Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4qYDaKRfrK9gLCHbI8_usf1CE28.roa
File: 4qYDaKRfrK9gLCHbI8_usf1CE28.roa (raw, json)
Hash identifier: zhIfpAT+4qI7ToO/aeth0ab/ZdR7Lj64ssqlNQ6000A=
Subject key identifier: E2:A6:03:68:A4:5F:AC:AF:60:2C:21:DB:23:CF:EE:B1:FD:42:13:6F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3AC7889B36FADC22A4E215001233E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4qYDaKRfrK9gLCHbI8_usf1CE28.roa
Signing time: Thu 02 Jan 2025 15:47:53 +0000
ROA not before: Thu 02 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206804
IP address blocks: 45.86.201.0/24 maxlen: 24
45.139.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:ac:78:89:b3:6f:ad:c2:2a:4e:21:50:01:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2a60368a45facaf602c21db23cfeeb1fd42136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:78:a2:ba:4e:cb:81:3f:ee:6e:70:64:59:
3b:06:7f:60:7b:f9:28:32:0c:2c:b4:5b:84:1e:eb:
d5:88:45:20:3c:69:f8:eb:57:5a:68:b5:68:79:b1:
fe:ee:c1:e6:7a:9e:44:e3:ca:f0:08:b6:d7:c6:d2:
99:6a:46:8e:0e:60:10:a1:82:f0:99:06:c4:8c:12:
75:e1:41:46:6b:cf:bc:a9:29:52:4d:94:3e:3b:58:
f2:9a:7e:76:bc:ba:6b:42:8b:5a:69:8d:df:f9:65:
8b:70:b3:75:fc:91:e7:6b:7f:3d:33:47:7f:c7:2e:
7b:ae:92:cb:91:3b:23:15:6c:dd:c9:cd:3d:2d:a4:
63:df:c8:5d:e3:14:60:ee:16:c7:27:09:3e:a7:91:
89:70:4f:a3:ed:64:f8:ba:94:84:b4:07:be:a0:3f:
89:5a:37:43:c6:95:25:50:4c:5f:79:2d:e9:99:a8:
04:58:d9:74:8f:dc:64:5e:6a:44:ca:ae:49:cb:a6:
6d:3b:d9:26:3d:94:50:a9:9d:40:36:a7:23:7f:46:
83:42:20:0a:5b:35:b9:52:3f:c4:30:65:b4:aa:3f:
45:49:32:0e:43:56:8f:a5:5e:22:8a:8d:95:cb:87:
8e:39:4c:53:1d:07:ab:70:7c:48:58:ba:81:31:b1:
31:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A6:03:68:A4:5F:AC:AF:60:2C:21:DB:23:CF:EE:B1:FD:42:13:6F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/4qYDaKRfrK9gLCHbI8_usf1CE28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.201.0/24
45.139.48.0/23
Signature Algorithm: sha256WithRSAEncryption
71:7c:87:47:96:2e:9e:06:c0:86:0d:7c:2c:eb:fb:03:0b:46:
ba:18:12:18:84:f0:09:1c:be:d9:ec:db:28:6a:2e:ee:6d:65:
9f:e7:33:e0:e8:0e:b3:b5:c9:0e:8d:6a:34:78:e4:8d:03:a3:
77:db:11:93:7e:48:a9:19:25:f0:48:8d:21:e2:42:71:82:2d:
8c:7c:e0:61:08:3d:de:fd:ae:15:be:0b:8d:5e:1f:c3:ce:e7:
4a:5c:b6:33:7f:13:3c:7c:73:ea:5c:dd:ea:ef:54:cb:c8:e6:
d1:55:0d:55:38:e4:c6:3c:a1:db:14:a5:73:80:26:a9:97:53:
c8:98:d7:8d:4f:1e:18:65:84:b8:9e:dd:6e:3a:9d:3a:cc:5e:
6f:6f:5b:ee:8b:96:17:78:42:d9:49:4f:71:97:ff:87:a7:11:
66:5d:dd:f3:1c:f9:af:e9:a3:e8:b9:22:ce:7e:85:ad:ef:38:
d6:70:bd:59:d9:99:32:0a:6c:4b:10:cf:21:98:9c:7b:7f:b6:
b8:9a:46:f4:8f:2f:51:ce:64:49:5a:ca:ca:22:c2:fe:06:1b:
98:61:a5:e7:fd:f3:96:90:10:e4:94:64:cb:1d:14:b1:d4:6f:
8d:0c:30:7c:0b:b7:83:89:3a:ae:a6:15:6e:53:c5:96:61:43:
54:b3:aa:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQns6x4ibNvrcIqTiFQASM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjUwMTAyMTU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmE2MDM2OGE0NWZhY2FmNjAyYzIxZGIyM2NmZWViMWZkNDIxMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OV4orpOy4E/7m5wZFk7Bn9ge/ko
MgwstFuEHuvViEUgPGn461daaLVoebH+7sHmep5E48rwCLbXxtKZakaODmAQoYLw
mQbEjBJ14UFGa8+8qSlSTZQ+O1jymn52vLprQotaaY3f+WWLcLN1/JHna389M0d/
xy57rpLLkTsjFWzdyc09LaRj38hd4xRg7hbHJwk+p5GJcE+j7WT4upSEtAe+oD+J
WjdDxpUlUExfeS3pmagEWNl0j9xkXmpEyq5Jy6ZtO9kmPZRQqZ1ANqcjf0aDQiAK
WzW5Uj/EMGW0qj9FSTIOQ1aPpV4iio2Vy4eOOUxTHQercHxIWLqBMbExWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOKmA2ikX6yvYCwh2yPP7rH9QhNvMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvNHFZRGFLUmZySzlnTENIYkk4X3VzZjFDRTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVbJAwQB
LYswMA0GCSqGSIb3DQEBCwUAA4IBAQBxfIdHli6eBsCGDXws6/sDC0a6GBIYhPAJ
HL7Z7Nsoai7ubWWf5zPg6A6ztckOjWo0eOSNA6N32xGTfkipGSXwSI0h4kJxgi2M
fOBhCD3e/a4VvguNXh/DzudKXLYzfxM8fHPqXN3q71TLyObRVQ1VOOTGPKHbFKVz
gCapl1PImNeNTx4YZYS4nt1uOp06zF5vb1vui5YXeELZSU9xl/+HpxFmXd3zHPmv
6aPouSLOfoWt7zjWcL1Z2ZkyCmxLEM8hmJx7f7a4mkb0jy9RzmRJWsrKIsL+BhuY
YaXn/fOWkBDklGTLHRSx1G+NDDB8C7eDiTquphVuU8WWYUNUs6ri
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:37:32 2025 by rpki-client