Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4oyZa4gdDUkTyvig9B5MyEBxtgY.roa
File: 4oyZa4gdDUkTyvig9B5MyEBxtgY.roa (raw, json)
Hash identifier: 65mItYo2Zy5ZDdSzQQF5aR64hGTdR3bqRDrtgJvvNZI=
Subject key identifier: E2:8C:99:6B:88:1D:0D:49:13:CA:F8:A0:F4:1E:4C:C8:40:71:B6:06
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A1D0508975035BBDFCEE7E7FB559
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4oyZa4gdDUkTyvig9B5MyEBxtgY.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142578
IP address blocks: 45.93.18.0/24 maxlen: 24
45.93.19.0/24 maxlen: 24
85.92.113.0/24 maxlen: 24
193.107.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:d0:50:89:75:03:5b:bd:fc:ee:7e:7f:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28c996b881d0d4913caf8a0f41e4cc84071b606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:a3:31:51:32:16:87:ae:94:d4:e6:7e:f3:
6f:c6:ce:82:60:e5:10:fe:bb:0f:93:28:19:bf:51:
17:a0:07:1c:64:bd:71:34:ad:70:b3:ca:34:71:c9:
0b:6c:75:bb:87:d7:c6:7f:cf:b7:fb:c9:b7:b7:f4:
48:ca:e6:2e:61:7b:0a:25:df:47:c1:2f:3b:96:a4:
a7:3c:bf:bf:87:9e:8b:81:41:85:3e:2e:73:58:32:
3c:69:4f:49:74:5c:18:43:72:68:8b:24:9e:47:d9:
99:11:d0:55:b2:b7:64:cf:d4:ac:b9:7b:de:95:00:
d9:cb:bb:38:18:42:48:fb:bb:97:a2:b0:6d:e3:3f:
ae:51:f8:0f:e3:57:ae:13:49:12:ec:42:fe:66:25:
be:00:f7:1f:34:d1:df:55:36:8a:43:d6:44:b7:64:
cb:01:c6:16:ec:7e:06:33:7b:07:84:91:cc:69:8c:
61:bc:44:94:f4:31:d4:6c:9b:f8:24:49:7d:4d:93:
9d:06:64:a2:00:f5:56:90:5c:c7:f4:9c:6a:b5:95:
03:33:76:87:3b:06:22:bc:14:15:b9:b6:c0:8e:8a:
fe:75:4f:30:20:de:cd:e5:ab:7d:33:43:b8:77:85:
ec:e4:4f:da:cd:78:7f:58:e5:43:fe:a9:a2:a2:45:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:99:6B:88:1D:0D:49:13:CA:F8:A0:F4:1E:4C:C8:40:71:B6:06
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/4oyZa4gdDUkTyvig9B5MyEBxtgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
85.92.113.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:dc:12:cc:ce:53:db:31:be:31:c7:d9:e2:64:09:13:55:2b:
27:92:74:cd:e1:12:91:2d:20:ee:2c:68:ed:06:1f:cd:34:56:
ff:38:ca:0b:7c:e5:88:ad:5f:a6:ee:a3:2f:a9:ab:36:02:3e:
f4:cc:60:60:fd:ea:ec:7f:5c:40:66:ef:39:db:64:11:fd:ef:
7a:c6:0e:c0:20:97:10:5e:3e:6b:a4:59:9f:6a:46:b6:1b:02:
80:73:a4:f6:cd:1c:8b:50:d5:1f:1f:2c:b3:c8:5e:99:45:75:
3a:08:4a:48:13:f1:91:d8:7a:00:7e:45:4b:72:f6:df:17:00:
45:f4:b5:92:86:c7:95:01:b3:49:c7:5b:8d:be:77:2e:39:bf:
7c:33:91:94:57:3d:5d:74:98:dc:ef:51:4d:bb:15:a8:b2:23:
c1:f4:c7:76:f0:54:7b:ac:ae:c7:e9:a5:22:c9:28:8d:a8:05:
de:b4:87:db:0d:6c:e8:e4:5d:ce:ac:f3:2b:0c:40:79:a3:12:
45:ba:c0:25:f7:04:0f:b1:eb:1c:ff:36:7d:a8:fe:ce:93:33:
74:d4:71:24:8f:1f:aa:2c:8c:68:c6:0f:42:67:22:3d:16:d7:
3a:ff:1a:0c:b4:b3:85:86:e6:83:a2:63:86:a5:59:36:e9:fe:
93:46:9f:96
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQks6HQUIl1A1u9/O5+f7VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjUwMTAyMDE0ODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjhjOTk2Yjg4MWQwZDQ5MTNjYWY4YTBmNDFlNGNjODQwNzFiNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMGjMVEyFoeulNTmfvNvxs6CYOUQ
/rsPkygZv1EXoAccZL1xNK1ws8o0cckLbHW7h9fGf8+3+8m3t/RIyuYuYXsKJd9H
wS87lqSnPL+/h56LgUGFPi5zWDI8aU9JdFwYQ3JoiySeR9mZEdBVsrdkz9SsuXve
lQDZy7s4GEJI+7uXorBt4z+uUfgP41euE0kS7EL+ZiW+APcfNNHfVTaKQ9ZEt2TL
AcYW7H4GM3sHhJHMaYxhvESU9DHUbJv4JEl9TZOdBmSiAPVWkFzH9JxqtZUDM3aH
OwYivBQVubbAjor+dU8wIN7N5at9M0O4d4Xs5E/azXh/WOVD/qmiokU5pQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOKMmWuIHQ1JE8r4oPQeTMhAcbYGMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvNG95WmE0Z2REVWtUeXZpZzlCNU15RUJ4dGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLV0SAwQA
VVxxAwQAwWvbMA0GCSqGSIb3DQEBCwUAA4IBAQAb3BLMzlPbMb4xx9niZAkTVSsn
knTN4RKRLSDuLGjtBh/NNFb/OMoLfOWIrV+m7qMvqas2Aj70zGBg/ersf1xAZu85
22QR/e96xg7AIJcQXj5rpFmfaka2GwKAc6T2zRyLUNUfHyyzyF6ZRXU6CEpIE/GR
2HoAfkVLcvbfFwBF9LWShseVAbNJx1uNvncuOb98M5GUVz1ddJjc71FNuxWosiPB
9Md28FR7rK7H6aUiySiNqAXetIfbDWzo5F3OrPMrDEB5oxJFusAl9wQPsesc/zZ9
qP7OkzN01HEkjx+qLIxoxg9CZyI9Ftc6/xoMtLOFhuaDomOGpVk26f6TRp+W
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:02:33 2025 by rpki-client