Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/4UxBywVcvcMsb-HDJGoMszIr0uA.roa
File: 4UxBywVcvcMsb-HDJGoMszIr0uA.roa (raw, json)
Hash identifier: CPNjg2b32CAKEDe5pmcVPP+MsVRB7Gy+EYi43k44UBQ=
Subject key identifier: E1:4C:41:CB:05:5C:BD:C3:2C:6F:E1:C3:24:6A:0C:B3:32:2B:D2:E0
Certificate issuer: /CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Certificate serial: 019421446DF8F18C3DEDE88F39C5E4CC4EAB
Authority key identifier: B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/4UxBywVcvcMsb-HDJGoMszIr0uA.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204332
IP address blocks: 185.252.88.0/22 maxlen: 22
185.252.88.0/23 maxlen: 23
185.252.90.0/23 maxlen: 23
2a0c:2440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6d:f8:f1:8c:3d:ed:e8:8f:39:c5:e4:cc:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b266e6e4d5df7f8a25654144755d7bd992e73539
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e14c41cb055cbdc32c6fe1c3246a0cb3322bd2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:ca:8a:c7:7b:90:bf:f0:a7:dc:a6:45:35:
d3:ed:de:9f:e2:2e:37:14:ee:14:f3:9f:00:36:f9:
f1:39:fd:bb:c7:8d:60:96:5e:d2:c3:aa:40:c0:c1:
c3:b6:d5:07:95:7b:3b:49:54:1f:76:4d:90:22:81:
b4:a4:ee:48:25:7e:53:fc:f1:ea:10:ef:37:95:3e:
3b:2e:98:ca:17:bc:f8:96:84:59:1d:5a:b5:48:35:
fc:e4:b7:ce:65:ec:46:05:b9:5e:43:5e:c6:ce:91:
1a:01:a3:57:f1:c2:0f:1a:b0:90:cb:62:2b:b3:b0:
33:ca:9e:1c:30:96:0d:fc:17:47:67:8d:24:28:ef:
af:20:c8:f8:07:73:04:5b:04:73:e4:76:94:81:92:
10:5b:6c:f1:6b:9a:b1:e3:48:ca:42:95:64:8c:bf:
e8:e2:c9:11:2e:d3:5a:22:43:3f:ba:9f:27:a5:79:
1c:36:c9:9b:54:8f:74:f3:8c:f8:81:73:de:bf:95:
66:5d:60:b3:0e:c7:aa:4c:b5:16:50:c8:11:9e:06:
9a:80:61:07:aa:b3:b4:34:1e:fb:5c:f2:07:1f:e5:
04:93:df:be:2c:58:84:7f:ae:8e:56:7c:69:8b:a3:
b2:8a:3f:e3:6f:7a:ae:fb:21:e3:8b:13:d8:c3:9d:
5c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4C:41:CB:05:5C:BD:C3:2C:6F:E1:C3:24:6A:0C:B3:32:2B:D2:E0
X509v3 Authority Key Identifier:
keyid:B2:66:E6:E4:D5:DF:7F:8A:25:65:41:44:75:5D:7B:D9:92:E7:35:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smbm5NXff4olZUFEdV172ZLnNTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/4UxBywVcvcMsb-HDJGoMszIr0uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ec8801-0a7c-487e-a103-525d7e22c788/1/smbm5NXff4olZUFEdV172ZLnNTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.88.0/22
IPv6:
2a0c:2440::/29
Signature Algorithm: sha256WithRSAEncryption
