Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa
File: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (raw, json)
Hash identifier: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=
Subject key identifier: E2:96:4A:45:F7:B9:7E:24:27:F0:D0:A7:4A:0B:41:33:11:F8:9C:0D
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 0194228D611316D1E0C2574D8DC858318432
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 5.45.80.0/22 maxlen: 22
37.252.0.0/23 maxlen: 23
91.193.180.0/22 maxlen: 22
185.4.64.0/22 maxlen: 22
2a02:c6c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:61:13:16:d1:e0:c2:57:4d:8d:c8:58:31:84:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2964a45f7b97e2427f0d0a74a0b413311f89c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:af:02:3f:49:fd:45:b3:7f:bb:1f:da:a8:
6e:90:51:41:1b:78:e6:22:8c:b1:ea:b7:ea:d7:29:
18:19:d1:a8:ee:d3:30:40:91:13:45:f3:b2:b8:b8:
73:fd:8f:41:95:a9:75:2d:6a:89:b9:64:e4:39:8a:
14:5c:77:4e:37:65:c8:e9:dd:7d:a9:a9:93:cc:71:
0a:7a:28:02:d7:50:6d:f7:ae:d7:1b:20:16:a6:3c:
df:a1:15:82:04:fa:b8:1a:db:74:cb:30:3e:fc:c5:
72:a7:16:55:b0:b7:e4:b1:66:eb:62:a7:66:6e:2b:
90:b4:29:c5:02:c5:79:73:a5:6a:78:83:24:e2:55:
2e:68:b3:b5:71:b2:8d:17:a6:80:ef:d2:3f:4d:4e:
79:0d:40:e8:34:c3:5e:6d:d0:dc:6c:e8:49:0a:21:
87:1b:19:d5:f7:45:8a:ea:46:a5:7e:41:05:f1:96:
4d:7d:a2:c1:55:d8:0c:7f:63:fb:9e:dd:05:d1:df:
64:2d:83:7c:df:09:4d:4a:56:a3:d5:e7:0b:82:44:
51:21:d6:9c:c4:b1:1e:e6:28:3d:b9:af:b1:d5:a0:
7f:c0:24:df:41:5c:77:79:d5:2f:de:ff:1d:d0:72:
35:a9:fe:93:85:02:42:87:7f:e4:d1:c4:57:26:b8:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:4A:45:F7:B9:7E:24:27:F0:D0:A7:4A:0B:41:33:11:F8:9C:0D
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.80.0/22
37.252.0.0/23
91.193.180.0/22
185.4.64.0/22
IPv6:
2a02:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
29:59:24:a1:62:fa:23:5c:bd:7c:e0:64:f0:5f:c5:74:fa:4f:
75:c3:18:a9:79:86:95:32:6c:87:43:7b:6f:7d:5e:8c:45:7e:
da:5e:b3:a3:39:7a:42:4d:3b:e0:c3:83:62:83:3b:5b:f9:f5:
df:d0:4b:bc:a1:64:b3:ff:37:e6:2a:e3:8a:c2:cf:a0:c5:14:
6d:8a:5e:1f:16:96:eb:92:e8:9b:6d:6e:b7:ea:a8:b1:39:ed:
96:e5:aa:55:61:b0:aa:1b:7a:12:08:3d:4a:42:45:0a:42:d9:
ea:42:14:de:47:ce:13:d9:32:40:19:f8:97:19:40:51:28:ab:
09:43:b8:77:ab:6a:43:02:8c:30:c3:92:20:4d:4f:60:b6:3a:
d3:56:ea:66:2b:b3:0d:06:80:c6:2d:80:fb:5a:02:8e:12:b5:
13:0a:52:8c:8d:ee:52:e2:15:79:25:38:a1:00:b6:63:c9:0f:
f4:85:ed:35:38:8e:eb:6b:8f:43:c7:2d:6c:a8:84:f3:4d:10:
9b:d3:7e:38:43:23:aa:92:fb:39:e3:13:e9:e3:a2:61:99:ab:
71:79:bd:d6:70:1b:0a:84:4c:85:7e:89:c5:dc:2d:f3:45:aa:
38:83:12:de:dd:00:10:2d:16:9b:46:cb:c2:3a:82:fe:d6:67:
f5:80:da:95
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQijWETFtHgwldNjchYMYQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjUwMTAxMTU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjk2NGE0NWY3Yjk3ZTI0MjdmMGQwYTc0YTBiNDEzMzExZjg5YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FWvAj9J/UWzf7sf2qhukFFBG3jm
Ioyx6rfq1ykYGdGo7tMwQJETRfOyuLhz/Y9Blal1LWqJuWTkOYoUXHdON2XI6d19
qamTzHEKeigC11Bt967XGyAWpjzfoRWCBPq4Gtt0yzA+/MVypxZVsLfksWbrYqdm
biuQtCnFAsV5c6VqeIMk4lUuaLO1cbKNF6aA79I/TU55DUDoNMNebdDcbOhJCiGH
GxnV90WK6kalfkEF8ZZNfaLBVdgMf2P7nt0F0d9kLYN83wlNSlaj1ecLgkRRIdac
xLEe5ig9ua+x1aB/wCTfQVx3edUv3v8d0HI1qf6ThQJCh3/k0cRXJrgrrQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFOKWSkX3uX4kJ/DQp0oLQTMR+JwNMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvNHBaS1JmZTVmaVFuOE5DblNndEJNeEg0bkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCBS1QAwQB
JfwAAwQCW8G0AwQCuQRAMA0EAgACMAcDBQAqAsbAMA0GCSqGSIb3DQEBCwUAA4IB
AQApWSShYvojXL184GTwX8V0+k91wxipeYaVMmyHQ3tvfV6MRX7aXrOjOXpCTTvg
w4Nigztb+fXf0Eu8oWSz/zfmKuOKws+gxRRtil4fFpbrkuibbW636qixOe2W5apV
YbCqG3oSCD1KQkUKQtnqQhTeR84T2TJAGfiXGUBRKKsJQ7h3q2pDAowww5IgTU9g
tjrTVupmK7MNBoDGLYD7WgKOErUTClKMje5S4hV5JTihALZjyQ/0he01OI7ra49D
xy1sqITzTRCb0344QyOqkvs54xPp46Jhmatxeb3WcBsKhEyFfonF3C3zRao4gxLe
3QAQLRabRsvCOoL+1mf1gNqV
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:03:49 2025 by rpki-client