Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa
File: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (raw, json)
Hash identifier: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=
Subject key identifier: E1:D7:87:9C:93:C4:90:78:BF:67:A0:2C:8B:03:DA:22:94:CA:0C:0B
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 019425FDD2765A693B34B70177BBEDB56782
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211331
IP address blocks: 185.119.10.0/23 maxlen: 23
185.119.10.0/24 maxlen: 24
185.119.11.0/24 maxlen: 24
2a10:80c0::/29 maxlen: 29
2a10:80c0::/48 maxlen: 48
2a10:80c0:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d2:76:5a:69:3b:34:b7:01:77:bb:ed:b5:67:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1d7879c93c49078bf67a02c8b03da2294ca0c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:58:45:55:1e:38:b2:dc:b3:0b:e0:97:bb:
bd:71:aa:13:a4:c6:d7:2e:50:54:7b:77:c0:45:ce:
ed:96:d1:63:d4:a6:ca:8c:d0:6b:dd:0a:5b:68:81:
fd:5c:21:79:31:71:ce:e4:40:58:a9:cc:0f:1c:37:
55:7c:ef:d8:0d:fc:bd:ec:08:02:f4:d4:ab:34:cb:
37:13:80:f2:38:a9:e2:2d:16:d4:0a:6b:f9:a8:97:
e3:e9:0b:6f:1e:7b:01:e1:64:40:7b:55:3d:60:6d:
37:58:7c:82:d0:59:e6:ec:43:23:ff:da:07:a6:c2:
d3:6a:dd:71:36:97:c8:11:dc:2f:11:d5:4a:ae:a9:
69:0e:dc:75:12:2f:fd:49:db:55:9e:f5:33:5f:8c:
a2:d1:6c:50:91:02:d7:8a:f9:b3:fb:4b:b2:11:a5:
a2:58:07:25:81:f3:02:08:9b:3f:bf:41:af:82:0e:
ed:ba:17:b1:d2:dc:6b:64:f0:a7:49:e2:8f:07:e6:
23:0f:1e:55:10:3f:5b:cb:3f:48:84:60:00:e4:dc:
53:14:7e:56:0b:f0:e9:93:54:63:22:0c:ea:79:81:
bd:ff:a5:5b:50:e0:a3:da:8c:66:a2:bd:24:e9:21:
33:3e:c0:da:99:d7:79:1c:06:8e:ef:bf:82:14:e0:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:87:9C:93:C4:90:78:BF:67:A0:2C:8B:03:DA:22:94:CA:0C:0B
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.10.0/23
IPv6:
2a10:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:d1:b6:87:76:7c:05:45:1b:81:48:c9:e4:a9:16:38:92:1a:
93:ae:e3:8c:32:9d:ab:af:1f:01:53:60:b7:17:2f:07:01:63:
ed:0f:1f:70:1d:d3:5f:95:2b:ea:70:fd:86:f0:8f:cd:ec:aa:
24:86:18:e4:e4:6c:b2:7a:49:17:01:0a:bb:ae:ff:0e:25:49:
ec:8c:8f:64:90:5b:e9:4c:22:bf:78:1d:11:c9:68:b5:19:12:
e4:a3:39:1e:83:9e:fe:34:f8:07:79:3e:e3:85:69:32:8f:fc:
78:2c:2c:ea:ac:f1:f7:ac:df:70:d7:06:e7:8c:49:13:48:86:
5e:b0:d2:64:26:41:21:2b:42:aa:49:e7:2a:2a:68:8c:41:5d:
dd:c7:44:9e:8d:d0:3b:67:16:7f:91:a7:6c:bc:8b:4a:7b:b7:
6f:d7:fe:b8:b2:5b:79:ff:e3:de:ac:85:4a:9c:08:9e:85:08:
0a:c6:cf:b6:4f:72:1f:38:d4:d3:d8:2b:b4:48:38:5c:22:1e:
c6:42:f9:18:44:e6:4a:a2:6f:73:9f:c7:af:c1:49:73:12:3f:
84:4a:3d:5a:f8:80:3b:0a:3c:11:9c:96:2a:16:35:3e:44:3b:
5e:2f:70:ba:3d:46:84:0f:84:70:7b:a0:31:bf:da:a0:a5:d0:
b7:2d:db:c9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/dJ2Wmk7NLcBd7vttWeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmI4ZmExMGRmZjM0NzNlNjUzZGJmNjFjOWE4NjQzMjE4
MGE1YzcwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWQ3ODc5YzkzYzQ5MDc4YmY2N2EwMmM4YjAzZGEyMjk0Y2EwYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHFYRVUeOLLcswvgl7u9caoTpMbX
LlBUe3fARc7tltFj1KbKjNBr3QpbaIH9XCF5MXHO5EBYqcwPHDdVfO/YDfy97AgC
9NSrNMs3E4DyOKniLRbUCmv5qJfj6QtvHnsB4WRAe1U9YG03WHyC0Fnm7EMj/9oH
psLTat1xNpfIEdwvEdVKrqlpDtx1Ei/9SdtVnvUzX4yi0WxQkQLXivmz+0uyEaWi
WAclgfMCCJs/v0Gvgg7tuhex0txrZPCnSeKPB+YjDx5VED9byz9IhGAA5NxTFH5W
C/Dpk1RjIgzqeYG9/6VbUOCj2oxmor0k6SEzPsDamdd5HAaO77+CFODX8wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOHXh5yTxJB4v2egLIsD2iKUygwLMB8GA1UdIwQY
MBaAFJL7j6EN/zRz5lPb9hyahkMhgKXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDct
MjkzZjYxMjJhMTlkLzEvNGRlSG5KUEVrSGlfWjZBc2l3UGFJcFRLREFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jNjRkNTAtZmNkZC00YTlmLTkwNDctMjkzZjYxMjJhMTlk
LzEva3Z1UG9RM19OSFBtVTl2MkhKcUdReUdBcGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuXcKMA0E
AgACMAcDBQMqEIDAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ0baHdnwFRRuBSMnkqRY4
khqTruOMMp2rrx8BU2C3Fy8HAWPtDx9wHdNflSvqcP2G8I/N7Kokhhjk5GyyekkX
AQq7rv8OJUnsjI9kkFvpTCK/eB0RyWi1GRLkozkeg57+NPgHeT7jhWkyj/x4LCzq
rPH3rN9w1wbnjEkTSIZesNJkJkEhK0KqSecqKmiMQV3dx0SejdA7ZxZ/kadsvItK
e7dv1/64slt5/+PerIVKnAiehQgKxs+2T3IfONTT2Cu0SDhcIh7GQvkYROZKom9z
n8evwUlzEj+ESj1a+IA7CjwRnJYqFjU+RDteL3C6PUaED4Rwe6Axv9qgpdC3LdvJ
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:32 2025 by rpki-client