Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4iA6JSRt9iOXLjSJo4FPcvo5850.roa
File: 4iA6JSRt9iOXLjSJo4FPcvo5850.roa (raw, json)
Hash identifier: Y6iNsmOmNRn1t0IzHy7GGa6of/n7DvPOfcUdK5WYltI=
Subject key identifier: E2:20:3A:25:24:6D:F6:23:97:2E:34:89:A3:81:4F:72:FA:39:F3:9D
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1B066A3B52F6F843573D183BED8A4
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4iA6JSRt9iOXLjSJo4FPcvo5850.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203728
IP address blocks: 81.21.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b0:66:a3:b5:2f:6f:84:35:73:d1:83:be:d8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2203a25246df623972e3489a3814f72fa39f39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:d8:51:ca:8c:95:46:fd:c5:2e:65:14:e7:
c7:d0:5c:16:dc:0d:a2:b0:40:13:2e:5b:5c:f8:8e:
29:6f:62:5c:c1:0f:ec:8c:d0:e8:a7:ef:69:54:85:
4d:18:42:86:66:8c:6a:1c:b2:bb:a9:9c:3a:09:ec:
38:d1:4b:c1:e0:77:6b:52:58:38:af:2f:b9:ea:88:
ac:8b:6c:fa:1a:4c:5d:e7:b8:a6:dd:b8:4b:84:1b:
8b:b6:e9:51:8b:10:08:5e:48:c6:d9:02:27:a7:a4:
1b:dd:aa:fb:4b:60:04:e1:b0:0a:e9:c7:71:66:36:
4c:72:72:a7:dd:7d:e1:1d:20:92:e7:a6:83:77:a1:
25:de:ea:81:40:62:62:21:7c:29:e5:1f:c3:40:07:
3b:72:ed:76:e5:3d:c2:d0:a8:54:13:9e:63:69:df:
ca:88:b0:49:23:53:97:21:99:d1:46:4b:b0:04:74:
43:8f:1b:0a:97:e9:34:ba:ff:21:56:13:e1:44:1f:
d2:50:c7:0c:49:ee:17:4c:fa:d4:96:b5:c4:59:79:
95:6e:66:df:e6:24:3f:40:5c:45:70:59:d9:ee:71:
53:b7:1b:5b:9f:a7:82:b5:bf:13:aa:03:14:35:ee:
97:9d:0d:46:15:f9:d7:e3:68:b1:8f:a8:7a:e3:1f:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:3A:25:24:6D:F6:23:97:2E:34:89:A3:81:4F:72:FA:39:F3:9D
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/4iA6JSRt9iOXLjSJo4FPcvo5850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.4.0/24
Signature Algorithm: sha256WithRSAEncryption
82:13:bf:67:d2:53:af:20:b8:92:d1:b9:ac:5e:10:29:ff:a6:
27:b4:7b:32:78:1f:a5:2f:a1:3e:42:74:66:89:29:48:c8:a4:
d2:5b:00:c3:e4:5e:84:bf:d1:be:e9:35:12:9a:f8:ec:0b:4a:
27:9c:7c:98:9c:3b:10:da:d8:b5:65:15:61:58:ab:45:43:22:
69:6b:9d:9d:1c:b3:38:91:e2:fc:84:ce:63:7b:ed:88:c4:c7:
02:20:1a:37:3c:8d:ab:55:bd:11:fb:3b:af:3d:0c:0b:9f:fd:
e8:2e:26:05:46:99:8b:26:1f:19:b6:9a:e4:ba:dc:6f:b2:ae:
25:7e:9a:22:6a:0e:3e:ca:b6:5b:3d:0c:ba:17:c1:2d:47:40:
12:f1:fc:85:a5:8d:d8:66:47:71:35:f1:2e:2f:1a:ae:3d:1a:
16:42:cc:39:e6:3e:77:e9:94:72:b4:e8:67:06:4a:c0:bb:e8:
27:0c:20:2c:5c:47:c0:1e:35:89:9b:b4:75:db:ba:8a:4f:95:
75:3a:5e:ec:fc:10:d8:79:e5:98:e9:76:05:a0:25:14:52:d3:
93:82:a3:a4:10:94:59:5e:39:67:7a:fb:a1:27:00:e5:2a:41:
83:02:d7:d2:0a:3f:20:86:bf:33:22:81:81:58:0c:0a:39:3f:
dd:9c:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:56 2025 by rpki-client