Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/4t1UxScYEc1MQQvb1JnztjogsBk.roa
File: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (raw, json)
Hash identifier: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=
Subject key identifier: E2:DD:54:C5:27:18:11:CD:4C:41:0B:DB:D4:99:F3:B6:3A:20:B0:19
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 019423693017EE371D0D92321D9AF8F81624
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/4t1UxScYEc1MQQvb1JnztjogsBk.roa
Signing time: Wed 01 Jan 2025 19:48:03 +0000
ROA not before: Wed 01 Jan 2025 19:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 91.241.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:30:17:ee:37:1d:0d:92:32:1d:9a:f8:f8:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Jan 1 19:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2dd54c5271811cd4c410bdbd499f3b63a20b019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:3d:c3:8e:c3:9b:e4:ac:ca:ba:62:4e:94:
0e:ce:8b:5f:d5:44:47:ff:bc:48:03:98:d9:ef:0a:
3d:e9:5f:4d:44:b0:7a:36:f5:a2:64:ee:17:7a:67:
7a:2a:f1:42:e2:b7:6a:f6:8e:e4:df:35:4a:9a:e7:
8b:01:9f:4f:28:57:ad:71:b1:67:fe:a8:9e:0d:6c:
97:da:37:32:79:d0:da:3d:9b:bf:20:45:2f:b9:a3:
c0:ec:ff:2d:5b:e7:c9:17:90:1d:a5:16:e4:d1:a0:
82:8f:36:cb:7e:d0:8a:a7:47:32:e1:e9:45:13:72:
01:ba:5c:20:a7:09:b0:04:38:f8:97:83:bd:c8:0b:
22:7b:9e:5a:6b:6d:07:e7:ac:83:11:74:62:b5:13:
a7:31:59:d8:47:41:ab:e4:05:58:57:de:9b:b9:62:
03:6f:dc:e6:37:25:30:b2:a3:e6:2b:c5:bf:df:73:
12:9e:cc:c5:e7:f5:13:b0:21:05:f6:71:1f:7e:58:
98:6f:aa:a0:35:04:b2:83:10:33:af:83:a4:9c:00:
46:36:40:12:31:5e:2c:01:94:66:76:da:09:15:96:
27:4e:dc:9d:b0:3a:21:3e:10:c4:2b:50:11:58:76:
b6:e3:96:ee:aa:04:cf:ef:ca:ca:aa:8f:5b:13:48:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:54:C5:27:18:11:CD:4C:41:0B:DB:D4:99:F3:B6:3A:20:B0:19
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/4t1UxScYEc1MQQvb1JnztjogsBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.14.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f7:1f:de:9f:87:7a:39:2e:8f:f4:50:b9:8e:fa:09:ea:51:
bc:90:55:80:c5:46:44:9d:e2:95:72:5b:d7:d1:6b:7d:8a:12:
91:b9:95:47:d1:d4:68:55:f9:66:4c:a8:8c:18:7c:ac:76:84:
c0:9a:61:cb:5d:4b:58:3e:0c:68:04:8c:90:eb:c6:f5:af:f7:
a8:f7:df:e0:24:2a:e0:49:3c:ce:2d:e3:e4:a6:6e:96:3d:28:
48:a5:44:a2:12:15:c5:cc:32:60:69:4a:6d:a8:f9:0d:c4:f2:
08:64:b9:d8:45:5f:e4:21:7b:dc:0c:06:a3:cd:9b:82:2a:6a:
9b:2d:fe:ba:ff:f4:ea:0a:ff:fb:4e:47:9f:da:37:ee:00:b9:
58:9e:6e:e9:43:a4:79:5a:fd:6a:75:ec:44:be:3c:92:9d:68:
a7:54:f4:4b:e0:6f:92:2b:d9:55:88:d9:b5:ef:13:aa:ed:44:
58:df:07:1d:07:dc:e0:4b:c0:f5:03:41:47:6e:17:f4:32:dc:
46:d7:54:79:da:b1:97:9e:0e:bc:a3:d4:57:30:7c:25:22:66:
cc:22:e8:23:e5:fa:be:12:70:1f:f9:bc:ab:ad:03:ed:94:e7:
55:a7:79:6a:05:85:6d:ff:57:11:45:8c:73:97:3d:d6:44:34:
ca:b8:fd:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaTAX7jcdDZIyHZr4+BYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjUwMTAxMTk0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmRkNTRjNTI3MTgxMWNkNGM0MTBiZGJkNDk5ZjNiNjNhMjBiMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsE9w47Dm+SsyrpiTpQOzotf1URH
/7xIA5jZ7wo96V9NRLB6NvWiZO4Xemd6KvFC4rdq9o7k3zVKmueLAZ9PKFetcbFn
/qieDWyX2jcyedDaPZu/IEUvuaPA7P8tW+fJF5AdpRbk0aCCjzbLftCKp0cy4elF
E3IBulwgpwmwBDj4l4O9yAsie55aa20H56yDEXRitROnMVnYR0Gr5AVYV96buWID
b9zmNyUwsqPmK8W/33MSnszF5/UTsCEF9nEffliYb6qgNQSygxAzr4OknABGNkAS
MV4sAZRmdtoJFZYnTtydsDohPhDEK1ARWHa245buqgTP78rKqo9bE0jYeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLdVMUnGBHNTEEL29SZ87Y6ILAZMB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvNHQxVXhTY1lFYzFNUVF2YjFKbnp0am9nc0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/EOMA0G
CSqGSIb3DQEBCwUAA4IBAQCS9x/en4d6OS6P9FC5jvoJ6lG8kFWAxUZEneKVclvX
0Wt9ihKRuZVH0dRoVflmTKiMGHysdoTAmmHLXUtYPgxoBIyQ68b1r/eo99/gJCrg
STzOLePkpm6WPShIpUSiEhXFzDJgaUptqPkNxPIIZLnYRV/kIXvcDAajzZuCKmqb
Lf66//TqCv/7Tkef2jfuALlYnm7pQ6R5Wv1qdexEvjySnWinVPRL4G+SK9lViNm1
7xOq7URY3wcdB9zgS8D1A0FHbhf0MtxG11R52rGXng68o9RXMHwlImbMIugj5fq+
EnAf+byrrQPtlOdVp3lqBYVt/1cRRYxzlz3WRDTKuP2S
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:07:37 2025 by rpki-client