87:4e:67:28:ca:e3:b6:de:ba:a1:a6:7e:9a:d8:7e:3a:11:43:
ce:74:36:07:91:58:21:aa:55:4d:f0:60:e6:05:c1:75:98:9c:
04:ea:e2:63:ab:d8:e4:0b:8d:68:0e:0b:34:6e:60:e4:14:a2:
de:a9:e9:4c:de:db:a4:00:04:bc:5d:96:90:d5:43:cb:f5:7d:
5f:9a:c9:49:5b:3d:9a:aa:1f:81:12:65:73:77:ba:1b:de:1f:
f6:b5:64:d9:a9:d3:5f:2f:4c:1f:31:3a:e2:fd:e7:ec:87:59:
98:0c:4a:b1:40:a5:2f:28:c8:13:8a:92:d8:e4:1c:b6:49:83:
53:07:c1:26:a2:32:5a:3f:70:6a:ec:84:37:0b:c5:b6:9b:b3:
b9:0e:63:b7:1c:7e:51:d9:a7:0f:81:f3:ce:a4:80:ca:fe:af:
08:02:86:e8:2d:57:0d:b0:55:12:74:ea:a0:07:cd:ca:e2:4c:
9f:04:a0:39:9f:4b:6a:66:6b:17:3f:00:7b:be:fd:05:9a:4f:
2d:e3:7b:88:21:8b:a8:a5:f4:ee:c8:e7:95:df:ab:55:df:e1:
5d:90:34:03:f1:3d:19:fa:7f:a5:0f:e0:91:25:a6:03:7c:2a:
a7:c9:1f:83:d0:e8:f9:04:7b:b9:db:d8:2c:dd:5f:5a:f7:fb:
e3:97:cf:49
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhRG348Yw97eiPOcXkzE6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjZlNmU0ZDVkZjdmOGEyNTY1NDE0NDc1NWQ3YmQ5OTJl
NzM1MzkwHhcNMjUwMTAxMDk0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTRjNDFjYjA1NWNiZGMzMmM2ZmUxYzMyNDZhMGNiMzMyMmJkMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDvKisd7kL/wp9ymRTXT7d6f4i43
FO4U858ANvnxOf27x41gll7Sw6pAwMHDttUHlXs7SVQfdk2QIoG0pO5IJX5T/PHq
EO83lT47LpjKF7z4loRZHVq1SDX85LfOZexGBbleQ17GzpEaAaNX8cIPGrCQy2Ir
s7Azyp4cMJYN/BdHZ40kKO+vIMj4B3MEWwRz5HaUgZIQW2zxa5qx40jKQpVkjL/o
4skRLtNaIkM/up8npXkcNsmbVI9084z4gXPev5VmXWCzDseqTLUWUMgRngaagGEH
qrO0NB77XPIHH+UEk9++LFiEf66OVnxpi6Oyij/jb3qu+yHjixPYw51cWQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOFMQcsFXL3DLG/hwyRqDLMyK9LgMB8GA1UdIwQY
MBaAFLJm5uTV33+KJWVBRHVde9mS5zU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMt
NTI1ZDdlMjJjNzg4LzEvNFV4Qnl3VmN2Y01zYi1IREpHb01zeklyMHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lYzg4MDEtMGE3Yy00ODdlLWExMDMtNTI1ZDdlMjJjNzg4
LzEvc21ibTVOWGZmNG9sWlVGRWRWMTcyWkxuTlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufxYMA0E
AgACMAcDBQMqDCRAMA0GCSqGSIb3DQEBCwUAA4IBAQCHTmcoyuO23rqhpn6a2H46
EUPOdDYHkVghqlVN8GDmBcF1mJwE6uJjq9jkC41oDgs0bmDkFKLeqelM3tukAAS8
XZaQ1UPL9X1fmslJWz2aqh+BEmVzd7ob3h/2tWTZqdNfL0wfMTri/efsh1mYDEqx
QKUvKMgTipLY5By2SYNTB8EmojJaP3Bq7IQ3C8W2m7O5DmO3HH5R2acPgfPOpIDK
/q8IAoboLVcNsFUSdOqgB83K4kyfBKA5n0tqZmsXPwB7vv0Fmk8t43uIIYuopfTu
yOeV36tV3+FdkDQD8T0Z+n+lD+CRJaYDfCqnyR+D0Oj5BHu529gs3V9a9/vjl89J
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:12 2025 by rpki-client