Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/2XR2jy2pxsivUCWaEQDKm37Kfv8.roa
File: 2XR2jy2pxsivUCWaEQDKm37Kfv8.roa (raw, json)
Hash identifier: JYfdJrJXlt+b2LxrGfVDugUW4/PVdSDu77ltGYhWQfw=
Subject key identifier: D9:74:76:8F:2D:A9:C6:C8:AF:50:25:9A:11:00:CA:9B:7E:CA:7E:FF
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 0194228D11FE92DFF5443BB3A2E5CF1E56CC
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/2XR2jy2pxsivUCWaEQDKm37Kfv8.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39704
IP address blocks: 185.168.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:11:fe:92:df:f5:44:3b:b3:a2:e5:cf:1e:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d974768f2da9c6c8af50259a1100ca9b7eca7eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:bf:ed:07:3a:35:02:ad:58:75:51:ad:62:
66:61:f4:3c:76:eb:13:cd:b4:c8:fc:62:f3:46:a3:
81:80:a0:7c:2e:91:5f:d1:b5:72:8e:3e:a4:00:ea:
01:ff:b8:14:93:29:f8:bf:3b:9e:ea:e2:6f:a6:bc:
da:d0:a5:77:fa:bc:3d:71:40:fe:f7:43:1f:da:25:
07:3f:7c:f7:97:63:49:01:ed:7b:28:1a:6e:a3:0b:
53:37:8e:ee:89:59:f8:74:93:0e:3e:68:cf:ff:3b:
ed:74:29:82:6b:f1:92:2e:f5:61:8d:0b:44:58:a5:
a0:f4:dd:d0:92:0f:98:82:6e:0a:8f:0e:72:dc:7e:
db:91:68:e9:94:c4:4f:4a:8e:40:09:b7:1d:e7:ac:
ea:72:0f:6d:64:9d:26:26:97:05:6e:36:09:8f:85:
09:bf:bc:bd:f5:d4:9a:0a:08:65:24:cc:c2:6c:f6:
22:2b:ef:ea:15:19:73:1a:eb:12:22:4d:b3:a9:8d:
1a:f8:40:0a:fd:71:a0:fb:3b:7d:23:fa:ca:a5:41:
29:48:fe:d1:a4:b9:0d:e5:b5:bc:e8:83:c1:58:25:
b8:a1:43:8c:13:80:de:20:84:19:6a:b3:7e:0b:79:
78:9f:11:f4:87:d3:4a:3d:73:03:00:59:00:dd:91:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:74:76:8F:2D:A9:C6:C8:AF:50:25:9A:11:00:CA:9B:7E:CA:7E:FF
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/2XR2jy2pxsivUCWaEQDKm37Kfv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.4.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a7:37:cb:3d:62:0d:f2:2d:94:f6:af:7c:a0:16:4c:88:16:
dc:60:ac:2e:bf:95:81:c7:f9:00:e0:35:72:bc:88:38:16:99:
8e:b5:ba:49:de:15:d4:bd:82:c2:38:69:f2:df:ec:97:12:24:
9c:59:59:dd:83:f8:c6:41:2b:1f:73:40:83:c9:54:1c:12:51:
26:f6:a1:cf:a9:c6:4f:ee:32:db:d9:fc:e4:e3:f4:c6:e4:5a:
4a:19:2d:98:15:98:e2:f6:be:c9:3b:44:98:34:54:d8:6c:aa:
3e:84:1f:df:22:6f:3c:94:43:c2:71:ad:bd:85:1f:ac:a2:04:
23:0e:f6:11:d2:f2:91:e4:63:d1:3a:14:3c:6f:52:73:e2:dd:
23:a2:12:17:b1:1a:99:ec:cc:89:04:5b:bc:74:90:c3:4e:9e:
84:25:6a:b0:21:b5:0a:49:ed:2c:09:56:f8:da:04:eb:b6:56:
69:f2:6b:e7:c1:af:42:b6:40:b6:cd:ee:5a:2e:03:fe:d6:f4:
9d:e2:a4:45:24:87:7c:e7:55:26:d2:22:24:3d:fb:8a:4b:f4:
52:bf:57:06:79:03:86:74:69:a9:a2:83:85:0e:05:e8:17:28:
8c:9a:a9:f2:4b:f7:4e:9d:a1:f8:e7:2d:fc:4d:07:65:30:9c:
23:3d:40:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijRH+kt/1RDuzouXPHlbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2I2MTM3ZjVhZjNjMjJjODVhMTkwOGQ0MGIyOTQxZWUy
YzA2ZjQwHhcNMjUwMTAxMTU0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTc0NzY4ZjJkYTljNmM4YWY1MDI1OWExMTAwY2E5YjdlY2E3ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusS/7Qc6NQKtWHVRrWJmYfQ8dusT
zbTI/GLzRqOBgKB8LpFf0bVyjj6kAOoB/7gUkyn4vzue6uJvprza0KV3+rw9cUD+
90Mf2iUHP3z3l2NJAe17KBpuowtTN47uiVn4dJMOPmjP/zvtdCmCa/GSLvVhjQtE
WKWg9N3Qkg+Ygm4Kjw5y3H7bkWjplMRPSo5ACbcd56zqcg9tZJ0mJpcFbjYJj4UJ
v7y99dSaCghlJMzCbPYiK+/qFRlzGusSIk2zqY0a+EAK/XGg+zt9I/rKpUEpSP7R
pLkN5bW86IPBWCW4oUOME4DeIIQZarN+C3l4nxH0h9NKPXMDAFkA3ZHMYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNl0do8tqcbIr1AlmhEAypt+yn7/MB8GA1UdIwQY
MBaAFKp7YTf1rzwiyFoZCNQLKUHuLAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEt
ZDZhMzA1Y2JmNDZjLzEvMlhSMmp5MnB4c2l2VUNXYUVRREttMzdLZnY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ZTA2ZmEtMzdmOS00YTFjLTgxMWEtZDZhMzA1Y2JmNDZj
LzEvcW50aE5fV3ZQQ0xJV2hrSTFBc3BRZTRzQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuagEMA0G
CSqGSIb3DQEBCwUAA4IBAQAWpzfLPWIN8i2U9q98oBZMiBbcYKwuv5WBx/kA4DVy
vIg4FpmOtbpJ3hXUvYLCOGny3+yXEiScWVndg/jGQSsfc0CDyVQcElEm9qHPqcZP
7jLb2fzk4/TG5FpKGS2YFZji9r7JO0SYNFTYbKo+hB/fIm88lEPCca29hR+sogQj
DvYR0vKR5GPROhQ8b1Jz4t0johIXsRqZ7MyJBFu8dJDDTp6EJWqwIbUKSe0sCVb4
2gTrtlZp8mvnwa9CtkC2ze5aLgP+1vSd4qRFJId851Um0iIkPfuKS/RSv1cGeQOG
dGmpooOFDgXoFyiMmqnyS/dOnaH45y38TQdlMJwjPUD1
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:41 2025 by rpki-client