Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa
File: 4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa (raw, json)
Hash identifier: 188bZwTUrt3prH8kliJVWf+ZzLbMtaC8U5VcRX/YSdk=
Subject key identifier: E2:B0:00:61:4A:B9:B7:58:A1:0B:BE:69:45:9F:BC:05:8B:66:A5:0A
Certificate issuer: /CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Certificate serial: 019445E9F0AC4277AF7376F881BAE623E7FD
Authority key identifier: 65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa
Signing time: Wed 08 Jan 2025 12:35:46 +0000
ROA not before: Wed 08 Jan 2025 12:35:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56510
IP address blocks: 91.235.174.0/24 maxlen: 24
188.227.204.0/22 maxlen: 22
195.69.225.0/24 maxlen: 24
195.88.202.0/23 maxlen: 23
2a02:7f84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:e9:f0:ac:42:77:af:73:76:f8:81:ba:e6:23:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ba15d47ba4f4482764472d8d97146a1ebbbf86
Validity
Not Before: Jan 8 12:35:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2b000614ab9b758a10bbe69459fbc058b66a50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:fa:3d:fa:c3:e4:a4:55:c2:84:50:b8:03:
52:38:f0:c2:b5:f3:5c:37:a9:22:e5:4f:3c:7a:5a:
25:da:d1:69:f5:6d:f8:bd:8f:8f:8e:b9:96:e9:a2:
f2:0b:03:25:67:27:e5:eb:01:e5:cc:bf:ac:72:5f:
05:ad:93:3c:64:a8:d9:07:87:6a:43:d0:b2:cd:4d:
d3:14:11:0c:e2:55:20:c8:55:29:7b:c4:da:d0:9a:
a0:52:dd:ec:80:9a:e2:56:09:d5:a7:62:29:70:83:
07:69:5d:75:77:60:8c:b9:f0:61:bc:e8:4c:58:85:
52:f4:56:83:0b:3e:21:53:62:f7:8c:0d:eb:c6:be:
a8:24:a1:19:99:3e:d4:cb:93:e3:ae:13:16:f7:33:
fe:d5:c7:95:14:14:4f:3b:a2:e7:11:bc:49:b8:25:
a3:5d:4d:3d:20:59:e8:5b:7d:b1:5c:46:b1:81:79:
0b:ca:b2:0f:aa:e9:5b:3b:30:87:ad:95:de:24:d2:
1b:e0:97:6b:0d:eb:d2:8b:be:6a:2c:64:33:29:55:
33:22:7f:ea:34:49:e5:a2:66:b3:45:d3:62:87:c1:
68:7a:6f:1a:6c:e6:d5:5c:19:58:91:c0:b3:d7:41:
4e:63:08:69:a7:65:d8:bb:aa:ba:8b:29:49:d6:e1:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B0:00:61:4A:B9:B7:58:A1:0B:BE:69:45:9F:BC:05:8B:66:A5:0A
X509v3 Authority Key Identifier:
keyid:65:BA:15:D4:7B:A4:F4:48:27:64:47:2D:8D:97:14:6A:1E:BB:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZboV1Huk9EgnZEctjZcUah67v4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/4rAAYUq5t1ihC75pRZ-8BYtmpQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3090dc-7d28-4228-8380-fe3b918c3097/1/ZboV1Huk9EgnZEctjZcUah67v4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.174.0/24
188.227.204.0/22
195.69.225.0/24
195.88.202.0/23
IPv6:
2a02:7f84::/30
Signature Algorithm: sha256WithRSAEncryption
67:b3:a4:66:ec:26:72:d5:27:8a:78:68:ca:e1:92:93:96:ae:
a9:78:ac:3d:0f:4a:7d:c1:f8:82:f7:92:1d:16:d8:83:1d:fd:
8e:63:aa:5c:73:a0:cd:41:e4:4b:13:27:23:eb:bb:f3:e7:08:
d3:73:f9:9b:a5:61:00:06:f0:91:2b:46:95:d8:e5:b7:e9:b4:
07:f4:43:75:27:44:2c:99:94:9b:12:f0:d6:98:2e:fb:0d:70:
32:34:67:60:12:2f:8e:29:f8:d9:10:a3:de:54:d8:71:e1:b5:
b9:81:4e:45:1d:b2:5c:30:f4:57:c1:73:57:ff:e6:f9:19:3e:
24:f8:57:c0:74:b3:ce:cc:dd:a5:31:00:8b:7b:9e:cb:44:65:
5f:bb:da:e5:fe:96:27:21:e8:f1:2e:93:68:2c:54:f4:22:39:
73:c9:ca:3f:5c:17:81:1f:30:fd:80:f8:96:cd:fb:cd:45:92:
c1:7b:9e:60:69:bb:13:bb:77:df:f9:e6:fa:7c:18:0c:de:79:
47:e1:7b:8b:6a:54:17:9a:64:4a:f8:76:29:bc:a1:bc:52:e1:
0d:03:b6:ea:40:00:0b:fa:47:c0:59:e6:1d:ba:e2:a7:46:5f:
ec:23:b5:15:86:28:b1:aa:99:a5:c6:21:29:73:02:86:07:12:
b9:44:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:39 2025 by rpki-client