Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa
File: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (raw, json)
Hash identifier: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=
Subject key identifier: E2:7B:F0:FA:FB:8A:77:8C:5B:02:C2:C5:A4:CA:47:35:C4:D6:9D:7B
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 019421B1AA270D8984EA02C1D51FB402B7A3
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206575
IP address blocks: 185.98.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:aa:27:0d:89:84:ea:02:c1:d5:1f:b4:02:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e27bf0fafb8a778c5b02c2c5a4ca4735c4d69d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:ae:84:d0:56:00:f3:fa:c5:c9:d5:a4:b7:
ef:f1:bc:4b:22:40:18:7d:81:fb:8b:64:10:11:37:
0a:bf:4d:d7:be:fa:6f:ff:a8:26:a6:95:b0:0d:77:
32:d6:eb:c6:13:d0:d4:8a:17:96:7b:78:e8:ff:80:
47:4c:04:00:6a:bb:f3:0c:88:84:87:64:49:52:18:
80:04:3c:b1:bd:f5:ed:99:e5:6b:98:6f:66:b8:94:
ea:03:bc:d5:12:f8:79:9e:2a:f9:10:ce:ca:e6:0f:
8e:be:68:3d:7c:2f:75:ff:76:85:84:1b:c5:a4:49:
ce:b0:3e:a7:05:a5:60:20:6e:d3:13:f5:77:b7:24:
0c:ac:06:a0:92:b0:cd:c9:25:9f:b6:4b:e5:1a:32:
5d:c9:0a:23:25:91:7c:9a:12:32:0d:58:e4:6b:10:
75:f6:04:0f:ca:ee:14:43:c8:0b:56:1e:c9:8f:17:
45:3c:d5:ca:93:61:da:cd:a8:8c:9c:0c:80:03:72:
1e:e9:c3:a8:81:b7:34:86:3f:3a:f1:62:59:06:ae:
0d:5e:51:bf:0e:6f:4c:c3:87:ef:25:29:37:6e:fa:
01:76:d3:6e:7b:4a:8d:fe:15:f1:18:ee:86:f7:56:
91:40:8e:25:50:81:ae:c2:ac:22:98:bd:c2:94:3e:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:F0:FA:FB:8A:77:8C:5B:02:C2:C5:A4:CA:47:35:C4:D6:9D:7B
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.12.0/23
Signature Algorithm: sha256WithRSAEncryption
76:f2:e5:18:a6:af:c6:7f:79:8f:77:d5:41:d0:af:76:f6:0c:
38:b3:59:7d:72:a7:07:15:2c:38:40:c6:b9:87:eb:19:5d:51:
cb:6c:97:b0:6b:3c:e2:58:58:bf:54:14:97:38:69:70:0a:f0:
a4:94:fd:10:06:bc:27:e9:5f:00:bc:10:d8:01:bc:35:ae:0b:
e4:2d:94:d1:4e:58:da:90:e0:e0:a5:22:12:24:00:86:03:7f:
95:57:f7:52:e4:12:e6:39:20:f6:77:a7:fb:be:82:c8:b3:bb:
a6:e9:5b:db:4c:9b:eb:78:2f:82:60:6d:ec:50:2a:07:3b:2e:
1b:75:aa:fa:d1:6c:a0:69:d9:6b:4a:14:29:c6:0e:1a:f1:c3:
98:7a:67:3e:24:21:84:56:7e:70:00:d9:49:c1:40:d2:01:11:
65:cb:6e:5e:65:be:93:dd:50:07:ca:a3:ff:82:a9:77:c1:d3:
ab:97:e5:8d:c0:3b:18:49:ff:90:68:ac:84:1d:60:0e:fe:64:
a7:e1:63:6d:ed:2c:4c:38:0f:da:ba:73:09:67:3c:da:13:7e:
27:2d:2a:d3:3b:ef:07:8d:4b:92:18:f6:68:01:56:ee:cd:b0:
d2:8a:a5:e5:bf:12:41:93:42:76:34:56:6d:15:0e:60:fc:cb:
9e:ba:c5:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsaonDYmE6gLB1R+0ArejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjUwMTAxMTE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjdiZjBmYWZiOGE3NzhjNWIwMmMyYzVhNGNhNDczNWM0ZDY5ZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+uhNBWAPP6xcnVpLfv8bxLIkAY
fYH7i2QQETcKv03Xvvpv/6gmppWwDXcy1uvGE9DUiheWe3jo/4BHTAQAarvzDIiE
h2RJUhiABDyxvfXtmeVrmG9muJTqA7zVEvh5nir5EM7K5g+Ovmg9fC91/3aFhBvF
pEnOsD6nBaVgIG7TE/V3tyQMrAagkrDNySWftkvlGjJdyQojJZF8mhIyDVjkaxB1
9gQPyu4UQ8gLVh7JjxdFPNXKk2HazaiMnAyAA3Ie6cOogbc0hj868WJZBq4NXlG/
Dm9Mw4fvJSk3bvoBdtNue0qN/hXxGO6G91aRQI4lUIGuwqwimL3ClD4toQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOJ78Pr7ineMWwLCxaTKRzXE1p17MB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvNG52dy12dUtkNHhiQXNMRnBNcEhOY1RXblhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWIMMA0G
CSqGSIb3DQEBCwUAA4IBAQB28uUYpq/Gf3mPd9VB0K929gw4s1l9cqcHFSw4QMa5
h+sZXVHLbJewazziWFi/VBSXOGlwCvCklP0QBrwn6V8AvBDYAbw1rgvkLZTRTlja
kODgpSISJACGA3+VV/dS5BLmOSD2d6f7voLIs7um6VvbTJvreC+CYG3sUCoHOy4b
dar60WygadlrShQpxg4a8cOYemc+JCGEVn5wANlJwUDSARFly25eZb6T3VAHyqP/
gql3wdOrl+WNwDsYSf+QaKyEHWAO/mSn4WNt7SxMOA/aunMJZzzaE34nLSrTO+8H
jUuSGPZoAVbuzbDSiqXlvxJBk0J2NFZtFQ5g/MueusU/
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:48 2025 by rpki-client