Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa
File: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (raw, json)
Hash identifier: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=
Subject key identifier: E1:5C:79:B9:8F:B0:52:2D:18:5F:42:9F:AB:3D:EE:9C:B7:E3:8A:E0
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 01942521DF298A486191BBCA671089B33940
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200947
IP address blocks: 185.82.44.0/23 maxlen: 23
185.82.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:29:8a:48:61:91:bb:ca:67:10:89:b3:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e15c79b98fb0522d185f429fab3dee9cb7e38ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:d3:f2:04:da:58:2e:8b:43:39:1d:a6:21:
98:34:e7:c6:cb:1b:57:b5:47:76:73:91:b6:67:cf:
08:bf:50:7e:37:e3:64:21:38:a1:ab:75:21:df:cf:
d1:fc:25:b1:d9:99:89:84:3c:0a:68:5f:b5:f5:d4:
15:1c:6e:7b:c9:0d:fb:0d:c8:a3:8e:08:ab:69:7f:
ee:e3:81:51:f6:34:7a:c1:76:aa:2b:9a:70:41:91:
f9:92:ee:6c:96:91:fb:b3:47:46:a1:86:3d:fa:b8:
e7:90:57:4c:cc:e8:80:25:a1:d3:d4:83:34:59:d1:
f2:ed:f7:40:43:da:d1:57:2a:a7:6c:e0:be:cf:11:
88:e9:41:72:14:96:db:86:08:3f:09:03:01:72:4e:
0b:65:4f:09:97:6d:6a:c2:5f:49:94:b1:f9:32:8b:
03:a5:76:50:c2:e7:c1:67:79:0d:5b:5a:e9:6d:ea:
78:ae:b1:fa:49:e6:0e:49:cc:14:91:c3:49:ff:3e:
fb:cd:2e:57:49:98:8c:d8:d6:db:a1:37:50:16:52:
17:11:37:cb:91:b6:6e:4b:b4:aa:cb:e1:9c:83:1e:
f3:88:7d:b4:42:02:66:dc:53:e3:41:cb:8f:be:40:
16:f3:d9:45:4e:12:39:93:0f:b5:21:e5:60:6e:9b:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:79:B9:8F:B0:52:2D:18:5F:42:9F:AB:3D:EE:9C:B7:E3:8A:E0
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.44.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c3:26:b4:bd:4e:f7:a0:74:47:34:c6:52:50:81:d3:e7:a5:
b0:c9:ef:cf:78:72:64:b1:4e:fe:9b:26:55:da:5d:8a:77:6b:
f6:a0:f9:63:67:72:1e:b9:35:03:c7:bd:ab:29:d5:6c:99:5d:
41:6f:49:f0:49:61:d5:f9:dc:69:b1:65:38:27:a4:98:87:ec:
c2:71:0c:79:85:a8:ab:a2:24:6e:9c:e6:e6:47:ad:6c:10:28:
56:ee:d4:08:69:23:bd:77:ce:21:8b:a1:25:6d:4b:de:fa:57:
1e:83:11:37:db:04:a1:13:9b:6f:3b:da:81:97:4c:a4:28:4c:
51:43:71:69:ca:36:75:28:38:46:83:6f:52:0a:0e:0f:96:de:
3d:ee:ae:ab:2e:0a:5e:64:7c:8e:e9:b4:5d:67:d4:52:9f:14:
7d:2c:a4:1f:f2:31:de:ce:3e:f7:70:c7:89:6b:c2:9d:01:fd:
91:52:69:a9:2a:02:4c:d8:23:51:98:35:cf:51:19:20:b2:8b:
e6:88:e2:22:62:cf:4a:77:c1:7f:4a:3e:b5:bc:b5:3a:23:50:
03:75:25:e9:49:12:26:64:50:05:3d:3c:bc:9e:40:54:76:02:
86:9c:5d:51:a3:bd:7a:40:0a:a6:6d:d6:16:0a:a1:d9:34:2d:
25:c2:30:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlId8pikhhkbvKZxCJszlAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzM2U0ZTA1OWM2NGZmMTliZTEwYTdhMTUwNDU3NTYxZTQ1
NWQxNGYwHhcNMjUwMTAyMDM0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTVjNzliOThmYjA1MjJkMTg1ZjQyOWZhYjNkZWU5Y2I3ZTM4YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy/T8gTaWC6LQzkdpiGYNOfGyxtX
tUd2c5G2Z88Iv1B+N+NkITihq3Uh38/R/CWx2ZmJhDwKaF+19dQVHG57yQ37Dcij
jgiraX/u44FR9jR6wXaqK5pwQZH5ku5slpH7s0dGoYY9+rjnkFdMzOiAJaHT1IM0
WdHy7fdAQ9rRVyqnbOC+zxGI6UFyFJbbhgg/CQMBck4LZU8Jl21qwl9JlLH5MosD
pXZQwufBZ3kNW1rpbep4rrH6SeYOScwUkcNJ/z77zS5XSZiM2NbboTdQFlIXETfL
kbZuS7Sqy+Gcgx7ziH20QgJm3FPjQcuPvkAW89lFThI5kw+1IeVgbptPZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFcebmPsFItGF9Cn6s97py344rgMB8GA1UdIwQY
MBaAFOM+TgWcZP8ZvhCnoVBFdWHkVdFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEt
MmIyYThiYTYxMmZkLzEvNFZ4NXVZLXdVaTBZWDBLZnF6M3VuTGZqaXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zYmJlMDEtMGExNC00MWJmLTk3ZGEtMmIyYThiYTYxMmZk
LzEvNHo1T0JaeGtfeG0tRUtlaFVFVjFZZVJWMFU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVIsMA0G
CSqGSIb3DQEBCwUAA4IBAQCTwya0vU73oHRHNMZSUIHT56Wwye/PeHJksU7+myZV
2l2Kd2v2oPljZ3IeuTUDx72rKdVsmV1Bb0nwSWHV+dxpsWU4J6SYh+zCcQx5hair
oiRunObmR61sEChW7tQIaSO9d84hi6ElbUve+lcegxE32wShE5tvO9qBl0ykKExR
Q3FpyjZ1KDhGg29SCg4Plt497q6rLgpeZHyO6bRdZ9RSnxR9LKQf8jHezj73cMeJ
a8KdAf2RUmmpKgJM2CNRmDXPURkgsovmiOIiYs9Kd8F/Sj61vLU6I1ADdSXpSRIm
ZFAFPTy8nkBUdgKGnF1Ro716QAqmbdYWCqHZNC0lwjB0
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:34 2025 by rpki-client