Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/4EtVjJk4lsZOZCX63edsZ70D8bI.roa
File: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (raw, json)
Hash identifier: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=
Subject key identifier: E0:4B:55:8C:99:38:96:C6:4E:64:25:FA:DD:E7:6C:67:BD:03:F1:B2
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 01942B39D9597BE110295D84AB36E794968B
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/4EtVjJk4lsZOZCX63edsZ70D8bI.roa
Signing time: Fri 03 Jan 2025 08:13:19 +0000
ROA not before: Fri 03 Jan 2025 08:13:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43885
IP address blocks: 188.212.36.0/24 maxlen: 24
193.162.14.0/24 maxlen: 24
2a10:ce00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2b:39:d9:59:7b:e1:10:29:5d:84:ab:36:e7:94:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Jan 3 08:13:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e04b558c993896c64e6425fadde76c67bd03f1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:a6:0c:72:3c:ca:62:c9:79:38:ae:a8:20:
16:41:d1:81:14:d4:62:3e:ef:84:d9:ae:ee:33:a3:
bd:8d:72:2f:19:80:88:b5:1c:af:e6:6f:a8:09:af:
c9:aa:22:12:1f:62:07:58:df:ad:39:bd:fe:5f:b6:
39:c3:d8:05:ee:98:1b:71:99:58:52:5e:56:0b:ca:
3a:9c:9c:e5:64:18:76:2c:5e:16:80:13:f5:96:b9:
98:63:94:fb:d2:a3:78:f4:e9:27:c1:bb:c0:8a:42:
96:28:08:6a:79:1c:bc:1c:82:cd:58:b9:f1:e4:45:
fa:4f:63:1f:fa:d3:fa:de:97:cd:e5:4f:ae:2f:8e:
50:1b:96:2d:82:0f:7c:38:6d:2d:15:85:6c:3b:3b:
bf:00:f1:a5:b6:62:9d:43:1a:3b:8c:bb:25:4d:f4:
34:62:89:e0:3b:66:7a:20:07:24:70:9b:26:57:fe:
a0:39:83:da:ee:95:4e:61:7f:0a:48:e6:23:d0:ee:
fb:82:df:82:31:a3:b5:0f:c9:e9:d9:65:66:7c:bd:
0e:82:63:6b:78:f9:21:82:c3:6b:b0:3e:65:70:cd:
a2:bb:dd:cf:27:fe:fd:60:9d:33:98:e3:f6:90:c4:
a2:19:c5:17:7e:f0:98:13:90:a5:75:8c:f6:a2:13:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4B:55:8C:99:38:96:C6:4E:64:25:FA:DD:E7:6C:67:BD:03:F1:B2
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/4EtVjJk4lsZOZCX63edsZ70D8bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.36.0/24
193.162.14.0/24
IPv6:
2a10:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
0d:6c:ef:d7:17:a8:90:33:1e:e1:f7:78:ef:bb:10:2d:3d:35:
8c:6d:3a:37:ce:28:9e:02:e8:17:db:b1:db:5d:9d:2c:ec:9d:
31:8d:1b:75:63:57:ca:01:17:3f:ff:b3:f2:d4:26:37:0d:fd:
d2:e2:13:74:38:e6:02:e6:d3:39:21:ec:9f:9f:40:83:78:d0:
25:9b:fd:8a:b9:8a:45:ca:24:1c:b2:11:2a:7d:00:4d:48:da:
75:9a:ba:f7:5a:8a:90:7c:5c:ca:88:ba:75:33:91:7a:91:49:
71:a3:64:12:6e:a9:1b:93:33:7c:1f:0a:cc:f0:11:ec:29:63:
ec:f1:47:49:cf:60:72:58:fb:37:50:6a:c9:71:68:68:7f:ed:
58:15:b5:b5:5b:46:3b:2b:5a:88:97:ff:d3:f2:f0:69:72:47:
8e:1e:3a:c5:88:10:51:2e:a0:4c:8e:d5:33:76:ac:60:ba:20:
a6:73:09:11:bd:e5:d5:38:5e:24:5d:bf:4b:11:b8:df:7a:0a:
4d:2a:a0:e7:b2:15:b9:17:7c:ce:a6:64:4a:d9:52:71:00:88:
03:89:a3:00:88:3e:3b:99:bb:05:76:23:7d:2b:2a:a0:bb:2f:
59:ae:4d:2f:54:57:f7:87:60:09:5b:4a:db:05:b3:d7:ec:44:
d9:14:9a:52
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQrOdlZe+EQKV2EqzbnlJaLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5OTNmZTc3ZjYzYmVlOTA4ODhmY2RlMWExMjVhZGZlNjUz
NWQ4MTYwHhcNMjUwMTAzMDgxMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDRiNTU4Yzk5Mzg5NmM2NGU2NDI1ZmFkZGU3NmM2N2JkMDNmMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpOmDHI8ymLJeTiuqCAWQdGBFNRi
Pu+E2a7uM6O9jXIvGYCItRyv5m+oCa/JqiISH2IHWN+tOb3+X7Y5w9gF7pgbcZlY
Ul5WC8o6nJzlZBh2LF4WgBP1lrmYY5T70qN49OknwbvAikKWKAhqeRy8HILNWLnx
5EX6T2Mf+tP63pfN5U+uL45QG5Ytgg98OG0tFYVsOzu/APGltmKdQxo7jLslTfQ0
YongO2Z6IAckcJsmV/6gOYPa7pVOYX8KSOYj0O77gt+CMaO1D8np2WVmfL0OgmNr
ePkhgsNrsD5lcM2iu93PJ/79YJ0zmOP2kMSiGcUXfvCYE5CldYz2ohPhAQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOBLVYyZOJbGTmQl+t3nbGe9A/GyMB8GA1UdIwQY
MBaAFJmT/nf2O+6QiI/N4aElrf5lNdgWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYt
NjY5NTllMWJiN2ZlLzEvNEV0VmpKazRsc1pPWkNYNjNlZHNaNzBEOGJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYtNjY5NTllMWJiN2Zl
LzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvNQkAwQA
waIOMA0EAgACMAcDBQMqEM4AMA0GCSqGSIb3DQEBCwUAA4IBAQANbO/XF6iQMx7h
93jvuxAtPTWMbTo3ziieAugX27HbXZ0s7J0xjRt1Y1fKARc//7Py1CY3Df3S4hN0
OOYC5tM5Ieyfn0CDeNAlm/2KuYpFyiQcshEqfQBNSNp1mrr3WoqQfFzKiLp1M5F6
kUlxo2QSbqkbkzN8HwrM8BHsKWPs8UdJz2ByWPs3UGrJcWhof+1YFbW1W0Y7K1qI
l//T8vBpckeOHjrFiBBRLqBMjtUzdqxguiCmcwkRveXVOF4kXb9LEbjfegpNKqDn
shW5F3zOpmRK2VJxAIgDiaMAiD47mbsFdiN9Kyqguy9Zrk0vVFf3h2AJW0rbBbPX
7ETZFJpS
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:50:36 2025 by rpki-client