Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/414mJAOUSNu3m-jeC6Gaqzpcdro.roa
File: 414mJAOUSNu3m-jeC6Gaqzpcdro.roa (raw, json)
Hash identifier: 6AsCniuD18ShZGC96pq7Lk3jFSVDqkI3pH9KuuXc8nY=
Subject key identifier: E3:5E:26:24:03:94:48:DB:B7:9B:E8:DE:0B:A1:9A:AB:3A:5C:76:BA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71AA1680192496D53F0D1B6D84DC2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/414mJAOUSNu3m-jeC6Gaqzpcdro.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200453
IP address blocks: 185.94.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1a:a1:68:01:92:49:6d:53:f0:d1:b6:d8:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e35e2624039448dbb79be8de0ba19aab3a5c76ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:92:b5:d6:be:54:bb:55:7f:2c:e3:d6:84:ad:
00:47:ec:80:91:26:bd:6c:b4:9f:dd:87:dc:6d:42:
7c:58:52:bc:2a:db:57:8d:83:a3:11:fb:d2:3d:4d:
b6:03:68:f9:27:18:8c:f7:8b:5b:8e:99:49:7f:d3:
5d:30:8c:9c:2c:3e:d6:b1:60:fd:0e:76:31:35:45:
10:8c:38:64:00:e3:71:ac:c6:b2:6e:aa:8a:75:80:
16:5d:98:95:c0:4e:83:90:35:3b:67:34:c1:95:af:
78:5b:52:2c:a9:a5:b8:83:7e:a2:8b:af:26:f8:9a:
26:97:0e:9d:14:83:1a:d3:94:12:01:b5:75:ae:ee:
4f:d7:29:5b:b5:ee:2b:ea:fb:a2:5f:28:13:c8:6e:
39:aa:a5:65:f6:5c:2b:dc:61:8f:b7:96:e9:93:f8:
d5:78:7f:bd:3c:3b:50:43:69:06:2e:93:5a:71:fa:
90:aa:cd:26:79:5c:6c:83:1d:51:b3:94:a7:2f:f3:
85:d9:67:6d:07:8b:0c:12:46:a5:da:f0:9b:5b:1e:
6c:dd:8e:b4:25:9b:f9:35:a1:3f:89:4a:31:79:81:
20:f3:75:7f:fa:d0:11:a9:ac:ad:c6:b3:cb:d0:65:
8a:f5:60:c9:67:ff:e9:a5:68:d0:d8:6a:03:20:0b:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:26:24:03:94:48:DB:B7:9B:E8:DE:0B:A1:9A:AB:3A:5C:76:BA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/414mJAOUSNu3m-jeC6Gaqzpcdro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0e:93:0d:d4:a6:2d:de:fd:fb:19:1e:0d:f2:37:71:9c:e2:
43:0a:bd:81:fb:f8:2b:a2:25:be:27:5f:15:2d:44:63:c4:ab:
cd:af:4a:5e:f3:4f:ff:b1:8f:18:0a:1c:9e:b6:4f:ad:ce:e2:
87:6f:4e:79:c3:7f:07:d6:f6:67:69:49:c9:d3:f4:30:d3:43:
fd:99:bb:48:77:17:82:f5:91:d5:6a:6e:7c:c7:ab:96:3e:25:
20:19:de:0b:52:25:00:03:e5:c0:4f:4f:3a:a9:96:f7:a3:f2:
8e:90:3a:73:cd:3e:24:3d:82:f1:10:97:c0:45:f2:33:d8:35:
0c:ef:4d:50:9b:77:fc:c3:37:44:3c:fd:9e:d4:ff:0b:84:8e:
aa:d0:17:a1:90:c9:90:7e:0a:4f:83:79:da:06:f4:ae:63:ff:
5a:19:60:bd:12:c6:1e:54:7a:78:c7:88:d5:75:aa:d5:49:22:
b1:e0:0f:a3:50:eb:50:80:f6:92:f1:58:84:08:48:e8:a8:1b:
51:fa:70:2b:59:0a:8e:ca:e9:fc:17:a6:cc:1b:2c:42:8a:88:
7d:bc:03:0e:57:be:14:49:79:e0:f5:1b:6b:b4:92:01:5d:e9:
31:ba:0c:cd:e5:a0:c2:c0:e2:2d:c3:02:cf:f0:0c:6b:46:2e:
00:2c:30:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xqhaAGSSW1T8NG22E3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzVlMjYyNDAzOTQ0OGRiYjc5YmU4ZGUwYmExOWFhYjNhNWM3NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJK11r5Uu1V/LOPWhK0AR+yAkSa9
bLSf3YfcbUJ8WFK8KttXjYOjEfvSPU22A2j5JxiM94tbjplJf9NdMIycLD7WsWD9
DnYxNUUQjDhkAONxrMaybqqKdYAWXZiVwE6DkDU7ZzTBla94W1IsqaW4g36ii68m
+Jomlw6dFIMa05QSAbV1ru5P1ylbte4r6vuiXygTyG45qqVl9lwr3GGPt5bpk/jV
eH+9PDtQQ2kGLpNacfqQqs0meVxsgx1Rs5SnL/OF2WdtB4sMEkal2vCbWx5s3Y60
JZv5NaE/iUoxeYEg83V/+tARqaytxrPL0GWK9WDJZ//ppWjQ2GoDIAuwVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONeJiQDlEjbt5vo3guhmqs6XHa6MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvNDE0bUpBT1VTTnUzbS1qZUM2R2FxenBjZHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV6mMA0G
CSqGSIb3DQEBCwUAA4IBAQCKDpMN1KYt3v37GR4N8jdxnOJDCr2B+/groiW+J18V
LURjxKvNr0pe80//sY8YChyetk+tzuKHb055w38H1vZnaUnJ0/Qw00P9mbtIdxeC
9ZHVam58x6uWPiUgGd4LUiUAA+XAT086qZb3o/KOkDpzzT4kPYLxEJfARfIz2DUM
701Qm3f8wzdEPP2e1P8LhI6q0BehkMmQfgpPg3naBvSuY/9aGWC9EsYeVHp4x4jV
darVSSKx4A+jUOtQgPaS8ViECEjoqBtR+nArWQqOyun8F6bMGyxCioh9vAMOV74U
SXng9RtrtJIBXekxugzN5aDCwOItwwLP8AxrRi4ALDDd
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:39 2025 by rpki-client