Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa
File: iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa (raw, json)
Hash identifier: bD+y12vYe0rJphDbgeizPQmjlToeySPQDb7cfEEdLrg=
Subject key identifier: 88:E4:B8:12:56:B1:BD:07:91:1F:16:2A:61:3B:FD:02:BB:CC:38:5D
Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial: 0196FC33CB1333D39609552A8B9D6D9EBCCC
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa
Signing time: Fri 23 May 2025 08:12:54 +0000
ROA not before: Fri 23 May 2025 08:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 194.124.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:33:cb:13:33:d3:96:09:55:2a:8b:9d:6d:9e:bc:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Validity
Not Before: May 23 08:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88e4b81256b1bd07911f162a613bfd02bbcc385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:4e:33:d7:4f:fd:73:12:0d:50:98:86:cf:
b0:95:af:1f:76:61:14:3c:71:72:b8:47:a3:7a:7b:
7d:6a:2d:9f:f9:26:89:c3:0a:51:e0:a5:d3:c1:ad:
a6:b7:6c:0a:f3:ba:ee:9a:29:be:69:dc:aa:23:19:
e1:59:94:31:41:bf:7c:7e:2e:bd:1b:2a:25:fb:9d:
dd:26:3d:f9:d0:59:d5:64:10:fb:88:7f:a3:1d:6b:
08:77:f2:1f:b7:85:8c:7a:29:7f:cb:a1:a4:aa:bb:
bb:98:97:c6:42:b0:ca:44:b2:90:c4:0f:a8:f9:d5:
83:9a:ae:27:0e:51:e1:aa:14:07:d1:1c:6e:43:b3:
3e:87:59:ab:e5:b3:d2:ed:95:2a:00:56:67:87:bf:
15:f3:1d:e5:65:c3:09:01:a8:77:68:e7:8c:5f:04:
15:d7:11:8d:14:e9:8b:b5:35:c0:ad:3e:29:45:09:
80:5a:f0:26:99:39:fd:cc:31:a1:be:02:a5:3d:26:
26:e4:74:ac:52:37:2c:0c:61:dd:46:d4:0b:ef:5e:
89:83:09:b0:79:e3:86:d8:20:77:1c:34:db:b1:8e:
0f:09:73:c5:00:75:50:a0:8e:72:1d:71:07:3b:ce:
a6:d0:d9:31:06:50:e9:bb:43:89:ad:83:d9:c6:79:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:B8:12:56:B1:BD:07:91:1F:16:2A:61:3B:FD:02:BB:CC:38:5D
X509v3 Authority Key Identifier:
keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.188.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:77:ae:cf:e5:b4:97:2a:db:7f:2d:be:a6:b9:17:be:83:
1f:02:5c:7d:40:0a:cf:85:e1:99:74:e1:c0:95:4d:90:cd:ee:
62:c5:bb:3d:0a:ab:a7:62:4d:93:49:f9:f0:87:5d:a9:ab:61:
fe:a2:4d:f7:cd:4d:6a:77:24:23:7e:45:cc:27:b0:93:7e:92:
08:46:5f:8a:7e:36:13:d1:ce:70:a7:29:2f:7b:3b:33:ac:fc:
1a:fa:bc:0b:1c:fc:d0:ae:a6:36:46:c4:4d:c4:21:67:84:08:
4c:e2:0a:d6:b0:6f:61:f5:b9:db:b4:00:ee:11:87:a0:53:e6:
37:a6:97:2c:c5:4f:37:9d:1d:01:48:58:76:fc:25:09:40:f2:
1a:91:0a:a7:7f:24:1f:24:79:d3:95:8d:0d:f5:0d:d1:55:78:
12:b9:40:42:ad:ea:02:19:a4:65:3c:4a:57:e0:11:29:6c:67:
5d:62:1f:bd:5c:fb:79:93:2c:a1:ba:19:b0:25:16:36:1c:ec:
32:9e:69:96:39:9a:ee:14:1f:03:14:25:d9:1c:ab:43:3d:e0:
46:bf:30:f3:dd:b3:86:ca:af:df:6b:99:e0:ea:03:fd:25:c7:
92:bb:f8:7f:b3:d8:8b:4d:f1:3a:b2:0d:5b:7e:3f:eb:3d:5d:
06:c3:6c:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZb8M8sTM9OWCVUqi51tnrzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj
N2M1Y2EwHhcNMjUwNTIzMDgxMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGU0YjgxMjU2YjFiZDA3OTExZjE2MmE2MTNiZmQwMmJiY2MzODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1lOM9dP/XMSDVCYhs+wla8fdmEU
PHFyuEejent9ai2f+SaJwwpR4KXTwa2mt2wK87rumim+adyqIxnhWZQxQb98fi69
Gyol+53dJj350FnVZBD7iH+jHWsId/Ift4WMeil/y6Gkqru7mJfGQrDKRLKQxA+o
+dWDmq4nDlHhqhQH0RxuQ7M+h1mr5bPS7ZUqAFZnh78V8x3lZcMJAah3aOeMXwQV
1xGNFOmLtTXArT4pRQmAWvAmmTn9zDGhvgKlPSYm5HSsUjcsDGHdRtQL716Jgwmw
eeOG2CB3HDTbsY4PCXPFAHVQoI5yHXEHO86m0NkxBlDpu0OJrYPZxnmQLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjkuBJWsb0HkR8WKmE7/QK7zDhdMB8GA1UdIwQY
MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt
NDMzMmM5NTdhMjJmLzEvaU9TNEVsYXh2UWVSSHhZcVlUdjlBcnZNT0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm
LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwny8MA0G
CSqGSIb3DQEBCwUAA4IBAQCVeXeuz+W0lyrbfy2+prkXvoMfAlx9QArPheGZdOHA
lU2Qze5ixbs9CqunYk2TSfnwh12pq2H+ok33zU1qdyQjfkXMJ7CTfpIIRl+KfjYT
0c5wpykvezszrPwa+rwLHPzQrqY2RsRNxCFnhAhM4grWsG9h9bnbtADuEYegU+Y3
ppcsxU83nR0BSFh2/CUJQPIakQqnfyQfJHnTlY0N9Q3RVXgSuUBCreoCGaRlPEpX
4BEpbGddYh+9XPt5kyyhuhmwJRY2HOwynmmWOZruFB8DFCXZHKtDPeBGvzDz3bOG
yq/fa5ng6gP9JceSu/h/s9iLTfE6sg1bfj/rPV0Gw2xg
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:55:45 2025 by rpki-client