Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/IEpIdrCrgoruzvNRphWAKjLFvck.roa
File: IEpIdrCrgoruzvNRphWAKjLFvck.roa (raw, json)
Hash identifier: 1hcuHiArqaJrsWO8fxvod3HELsUVIN5XphYvjL0kx6I=
Subject key identifier: 20:4A:48:76:B0:AB:82:8A:EE:CE:F3:51:A6:15:80:2A:32:C5:BD:C9
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 0194CB6561B54C21FEA45A055D1F23FD1907
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/IEpIdrCrgoruzvNRphWAKjLFvck.roa
Signing time: Mon 03 Feb 2025 10:40:06 +0000
ROA not before: Mon 03 Feb 2025 10:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13174
IP address blocks: 213.87.0.0/19 maxlen: 19
213.87.0.0/21 maxlen: 21
213.87.16.0/21 maxlen: 21
213.87.24.0/21 maxlen: 21
213.87.32.0/21 maxlen: 21
213.87.32.0/23 maxlen: 23
213.87.36.0/22 maxlen: 22
213.87.44.0/22 maxlen: 22
213.87.48.0/21 maxlen: 21
213.87.48.0/22 maxlen: 22
213.87.50.0/23 maxlen: 23
213.87.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:65:61:b5:4c:21:fe:a4:5a:05:5d:1f:23:fd:19:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Feb 3 10:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=204a4876b0ab828aeecef351a615802a32c5bdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:4c:07:3e:f4:b3:bc:73:c8:67:9e:35:89:
17:25:89:a0:d5:4e:78:75:9b:9c:73:dc:df:aa:1f:
49:4a:64:b1:f3:6c:8d:77:09:30:50:c8:f5:6a:1d:
c8:fe:e1:29:29:b2:8b:69:d1:fc:16:48:af:49:15:
42:fa:49:23:bd:8e:14:e2:48:5b:42:4f:e4:02:ba:
3e:4d:44:0d:48:bc:36:e9:67:6a:19:bb:4e:ad:72:
1b:ef:9b:6f:2f:cf:ea:48:ee:44:4d:20:e5:97:05:
e3:de:24:fb:16:b5:9c:6e:91:f2:8a:88:4f:98:ef:
bc:7e:39:b4:58:f3:45:3c:c4:f8:7d:2a:d9:fd:9b:
f2:ca:37:c5:7e:2e:45:57:ad:e6:c0:f5:97:c4:7a:
42:2e:4e:69:71:aa:84:da:06:6d:9a:d0:d6:cc:7c:
c7:43:bc:ef:15:0d:44:fd:ef:82:d0:9f:8c:f4:1a:
1d:50:12:23:ce:6e:5e:75:8a:f6:2d:b1:ec:62:37:
13:9b:60:b8:33:90:a8:4a:35:15:aa:6c:5f:ee:fc:
f4:7b:73:f7:f1:74:c3:ab:e6:ff:c8:a5:a0:92:d3:
20:37:ad:49:ba:30:a8:e1:58:ea:a0:70:96:59:71:
80:28:15:a6:96:1b:1c:d7:53:36:6e:af:e8:7d:31:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4A:48:76:B0:AB:82:8A:EE:CE:F3:51:A6:15:80:2A:32:C5:BD:C9
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/IEpIdrCrgoruzvNRphWAKjLFvck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.87.0.0-213.87.39.255
213.87.44.0-213.87.55.255
Signature Algorithm: sha256WithRSAEncryption
6c:80:a7:fc:ed:f5:d1:d6:29:1a:74:d5:51:d6:34:7a:c8:41:
8d:32:9b:77:05:c9:5b:d6:1f:c0:c7:0c:47:0d:c4:a0:a6:4c:
ce:6c:7b:3d:9c:15:03:90:cb:34:53:e1:57:be:57:ea:1d:f2:
ca:c5:c2:25:74:48:82:7f:55:a8:34:e1:23:0f:7e:2d:31:d5:
c3:3e:27:06:ca:c1:fe:8d:57:9e:00:00:05:cf:7c:38:f0:cc:
d1:2b:34:e3:d5:87:ed:06:6d:6e:04:62:c5:c1:b8:3b:70:53:
d9:7f:7d:21:fa:74:38:75:ae:31:6b:17:5f:af:fb:d2:a2:8e:
02:b0:1f:dc:fd:5b:d6:d7:17:df:8e:71:ee:f1:61:b4:28:56:
73:d3:c0:65:0c:6d:78:34:61:93:88:e6:b9:a3:c7:a9:4f:c1:
d4:91:62:f6:b4:72:53:a7:b4:40:83:1e:d5:ad:f1:d2:d3:c9:
de:fe:e0:29:6c:df:53:35:53:22:00:b6:46:23:f0:fc:c2:da:
57:41:a9:8c:be:58:bb:f1:62:f9:30:15:af:1e:a4:72:64:b2:
64:8f:73:30:57:d9:38:db:bf:25:3d:b9:1d:81:f6:9f:9a:14:
06:8f:d1:51:1e:99:c4:68:be:21:11:a7:55:7f:a4:d3:72:e7:
b1:bf:a3:11
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZTLZWG1TCH+pFoFXR8j/RkHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjUwMjAzMTA0MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDRhNDg3NmIwYWI4MjhhZWVjZWYzNTFhNjE1ODAyYTMyYzViZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA289MBz70s7xzyGeeNYkXJYmg1U54
dZucc9zfqh9JSmSx82yNdwkwUMj1ah3I/uEpKbKLadH8FkivSRVC+kkjvY4U4khb
Qk/kAro+TUQNSLw26WdqGbtOrXIb75tvL8/qSO5ETSDllwXj3iT7FrWcbpHyiohP
mO+8fjm0WPNFPMT4fSrZ/ZvyyjfFfi5FV63mwPWXxHpCLk5pcaqE2gZtmtDWzHzH
Q7zvFQ1E/e+C0J+M9BodUBIjzm5edYr2LbHsYjcTm2C4M5CoSjUVqmxf7vz0e3P3
8XTDq+b/yKWgktMgN61JujCo4VjqoHCWWXGAKBWmlhsc11M2bq/ofTGgdQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCBKSHawq4KK7s7zUaYVgCoyxb3JMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEvSUVwSWRyQ3Jnb3J1enZOUnBoV0FLakxGdmNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDAwDVVwME
A9VXIDAMAwQC1VcsAwQD1VcwMA0GCSqGSIb3DQEBCwUAA4IBAQBsgKf87fXR1ika
dNVR1jR6yEGNMpt3Bclb1h/AxwxHDcSgpkzObHs9nBUDkMs0U+FXvlfqHfLKxcIl
dEiCf1WoNOEjD34tMdXDPicGysH+jVeeAAAFz3w48MzRKzTj1YftBm1uBGLFwbg7
cFPZf30h+nQ4da4xaxdfr/vSoo4CsB/c/VvW1xffjnHu8WG0KFZz08BlDG14NGGT
iOa5o8epT8HUkWL2tHJTp7RAgx7VrfHS08ne/uApbN9TNVMiALZGI/D8wtpXQamM
vli78WL5MBWvHqRyZLJkj3MwV9k4278lPbkdgfafmhQGj9FRHpnEaL4hEadVf6TT
cuexv6MR
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:56 2025 by rpki-client