Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AJVgID73O2zS1sa_41ymSXXp2VE.roa
File: AJVgID73O2zS1sa_41ymSXXp2VE.roa (raw, json)
Hash identifier: MTm7UhcC+75MVhBPnqEJxNLmpab1YRWfltIEUsk9MfQ=
Subject key identifier: 00:95:60:20:3E:F7:3B:6C:D2:D6:C6:BF:E3:5C:A6:49:75:E9:D9:51
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B457A787499E50614CCB0DE49EE5
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AJVgID73O2zS1sa_41ymSXXp2VE.roa
Signing time: Thu 02 Jan 2025 17:53:32 +0000
ROA not before: Thu 02 Jan 2025 17:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51388
IP address blocks: 84.32.144.0/22 maxlen: 22
88.216.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b4:57:a7:87:49:9e:50:61:4c:cb:0d:e4:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=009560203ef73b6cd2d6c6bfe35ca64975e9d951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:81:fa:67:b0:ec:e9:04:88:a3:b1:74:b8:
3b:31:00:ff:a9:d8:1c:77:bf:ba:8d:ae:38:51:65:
20:5b:7d:97:f0:7b:3e:ef:36:4c:08:c4:d0:f2:82:
71:3f:14:16:92:43:2a:e1:c9:9c:3b:08:31:92:78:
52:94:31:9f:42:76:01:ce:26:85:71:88:9c:b2:42:
fc:38:00:f5:b2:07:de:79:90:23:8e:d1:50:f8:65:
e4:7f:c5:13:e4:57:9c:57:c4:89:f2:33:bc:4c:ef:
80:30:d2:bb:e4:ec:14:c8:fa:fa:f3:1d:ee:51:91:
7c:65:46:79:6f:d8:f2:b7:bf:2e:5a:14:8c:a7:52:
0f:79:ba:24:e3:f3:17:e9:c4:74:f0:3c:bf:7a:5e:
59:43:43:cc:ef:d9:70:40:2f:d0:85:af:5a:e8:19:
fb:df:51:03:43:be:75:de:f3:5c:27:7b:7f:cc:97:
b7:3e:8d:09:99:6a:2f:a0:7f:67:11:9a:34:f9:62:
75:99:bb:f6:72:c2:b7:3b:2c:e4:0b:d4:48:09:7d:
8e:44:d1:0a:e5:41:89:05:69:d1:80:5a:f8:70:1b:
24:4f:1d:83:65:05:2d:e1:95:a6:6b:8b:c6:f1:a8:
fd:7e:5b:51:42:61:9e:49:c1:db:38:44:a2:79:68:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:95:60:20:3E:F7:3B:6C:D2:D6:C6:BF:E3:5C:A6:49:75:E9:D9:51
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/AJVgID73O2zS1sa_41ymSXXp2VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.144.0/22
88.216.48.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:17:ab:f3:c1:8a:d1:7b:b2:90:ab:23:3b:f0:cb:b4:6b:83:
5b:fd:50:06:a6:9c:0e:47:2c:04:1e:7a:88:ef:30:ae:36:96:
75:60:1d:a2:e7:59:5c:09:c7:d4:67:b7:1c:b8:13:a2:ea:59:
1c:4b:8a:20:23:aa:02:92:c1:b8:92:41:30:2b:1e:06:6d:8d:
3c:3d:c0:32:6f:94:88:d0:c7:61:80:e8:23:f6:5a:8d:80:46:
2f:85:f3:00:4b:12:a9:ed:93:d3:0f:bf:94:e1:77:43:a3:51:
6f:8f:f0:4c:23:85:04:da:73:0e:bf:81:a6:1c:f4:26:de:16:
7f:86:81:87:dc:97:f3:7b:75:cf:9f:bf:9c:b2:41:29:e0:26:
f1:69:8e:4a:20:07:03:55:1f:7c:2c:34:bc:b9:42:95:2e:8e:
e5:af:5a:dd:ab:fe:81:16:f3:a0:ab:87:12:e8:32:c1:9d:a7:
2b:a8:a1:f1:67:cd:f9:6b:fa:38:84:0c:f9:88:0b:6d:25:c4:
b9:bc:07:18:8e:8a:d7:ab:09:70:c4:ac:a0:92:73:23:9b:5f:
b9:f2:82:49:ac:1b:e8:93:fc:18:6b:9e:2a:58:15:33:05:52:
13:d9:76:d7:5b:b5:2b:11:91:1c:64:01:4c:65:0a:01:e2:25:
1f:d6:76:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJrRXp4dJnlBhTMsN5J7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjUwMTAyMTc1MzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDk1NjAyMDNlZjczYjZjZDJkNmM2YmZlMzVjYTY0OTc1ZTlkOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NeB+mew7OkEiKOxdLg7MQD/qdgc
d7+6ja44UWUgW32X8Hs+7zZMCMTQ8oJxPxQWkkMq4cmcOwgxknhSlDGfQnYBziaF
cYicskL8OAD1sgfeeZAjjtFQ+GXkf8UT5FecV8SJ8jO8TO+AMNK75OwUyPr68x3u
UZF8ZUZ5b9jyt78uWhSMp1IPebok4/MX6cR08Dy/el5ZQ0PM79lwQC/Qha9a6Bn7
31EDQ7513vNcJ3t/zJe3Po0JmWovoH9nEZo0+WJ1mbv2csK3OyzkC9RICX2ORNEK
5UGJBWnRgFr4cBskTx2DZQUt4ZWma4vG8aj9fltRQmGeScHbOESieWj6gQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFACVYCA+9zts0tbGv+Ncpkl16dlRMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvQUpWZ0lENzNPMnpTMXNhXzQxeW1TWFhwMlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVCCQAwQD
WNgwMA0GCSqGSIb3DQEBCwUAA4IBAQBuF6vzwYrRe7KQqyM78Mu0a4Nb/VAGppwO
RywEHnqI7zCuNpZ1YB2i51lcCcfUZ7ccuBOi6lkcS4ogI6oCksG4kkEwKx4GbY08
PcAyb5SI0MdhgOgj9lqNgEYvhfMASxKp7ZPTD7+U4XdDo1Fvj/BMI4UE2nMOv4Gm
HPQm3hZ/hoGH3Jfze3XPn7+cskEp4CbxaY5KIAcDVR98LDS8uUKVLo7lr1rdq/6B
FvOgq4cS6DLBnacrqKHxZ835a/o4hAz5iAttJcS5vAcYjorXqwlwxKygknMjm1+5
8oJJrBvok/wYa54qWBUzBVIT2XbXW7UrEZEcZAFMZQoB4iUf1na2
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:41 2025 by rpki-client