Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4emO2JW9OCEuV19QBkuS5-P0s4k.roa
File: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (raw, json)
Hash identifier: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=
Subject key identifier: E1:E9:8E:D8:95:BD:38:21:2E:57:5F:50:06:4B:92:E7:E3:F4:B3:89
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D63049C19C70D74110161ECB2C280E
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4emO2JW9OCEuV19QBkuS5-P0s4k.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212419
IP address blocks: 45.12.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:49:c1:9c:70:d7:41:10:16:1e:cb:2c:28:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e98ed895bd38212e575f50064b92e7e3f4b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:52:e3:36:11:6e:64:e8:aa:2b:54:09:e9:
23:05:d4:40:79:75:3f:a3:83:ca:5b:34:96:d9:1f:
71:f8:1a:c8:4c:85:e9:8d:1c:db:a4:d8:5d:9b:05:
34:3f:5f:e2:8d:3f:7d:be:78:ae:05:da:1a:df:ab:
01:da:a6:cf:f4:29:a1:89:6e:45:55:f4:cb:94:83:
3d:cf:46:26:df:41:8e:f3:23:86:31:28:e1:2d:a6:
32:22:4b:f4:25:79:d2:98:47:19:b2:7f:17:a9:b0:
84:95:a7:dd:2b:8a:cb:52:71:87:73:c4:41:01:9c:
ab:06:11:d0:22:21:3f:53:df:67:5b:05:a0:de:9e:
c4:c8:63:81:7c:d5:6f:df:05:40:69:b7:1b:fb:67:
64:fb:77:eb:47:3e:ba:de:20:19:cd:97:55:33:74:
50:c7:c3:87:06:d3:c8:7d:36:6b:57:d9:88:7d:5d:
b8:fa:49:4f:b0:cc:3f:96:9c:27:c5:22:c0:f4:dd:
12:f5:22:05:0a:ea:a8:3f:31:a2:9a:c8:df:3c:4a:
47:65:f2:5a:a2:3b:35:35:ee:a9:c7:69:0f:2b:1c:
bc:02:9c:b4:4a:a1:2a:af:2a:a2:44:9a:b7:98:ee:
c6:2f:37:37:17:ab:de:5a:26:e3:74:a8:aa:5e:34:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:8E:D8:95:BD:38:21:2E:57:5F:50:06:4B:92:E7:E3:F4:B3:89
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/4emO2JW9OCEuV19QBkuS5-P0s4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:98:f8:f7:d5:b1:7b:4e:2c:f1:a3:e9:3d:36:7e:ec:b5:f1:
66:81:7c:39:f7:8d:2b:90:a8:f3:30:8a:21:fc:84:95:d0:bb:
86:2f:a1:68:8f:c5:64:20:9b:7f:db:56:f0:9d:22:64:1f:b5:
7b:96:b6:0a:9b:4b:6d:41:1e:62:89:2b:2d:92:6a:ef:24:dc:
91:19:02:1c:5c:81:3b:8e:c0:ea:37:4c:ed:94:4c:c8:cf:ee:
ee:af:9b:73:f8:8d:f7:90:cd:5e:37:cd:be:f2:ab:df:55:28:
f9:6f:9a:9d:b3:66:6d:c9:b1:1e:22:52:84:99:22:b1:d5:85:
74:a5:19:50:6f:2d:08:a9:c1:a0:01:7d:b3:3e:bf:62:48:18:
7d:8d:e4:df:28:e8:59:f5:cf:cf:9b:37:aa:8e:59:a4:23:f2:
00:ff:cb:c6:07:e0:96:3e:04:fe:ce:69:6e:6e:0a:bb:b7:a0:
5b:e1:60:5d:c9:7e:67:ca:ce:5e:58:da:c8:6c:db:9a:36:c0:
80:29:bc:76:35:d5:b8:b7:93:9f:fa:76:20:f3:62:a4:ee:78:
d4:fb:26:76:52:0b:88:69:0d:3b:92:2d:60:34:48:e1:b4:98:
ec:82:2f:49:95:e1:9f:0a:e9:95:3d:5a:42:dd:0b:4a:33:6c:
d6:39:b3:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1jBJwZxw10EQFh7LLCgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjUwMTAxMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWU5OGVkODk1YmQzODIxMmU1NzVmNTAwNjRiOTJlN2UzZjRiMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztlS4zYRbmToqitUCekjBdRAeXU/
o4PKWzSW2R9x+BrITIXpjRzbpNhdmwU0P1/ijT99vniuBdoa36sB2qbP9CmhiW5F
VfTLlIM9z0Ym30GO8yOGMSjhLaYyIkv0JXnSmEcZsn8XqbCElafdK4rLUnGHc8RB
AZyrBhHQIiE/U99nWwWg3p7EyGOBfNVv3wVAabcb+2dk+3frRz663iAZzZdVM3RQ
x8OHBtPIfTZrV9mIfV24+klPsMw/lpwnxSLA9N0S9SIFCuqoPzGimsjfPEpHZfJa
ojs1Ne6px2kPKxy8Apy0SqEqryqiRJq3mO7GLzc3F6veWibjdKiqXjSPnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHpjtiVvTghLldfUAZLkufj9LOJMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvNGVtTzJKVzlPQ0V1VjE5UUJrdVM1LVAwczRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQwdMA0G
CSqGSIb3DQEBCwUAA4IBAQC2mPj31bF7Tizxo+k9Nn7stfFmgXw5940rkKjzMIoh
/ISV0LuGL6Foj8VkIJt/21bwnSJkH7V7lrYKm0ttQR5iiSstkmrvJNyRGQIcXIE7
jsDqN0ztlEzIz+7ur5tz+I33kM1eN82+8qvfVSj5b5qds2ZtybEeIlKEmSKx1YV0
pRlQby0IqcGgAX2zPr9iSBh9jeTfKOhZ9c/PmzeqjlmkI/IA/8vGB+CWPgT+zmlu
bgq7t6Bb4WBdyX5nys5eWNrIbNuaNsCAKbx2NdW4t5Of+nYg82Kk7njU+yZ2UguI
aQ07ki1gNEjhtJjsgi9JleGfCumVPVpC3QtKM2zWObPA
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:26 2025 by rpki-client