Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa
File: OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa (raw, json)
Hash identifier: b7UPAbBCKcuRworqLaxy25e9Gx9nfc4PaZocWvp2h84=
Subject key identifier: 38:54:E0:C2:47:4A:B2:94:49:FD:3B:D2:BF:AB:E0:C7:F7:24:74:B4
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F8A7119C73ADB9550CFCDE73DFF0F
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 81.19.139.0/24 maxlen: 24
81.19.140.0/24 maxlen: 24
81.19.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8a:71:19:c7:3a:db:95:50:cf:cd:e7:3d:ff:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3854e0c2474ab29449fd3bd2bfabe0c7f72474b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:6a:6e:f6:7d:70:02:65:b7:ae:f9:f8:d9:
d4:32:28:1f:fc:8b:5c:ca:1e:48:be:f6:3f:c7:44:
29:75:c5:55:2e:e1:95:fa:80:c2:91:33:b8:69:0b:
d0:01:a8:10:30:03:01:b1:08:c0:c6:d2:a9:80:6f:
a3:29:86:18:d3:90:cd:29:fb:07:0b:aa:72:45:6e:
1b:96:b9:3e:70:1a:ec:58:f8:b0:34:4c:ae:3a:4e:
8b:b1:c3:c0:2b:66:dd:08:3b:d1:6c:57:cc:29:62:
25:15:03:bc:08:19:d4:4f:df:8e:86:d8:85:86:ee:
b4:fe:d2:8b:ef:00:7e:c3:b5:d9:0c:04:48:9f:53:
68:8e:1c:4d:fe:66:e7:a0:e2:3c:9a:e4:46:3b:e6:
d3:10:c7:6d:d1:7c:77:66:10:05:1e:60:12:63:36:
ab:49:1f:f2:1d:c4:17:2c:25:cd:9f:bb:0e:30:98:
4b:5c:94:e5:7c:a9:98:b2:45:98:42:89:ba:19:45:
e1:47:8a:ed:cf:73:b2:46:65:0a:3f:fb:00:19:c4:
2b:a3:77:8c:f6:e8:8c:52:2d:54:d6:43:ec:73:71:
df:52:bf:81:71:d0:51:d2:55:ad:61:36:c2:d0:f6:
be:26:3e:f0:60:a5:2e:77:54:13:ba:40:32:cf:4c:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:54:E0:C2:47:4A:B2:94:49:FD:3B:D2:BF:AB:E0:C7:F7:24:74:B4
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/OFTgwkdKspRJ_TvSv6vgx_ckdLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.139.0-81.19.141.255
Signature Algorithm: sha256WithRSAEncryption
64:46:88:67:cf:83:a5:5d:6b:cb:ab:be:ba:96:91:c0:79:3c:
f0:7b:07:b2:26:55:99:25:d3:91:b2:2f:6f:23:62:76:b6:87:
9f:71:3e:b6:cd:8e:dc:50:a2:df:57:b8:8e:47:b5:42:4e:8b:
ad:4a:ca:cf:8a:d8:ee:4f:45:5e:43:e9:36:1b:46:bf:a7:e9:
44:63:42:d1:61:7a:d0:02:94:e4:ef:a9:42:46:48:cc:4e:f4:
fa:21:ed:b9:b2:5f:f0:d5:7a:bd:fc:25:98:3d:ad:4f:ca:0a:
3e:c1:b1:fd:98:6e:f4:d8:1a:a9:02:d4:cf:b6:91:7e:c3:8a:
00:70:74:18:33:23:60:b4:f7:6c:8e:e9:fb:3c:2e:af:b9:c6:
83:2f:9a:64:3d:c0:c4:d8:c0:ff:ce:fc:57:94:d1:bc:15:01:
e8:17:15:f2:b5:88:cf:8f:9e:c9:f7:82:32:a0:2d:24:7b:45:
c3:ea:2e:8f:83:0b:83:5c:4e:32:01:7f:a9:54:b5:bf:ad:a2:
33:2e:61:b2:01:77:5c:78:cd:5c:62:78:ca:49:a8:fb:ac:20:
c5:ee:d3:42:68:0e:e8:c9:c6:ec:0a:78:55:a5:fd:b4:9a:e8:
f1:0c:1c:fc:70:1f:9c:41:26:04:10:42:0f:29:5d:c3:83:8b:
cf:d4:86:3b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH4pxGcc625VQz83nPf8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh
N2M3NmIwHhcNMjUwMTAxMTM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODU0ZTBjMjQ3NGFiMjk0NDlmZDNiZDJiZmFiZTBjN2Y3MjQ3NGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYlqbvZ9cAJlt675+NnUMigf/Itc
yh5IvvY/x0QpdcVVLuGV+oDCkTO4aQvQAagQMAMBsQjAxtKpgG+jKYYY05DNKfsH
C6pyRW4blrk+cBrsWPiwNEyuOk6LscPAK2bdCDvRbFfMKWIlFQO8CBnUT9+OhtiF
hu60/tKL7wB+w7XZDARIn1NojhxN/mbnoOI8muRGO+bTEMdt0Xx3ZhAFHmASYzar
SR/yHcQXLCXNn7sOMJhLXJTlfKmYskWYQom6GUXhR4rtz3OyRmUKP/sAGcQro3eM
9uiMUi1U1kPsc3HfUr+BcdBR0lWtYTbC0Pa+Jj7wYKUud1QTukAyz0zASwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDhU4MJHSrKUSf070r+r4Mf3JHS0MB8GA1UdIwQY
MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt
MjgzZmU1NGE2ZjJmLzEvT0ZUZ3drZEtzcFJKX1R2U3Y2dmd4X2NrZExRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm
LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABRE4sD
BAFRE4wwDQYJKoZIhvcNAQELBQADggEBAGRGiGfPg6Vda8urvrqWkcB5PPB7B7Im
VZkl05GyL28jYna2h59xPrbNjtxQot9XuI5HtUJOi61Kys+K2O5PRV5D6TYbRr+n
6URjQtFhetAClOTvqUJGSMxO9Poh7bmyX/DVer38JZg9rU/KCj7Bsf2YbvTYGqkC
1M+2kX7DigBwdBgzI2C092yO6fs8Lq+5xoMvmmQ9wMTYwP/O/FeU0bwVAegXFfK1
iM+Pnsn3gjKgLSR7RcPqLo+DC4NcTjIBf6lUtb+tojMuYbIBd1x4zVxieMpJqPus
IMXu00JoDujJxuwKeFWl/bSa6PEMHPxwH5xBJgQQQg8pXcODi8/Uhjs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:47 2025 by rpki-client