Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4QrnT_XJTlF0PYSILolpGGuemuA.roa
File: 4QrnT_XJTlF0PYSILolpGGuemuA.roa (raw, json)
Hash identifier: ciXZfxtZULDs53T0jmGQdh2nATSMcvG+lkh6H0M894k=
Subject key identifier: E1:0A:E7:4F:F5:C9:4E:51:74:3D:84:88:2E:89:69:18:6B:9E:9A:E0
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 01942747657FBCCC22609C0B8071464F06E1
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4QrnT_XJTlF0PYSILolpGGuemuA.roa
Signing time: Thu 02 Jan 2025 13:49:37 +0000
ROA not before: Thu 02 Jan 2025 13:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209625
IP address blocks: 84.238.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:65:7f:bc:cc:22:60:9c:0b:80:71:46:4f:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 2 13:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e10ae74ff5c94e51743d84882e8969186b9e9ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:50:d6:2f:3d:dd:4f:e0:20:3a:e7:6b:5f:
06:35:f5:42:3f:f4:29:6a:8c:9e:f3:34:ec:5c:62:
c4:6a:28:b9:46:98:d7:b8:c8:87:e6:26:4b:56:8e:
1d:0a:cd:2f:18:b4:13:bd:5d:12:5e:35:22:e4:1d:
a6:ff:74:0e:e8:ed:c6:c9:82:cb:db:27:8a:d7:fb:
f7:97:10:f6:2d:3f:86:72:fa:71:be:9b:d6:90:6f:
2c:53:31:7c:ac:52:fe:c5:71:36:a1:c0:3f:e8:9c:
db:51:97:87:64:89:51:e8:f4:fb:d7:aa:f6:01:13:
f0:79:10:4b:5b:2b:25:73:01:ed:66:92:bf:14:45:
21:2b:cc:81:91:0b:0d:81:29:d5:f4:24:e2:8a:e9:
bf:0d:cd:8f:f0:6a:87:2a:83:8e:46:6a:52:47:a5:
13:7a:70:0a:5d:79:de:2f:db:cf:70:fc:a7:3f:9f:
94:81:f4:be:da:4d:3e:f5:5a:ab:15:3a:97:45:94:
fa:80:ad:a5:eb:db:85:94:bd:86:8e:ae:0e:f8:95:
87:44:06:01:d8:b8:d0:b6:09:06:93:96:c0:c7:9c:
6b:fb:ea:aa:07:a2:95:04:15:da:72:c7:a9:62:51:
98:72:5f:f4:27:02:ec:be:6e:1a:2a:63:d8:57:ad:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0A:E7:4F:F5:C9:4E:51:74:3D:84:88:2E:89:69:18:6B:9E:9A:E0
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/4QrnT_XJTlF0PYSILolpGGuemuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.133.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a4:51:e7:9f:35:86:7c:1b:93:19:99:92:e6:9a:2c:c7:60:
7e:dc:66:ae:dc:8f:7f:07:41:46:9e:e8:08:41:00:b4:1e:71:
e7:17:32:b5:4d:f0:64:92:8d:1c:3d:46:1a:0f:21:27:c5:18:
fb:64:20:34:61:61:a9:a8:2d:b3:0a:73:4c:05:d6:04:9b:36:
60:03:ae:7e:08:c8:0e:e1:9f:58:28:d4:7b:56:3d:25:af:56:
95:74:c2:4d:89:a5:8f:49:a7:9c:15:b5:d5:a5:44:81:1c:c1:
07:62:f3:11:32:8e:ef:29:30:99:4c:e1:11:b3:fe:1a:55:67:
a1:d1:e0:d4:87:96:c5:6b:0e:e5:27:ef:c0:ac:77:29:5e:13:
50:cb:54:87:d9:63:c3:d0:8a:cf:13:7c:24:9b:06:6c:8f:72:
e9:4d:5f:cd:cb:06:c4:10:c0:20:d3:4e:4f:e4:9f:67:42:6f:
5b:64:47:da:25:cc:9f:f8:65:03:1e:fe:6d:af:d6:60:44:6b:
14:c6:de:77:92:61:e4:56:dc:67:8c:a3:f2:41:3a:12:a1:3c:
1b:8c:a7:88:02:4e:42:fa:7a:fb:eb:75:9f:b0:4a:33:a7:42:
8c:57:f8:b6:f1:88:23:93:53:25:78:1a:ec:55:3a:22:ce:0f:
23:41:8a:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR2V/vMwiYJwLgHFGTwbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzhhMTcxM2M3NDc2ZTAwZWQyYjc3ZmQ5OGZkODkzMzAz
NjVkODcwHhcNMjUwMTAyMTM0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTBhZTc0ZmY1Yzk0ZTUxNzQzZDg0ODgyZTg5NjkxODZiOWU5YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpQ1i893U/gIDrna18GNfVCP/Qp
aoye8zTsXGLEaii5RpjXuMiH5iZLVo4dCs0vGLQTvV0SXjUi5B2m/3QO6O3GyYLL
2yeK1/v3lxD2LT+GcvpxvpvWkG8sUzF8rFL+xXE2ocA/6JzbUZeHZIlR6PT716r2
ARPweRBLWyslcwHtZpK/FEUhK8yBkQsNgSnV9CTiium/Dc2P8GqHKoOORmpSR6UT
enAKXXneL9vPcPynP5+UgfS+2k0+9VqrFTqXRZT6gK2l69uFlL2Gjq4O+JWHRAYB
2LjQtgkGk5bAx5xr++qqB6KVBBXacsepYlGYcl/0JwLsvm4aKmPYV600KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEK50/1yU5RdD2EiC6JaRhrnprgMB8GA1UdIwQY
MBaAFFbIoXE8dHbgDtK3f9mP2JMwNl2HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQt
OTFlMzJjNTE3MTUyLzEvNFFyblRfWEpUbEYwUFlTSUxvbHBHR3VlbXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8yM2Q1MjUtODI5Ni00ZjljLTlkZTQtOTFlMzJjNTE3MTUy
LzEvVnNpaGNUeDBkdUFPMHJkXzJZX1lrekEyWFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVO6FMA0G
CSqGSIb3DQEBCwUAA4IBAQBipFHnnzWGfBuTGZmS5posx2B+3Gau3I9/B0FGnugI
QQC0HnHnFzK1TfBkko0cPUYaDyEnxRj7ZCA0YWGpqC2zCnNMBdYEmzZgA65+CMgO
4Z9YKNR7Vj0lr1aVdMJNiaWPSaecFbXVpUSBHMEHYvMRMo7vKTCZTOERs/4aVWeh
0eDUh5bFaw7lJ+/ArHcpXhNQy1SH2WPD0IrPE3wkmwZsj3LpTV/NywbEEMAg005P
5J9nQm9bZEfaJcyf+GUDHv5tr9ZgRGsUxt53kmHkVtxnjKPyQToSoTwbjKeIAk5C
+nr763WfsEozp0KMV/i28Ygjk1MleBrsVToizg8jQYoE
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:30 2025 by rpki-client