c4:52:d8:1e:9c:25:aa:42:39:28:23:
8c:7d:4b:ff:7c:33:3e:45:fc:f4:20:56:42:ff:b0:63:1e:f2:
bb:1e:50:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2ZrXWvRHHLUu9IZfllKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2
NWRjNWIwHhcNMjUwMTAyMTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzhiMWNhNmNiMzAxMDdiNTkxZDQxM2U5ZjA1MzcxZGE1MTEyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4673tLosw5JXaUG14hFaEKgISJI3
qOe5y+KmqTjTS+aVCnzAhfO0eV/7fbNRZN0mz2eo8ldbeo8e21XdH7qkHI0oI+Mq
UKXZoii5X6z8iLFuI9mNUcffbSkOPtbmXuHLHuHZWmn9mLUeHRTc0I0HiuHOReqq
Xupp5x08mX4IiQx6XZ8Bg2idL2im0v4zuNCxqYBqjgLYwWg0fQDxevnMCqwFd4PJ
9nJrpgxuke7J+1j+gM3Z3hFC4EyfT7R4rQIM88Ms7VwHSVU5z5tv5xc/LN1IUD0Z
Jdvhfl0g59TjxMnSwlznIRNe/Gw80zl8LbXjwV0TLZWLdLrX3Mx1UvGpYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEeLHKbLMBB7WR1BPp8FNx2lESl4MB8GA1UdIwQY
MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt
MWRjMGI4NGExYzdlLzEvUjRzY3Bzc3dFSHRaSFVFLW53VTNIYVVSS1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl
LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCT468MA0G
CSqGSIb3DQEBCwUAA4IBAQCLsN7OJsVkya6Rly5NGlEOMjXSr7ngUGUcG8ptB+AX
eAi72Ou0mu/JJc4/oR2oJ6Pfw8dP1PhsoV2W1XMB6L/JrLrpQ25Hxf7dSH34+wxn
/FlPutEM5R/+crYZ9W/JybDH0unOz7LZjHZs2vXtiIY+kdhhv106Qj1tREQxZWX+
FHlnWxyHicK4V0m+88vIeEDS1MW/cZu7MwbMByt3lB3An8uG21m8JuiMmlxuPgU7
mxyfyH8+7qI9ff59CPyLOdX6tKBaEDfuRMoyHhPBAuYYi80xCCdFUsJWnlkYrBWc
xFLYHpwlqkI5KCOMfUv/fDM+Rfz0IFZC/7BjHvK7HlBn
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:01 2025 by rpki-client