Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4eYVrcPkZyjD0mkwEJME-VY7e6k.roa
File: 4eYVrcPkZyjD0mkwEJME-VY7e6k.roa (raw, json)
Hash identifier: oHmucjvYMOkZhGcaCPsx6SBBpQCoWNG7e3ruanzJ7qg=
Subject key identifier: E1:E6:15:AD:C3:E4:67:28:C3:D2:69:30:10:93:04:F9:56:3B:7B:A9
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B404B4FC45862C4BBC7DF6787B8842
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4eYVrcPkZyjD0mkwEJME-VY7e6k.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23422
IP address blocks: 147.189.143.0/24 maxlen: 24
176.111.220.0/24 maxlen: 24
185.127.95.0/24 maxlen: 24
185.215.225.0/24 maxlen: 24
185.215.226.0/24 maxlen: 24
193.8.195.0/24 maxlen: 24
2a0b:ae40:5::/48 maxlen: 48
2a0b:ae40:6::/48 maxlen: 48
2a0b:ae40:7::/48 maxlen: 48
2a0b:ae40:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:04:b4:fc:45:86:2c:4b:bc:7d:f6:78:7b:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e615adc3e46728c3d26930109304f9563b7ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:04:0e:2f:ac:f5:2f:59:65:bd:bd:1a:52:
5a:dc:6b:70:d4:60:a4:59:90:0b:6a:90:50:9c:cd:
9b:51:7f:46:c4:6a:18:29:4f:80:10:da:7d:dc:7f:
24:8c:9a:aa:79:8e:0e:cc:90:b2:8a:88:cb:e6:be:
19:86:03:36:c5:24:2e:6a:1f:00:20:b6:02:ef:ac:
5e:cd:20:3f:0a:10:5f:53:da:c0:6a:72:95:e7:ae:
de:1a:e4:f8:cd:60:28:84:3a:2a:23:ef:3d:22:5e:
83:da:cb:96:6c:27:51:ff:2c:b1:9d:c2:95:07:cc:
6a:fa:cc:0c:94:53:58:dc:d9:80:9e:ed:0b:b8:fe:
1d:4e:87:a6:4e:3e:3b:01:b3:40:32:4d:55:4b:db:
69:20:a6:f5:2c:16:9c:c6:74:02:20:4b:04:ba:9e:
dc:0d:e2:ba:32:61:9e:e6:34:f8:35:7b:1a:e1:df:
04:2f:34:f1:d3:1b:b2:98:c3:e0:75:7b:c4:48:f4:
a5:60:cc:99:8e:d4:f4:7a:84:80:26:3c:b7:05:c4:
f1:6c:3c:5f:e2:55:67:36:9e:46:93:f9:1f:d7:c1:
b5:87:bb:2b:1b:8b:24:32:17:5a:c9:97:00:fe:04:
ae:11:64:3a:17:7c:a0:08:50:2c:ca:9e:55:aa:7e:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:15:AD:C3:E4:67:28:C3:D2:69:30:10:93:04:F9:56:3B:7B:A9
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/4eYVrcPkZyjD0mkwEJME-VY7e6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.143.0/24
176.111.220.0/24
185.127.95.0/24
185.215.225.0-185.215.226.255
193.8.195.0/24
IPv6:
2a0b:ae40:5::-2a0b:ae40:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:41:d5:31:90:ed:bb:31:13:5a:91:12:ad:b4:dd:7f:45:aa:
6e:bd:9e:d2:6f:4b:9f:22:57:a3:c7:f3:33:90:9f:95:8b:1f:
be:55:5c:37:c6:bf:7c:7e:d7:78:29:2c:f0:50:25:cc:73:bc:
c4:bd:09:2e:0f:4f:72:00:fa:1b:ca:f3:d5:9a:90:d4:46:94:
46:95:3b:89:0a:ea:77:be:7c:11:9d:f5:ca:f1:ca:ad:e9:5a:
cd:9b:55:77:9a:21:88:31:d4:16:26:1c:d1:4a:b9:05:c0:b7:
6b:42:5f:28:8a:e0:2e:3e:49:c0:3c:7d:95:25:21:57:4c:34:
a6:5c:f9:39:3a:9e:30:2b:0e:11:d5:be:97:2b:f0:5c:05:d8:
c1:50:76:28:42:1d:96:7b:97:4a:ca:a9:e8:21:56:8b:80:a7:
e0:a4:02:ae:a0:55:ae:d6:c3:8f:4b:68:02:a2:2c:a4:12:f9:
01:ec:37:5a:4b:c1:48:98:98:88:6b:39:b3:a3:c4:93:38:6b:
d6:e0:55:e2:16:3f:01:b3:9e:b3:da:12:01:fe:d8:fc:cf:2e:
17:d2:d0:ab:66:69:81:53:05:b6:91:81:36:f5:a5:81:71:29:
9d:96:ef:45:be:12:5a:66:69:6f:79:01:84:70:0f:59:5f:66:
93:d2:f7:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:24:29 2025 by rpki-client