Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/4iEj4QX2YYNJxrqTkbiMkm8SwYE.roa
File: 4iEj4QX2YYNJxrqTkbiMkm8SwYE.roa (raw, json)
Hash identifier: 0H4gxxldOHCbqvdxb6HYRTzS8So899SCCQXedftyQAU=
Subject key identifier: E2:21:23:E1:05:F6:61:83:49:C6:BA:93:91:B8:8C:92:6F:12:C1:81
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 018CC2DB24B53A88A8D7FAB538898A4649C8
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/4iEj4QX2YYNJxrqTkbiMkm8SwYE.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25084
IP address blocks: 212.87.240.0/23 maxlen: 23
212.87.244.0/22 maxlen: 22
2a01:699::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:24:b5:3a:88:a8:d7:fa:b5:38:89:8a:46:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e22123e105f6618349c6ba9391b88c926f12c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:73:ef:c9:27:a1:d0:0a:0c:c3:8b:e8:e8:
df:e2:70:2d:bd:7d:e4:4a:7d:d4:4f:6d:14:b5:5d:
83:69:a0:90:36:ec:72:39:a6:d2:b9:67:33:29:b8:
11:20:ec:7b:01:86:04:f9:59:33:2c:2a:d3:cf:82:
bb:0c:87:51:40:71:1d:79:5e:e4:88:9e:8e:a7:83:
0e:9a:00:80:98:92:01:bb:bf:04:59:1c:d1:ee:77:
38:3d:d2:0a:ce:1a:22:d5:b7:bd:66:a1:43:b2:b0:
af:59:1e:d3:21:51:37:e3:b3:2c:9a:2a:89:fb:49:
41:63:8a:f9:d0:24:1a:54:06:21:d6:7f:35:cf:8a:
d8:b1:ff:10:8c:40:7f:a7:d3:61:5f:6e:60:a7:ef:
c5:e9:73:78:80:d9:ae:38:0d:68:dd:54:5f:c9:da:
56:8e:1a:87:bb:b9:06:9c:37:8e:71:33:f8:fa:c4:
f8:bc:72:70:0f:0e:3c:be:a0:42:54:e5:a0:43:94:
74:aa:46:f3:98:f5:1c:13:c0:1a:f3:3c:02:44:4e:
49:cc:57:24:36:5f:f4:f3:2c:8b:c3:fb:6f:3b:74:
d9:84:e2:8a:b8:94:46:14:3c:c9:8b:92:bc:e3:a6:
35:bd:e0:dc:78:22:10:7a:ca:68:04:ab:91:f7:2f:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:23:E1:05:F6:61:83:49:C6:BA:93:91:B8:8C:92:6F:12:C1:81
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/4iEj4QX2YYNJxrqTkbiMkm8SwYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.240.0/23
212.87.244.0/22
IPv6:
2a01:699::/32
Signature Algorithm: sha256WithRSAEncryption
97:31:1b:24:c0:98:f1:99:40:b2:99:44:0b:51:2f:70:e6:a2:
3a:fa:f4:64:03:6b:17:35:f9:e5:3b:c5:5f:47:7d:4e:f6:01:
53:8a:49:39:5a:28:21:63:60:ec:b9:11:cd:54:8a:57:4a:4c:
f7:59:59:a8:a6:84:b8:2f:28:a7:54:aa:5e:6b:09:d5:22:96:
0e:40:59:28:64:af:c8:3a:9e:ae:24:4d:17:37:c3:f6:49:1c:
11:53:b8:98:dc:4f:95:bc:9a:cd:04:e4:d3:03:97:99:c1:e0:
75:58:24:b0:1d:c6:ea:a3:56:ac:04:9a:89:11:ce:50:a2:ce:
14:0b:6e:bc:dc:10:24:a8:63:24:11:09:c2:bb:dd:15:09:9f:
a9:fe:48:66:d2:61:d1:dc:38:df:80:32:3b:6e:ea:8e:e9:cf:
ad:93:48:bf:0b:f7:86:2c:d3:ab:42:0f:05:76:0a:40:76:44:
86:75:c8:1e:a1:8b:9b:cf:f4:52:04:48:b0:f2:b3:f2:54:07:
ff:2a:e9:55:b2:e4:60:a1:82:44:8a:db:f3:6e:35:73:0d:fc:
b7:38:dd:95:68:1a:fb:5a:f0:7f:16:22:f1:6e:1e:9f:d2:2a:
15:b0:0d:8e:3b:0d:54:43:f2:80:f2:5c:a1:36:f9:e3:65:f0:
5d:38:32:3e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzC2yS1Ooio1/q1OImKRknIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2
ZDcwOTAwHhcNMjQwMTAxMDIyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjIxMjNlMTA1ZjY2MTgzNDljNmJhOTM5MWI4OGM5MjZmMTJjMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugJz78knodAKDMOL6Ojf4nAtvX3k
Sn3UT20UtV2DaaCQNuxyOabSuWczKbgRIOx7AYYE+VkzLCrTz4K7DIdRQHEdeV7k
iJ6Op4MOmgCAmJIBu78EWRzR7nc4PdIKzhoi1be9ZqFDsrCvWR7TIVE347MsmiqJ
+0lBY4r50CQaVAYh1n81z4rYsf8QjEB/p9NhX25gp+/F6XN4gNmuOA1o3VRfydpW
jhqHu7kGnDeOcTP4+sT4vHJwDw48vqBCVOWgQ5R0qkbzmPUcE8Aa8zwCRE5JzFck
Nl/08yyLw/tvO3TZhOKKuJRGFDzJi5K846Y1veDceCIQespoBKuR9y8ShQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOIhI+EF9mGDSca6k5G4jJJvEsGBMB8GA1UdIwQY
MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt
MDc4N2E1MDNjYTY5LzEvNGlFajRRWDJZWU5KeHJxVGtiaU1rbThTd1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5
LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQB1FfwAwQC
1Ff0MA0EAgACMAcDBQAqAQaZMA0GCSqGSIb3DQEBCwUAA4IBAQCXMRskwJjxmUCy
mUQLUS9w5qI6+vRkA2sXNfnlO8VfR31O9gFTikk5WighY2DsuRHNVIpXSkz3WVmo
poS4LyinVKpeawnVIpYOQFkoZK/IOp6uJE0XN8P2SRwRU7iY3E+VvJrNBOTTA5eZ
weB1WCSwHcbqo1asBJqJEc5Qos4UC2683BAkqGMkEQnCu90VCZ+p/khm0mHR3Djf
gDI7buqO6c+tk0i/C/eGLNOrQg8FdgpAdkSGdcgeoYubz/RSBEiw8rPyVAf/KulV
suRgoYJEitvzbjVzDfy3ON2VaBr7WvB/FiLxbh6f0ioVsA2OOw1UQ/KA8lyhNvnj
ZfBdODI+
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:16:37 2024 by rpki-client on console-ams.rpki-client.org