Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa
File: RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa (raw, json)
Hash identifier: pXgfU5zLGpdaPENK8y9IOVL5xtiIt9Fk8RRzx12JQUw=
Subject key identifier: 47:3B:C3:25:B8:0C:14:54:37:45:76:59:A3:00:2D:90:6A:6F:69:84
Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial: 0194221F851447F8D4A0F7A785CE2F7AF0FB
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa
Signing time: Wed 01 Jan 2025 13:47:58 +0000
ROA not before: Wed 01 Jan 2025 13:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51685
IP address blocks: 81.19.128.0/23 maxlen: 23
81.19.130.0/24 maxlen: 24
81.19.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:85:14:47:f8:d4:a0:f7:a7:85:ce:2f:7a:f0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=473bc325b80c145437457659a3002d906a6f6984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:69:29:91:4a:b5:fc:12:b9:d5:1b:8f:1e:
04:80:f3:e9:01:5e:6e:48:da:c2:f8:ec:34:79:e2:
c8:93:c6:42:ba:b2:58:e6:ae:ee:e7:04:fb:6c:c1:
6f:7a:24:49:79:ff:1a:ef:f2:dd:26:ce:69:0f:1b:
4c:79:6c:56:d8:33:ee:4a:a8:19:4b:00:9e:eb:08:
42:ee:da:80:65:ee:02:b4:f9:a0:61:41:e8:37:55:
26:97:43:e9:d6:d5:93:ea:06:b8:0f:10:ee:ed:ce:
20:e5:0b:c1:2e:a7:c9:80:7a:1c:a2:76:f5:ce:59:
a6:20:d4:0b:21:ea:2e:cb:6e:cf:a6:c1:7c:3d:e2:
be:74:6e:9f:02:64:35:13:ed:a3:89:58:98:19:0a:
73:ce:ec:94:5e:a7:d1:e0:59:fa:5d:14:2c:87:4e:
77:1e:b6:60:9f:8a:b8:a5:d9:c1:4d:58:2e:bc:06:
13:7c:55:24:9d:ab:85:06:01:7c:a0:e1:61:e8:ee:
3a:aa:f2:dc:16:ab:14:88:dc:33:77:75:26:28:d5:
82:df:b8:c1:13:3d:3c:44:9b:bd:a0:af:5d:fe:96:
0e:4e:03:a7:d9:1a:65:68:ac:d1:a8:69:f8:48:e1:
05:63:ec:43:ff:cc:5b:fb:39:f5:f3:d1:72:0f:64:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:C3:25:B8:0C:14:54:37:45:76:59:A3:00:2D:90:6A:6F:69:84
X509v3 Authority Key Identifier:
keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/RzvDJbgMFFQ3RXZZowAtkGpvaYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.128.0-81.19.130.255
81.19.142.0/23
Signature Algorithm: sha256WithRSAEncryption
19:65:0a:98:57:5c:8d:6d:1f:71:da:56:b8:fa:dc:2a:ce:c6:
fc:5a:b0:a5:70:a6:9f:75:24:42:ea:be:9f:9c:94:07:e5:fe:
4a:1f:e5:34:44:b0:83:ae:12:97:90:5e:7f:f6:a6:0f:8c:6d:
36:97:5b:28:86:83:a1:93:ec:73:96:bd:88:a7:f8:60:2c:31:
00:f3:f3:23:e3:3e:69:e5:6d:f6:b8:38:dd:d3:fa:4f:ca:e6:
19:c6:ab:d9:d4:9d:f5:da:79:eb:0a:3a:2d:8a:74:58:fc:38:
d1:ba:71:0d:81:cb:50:c5:26:5b:2d:ca:e1:af:82:10:7d:a2:
25:e5:64:fb:8a:4a:41:1e:df:1d:c9:7f:47:dc:8c:be:3d:38:
2e:bc:c3:01:73:77:ef:e2:ca:72:b5:6e:e4:2b:48:0b:f7:dd:
7c:81:96:53:b6:98:61:84:57:80:12:ef:6d:0b:02:47:26:bb:
58:3c:29:bb:45:31:b7:94:d7:c6:0c:b1:f0:6f:9b:15:bc:98:
dc:35:ee:65:e5:87:9d:41:43:7f:2f:ff:cf:b4:42:8f:d1:52:
c4:19:eb:51:8f:38:ea:26:84:6a:62:53:04:89:67:d1:5c:ad:
6f:3b:45:4e:3a:cc:f2:77:52:2d:ce:da:1e:79:e0:67:3a:52:
82:bb:16:93
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQiH4UUR/jUoPenhc4vevD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh
N2M3NmIwHhcNMjUwMTAxMTM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzNiYzMyNWI4MGMxNDU0Mzc0NTc2NTlhMzAwMmQ5MDZhNmY2OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1VpKZFKtfwSudUbjx4EgPPpAV5u
SNrC+Ow0eeLIk8ZCurJY5q7u5wT7bMFveiRJef8a7/LdJs5pDxtMeWxW2DPuSqgZ
SwCe6whC7tqAZe4CtPmgYUHoN1Uml0Pp1tWT6ga4DxDu7c4g5QvBLqfJgHoconb1
zlmmINQLIeouy27PpsF8PeK+dG6fAmQ1E+2jiViYGQpzzuyUXqfR4Fn6XRQsh053
HrZgn4q4pdnBTVguvAYTfFUknauFBgF8oOFh6O46qvLcFqsUiNwzd3UmKNWC37jB
Ez08RJu9oK9d/pYOTgOn2RplaKzRqGn4SOEFY+xD/8xb+zn189FyD2Q/KwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEc7wyW4DBRUN0V2WaMALZBqb2mEMB8GA1UdIwQY
MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt
MjgzZmU1NGE2ZjJmLzEvUnp2REpiZ01GRlEzUlhaWm93QXRrR3B2YVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm
LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAdRE4AD
BABRE4IDBAFRE44wDQYJKoZIhvcNAQELBQADggEBABllCphXXI1tH3HaVrj63CrO
xvxasKVwpp91JELqvp+clAfl/kof5TREsIOuEpeQXn/2pg+MbTaXWyiGg6GT7HOW
vYin+GAsMQDz8yPjPmnlbfa4ON3T+k/K5hnGq9nUnfXaeesKOi2KdFj8ONG6cQ2B
y1DFJlstyuGvghB9oiXlZPuKSkEe3x3Jf0fcjL49OC68wwFzd+/iynK1buQrSAv3
3XyBllO2mGGEV4AS720LAkcmu1g8KbtFMbeU18YMsfBvmxW8mNw17mXlh51BQ38v
/8+0Qo/RUsQZ61GPOOomhGpiUwSJZ9FcrW87RU46zPJ3Ui3O2h554Gc6UoK7FpM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:20:01 2025 by rpki-client