Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4gUeII5uNOSsk7ig0e6KHlG6BHA.roa
File: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (raw, json)
Hash identifier: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=
Subject key identifier: E2:05:1E:20:8E:6E:34:E4:AC:93:B8:A0:D1:EE:8A:1E:51:BA:04:70
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01942747CCFF9FBD3770D05EFEF1CB63EDB8
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4gUeII5uNOSsk7ig0e6KHlG6BHA.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31400
IP address blocks: 5.183.95.0/24 maxlen: 24
45.86.163.0/24 maxlen: 24
46.30.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cc:ff:9f:bd:37:70:d0:5e:fe:f1:cb:63:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2051e208e6e34e4ac93b8a0d1ee8a1e51ba0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:16:26:91:d7:c8:3f:72:a3:ac:37:5e:e3:
b6:7c:61:a4:7c:19:7a:98:7d:5b:e2:81:b2:38:99:
d2:18:f1:58:fa:bf:3c:b5:cf:8b:7f:c8:d5:c7:a7:
b7:80:e3:22:21:37:cf:0c:51:7f:5d:07:8e:6e:d5:
41:22:64:77:e4:92:0d:fa:df:3f:d7:0a:80:b0:80:
8d:d5:ba:42:4e:ca:3e:16:65:2b:ac:52:ea:2f:2d:
48:5c:f4:03:e2:af:35:64:58:f7:e0:4c:e7:c0:0a:
e4:72:22:88:63:fd:14:ee:4a:65:e1:03:a6:f0:b9:
6c:b8:02:1e:bd:c5:3a:9c:46:3c:1d:d6:b9:73:30:
a8:9c:a9:aa:17:fc:5b:f3:d4:57:73:5c:b8:50:a8:
22:12:cd:bd:61:b6:39:86:ca:ed:a3:a9:55:f2:3b:
b4:8b:31:76:cd:14:9a:e3:e3:54:c5:e1:e1:8d:b1:
80:0b:df:61:5c:1a:b8:6a:06:bb:96:95:52:2b:59:
1d:41:9f:16:9c:20:93:f2:58:a3:69:d9:d9:d8:80:
75:c8:fa:59:79:13:c7:8a:87:e4:e6:8d:80:ec:d9:
26:f7:7a:96:99:54:8f:79:e7:fb:6c:70:0e:fe:d7:
1c:7f:60:15:b0:53:b9:01:09:5a:f7:90:2e:36:73:
d2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:05:1E:20:8E:6E:34:E4:AC:93:B8:A0:D1:EE:8A:1E:51:BA:04:70
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4gUeII5uNOSsk7ig0e6KHlG6BHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.95.0/24
45.86.163.0/24
46.30.189.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f4:fc:16:bd:54:12:b7:99:13:52:88:bd:36:88:b6:b6:98:
f7:90:42:e0:d0:60:05:5b:c7:59:02:71:5a:63:e7:eb:73:a0:
b9:8e:53:b5:9d:1f:6d:13:0c:b6:00:9f:31:42:f4:99:01:34:
12:51:17:0a:bc:68:b4:87:c6:ed:c7:89:12:7b:9c:60:f4:df:
53:17:39:c9:cf:86:0e:f3:e6:23:26:4f:32:dc:3d:7f:f0:71:
f9:8a:52:8e:1e:39:60:7d:89:94:e6:d6:ae:43:ec:95:ef:3d:
0d:9a:ed:5b:07:47:53:6a:2a:39:91:41:ff:54:af:58:6d:7c:
22:f5:f6:20:ae:d9:b0:ad:91:20:84:f5:39:04:6f:b4:a8:51:
1c:a4:4f:52:27:2e:9e:05:73:6f:19:c5:16:bf:79:30:37:7e:
ef:74:7c:49:e5:50:8f:40:3a:35:78:1e:25:75:e6:b8:a5:32:
48:40:45:52:d5:ce:49:23:46:18:51:13:ac:84:d6:b2:9b:8d:
74:e3:bd:9c:98:80:45:98:f3:70:4b:b5:a2:0d:71:e0:d5:18:
92:5d:56:0d:75:40:37:6d:74:3a:59:22:9a:0e:6d:8b:03:70:
ac:9d:11:37:7f:bb:a8:65:86:78:99:e4:47:02:00:11:32:51:
12:c9:17:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR8z/n703cNBe/vHLY+24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjUwMTAyMTM1MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA1MWUyMDhlNmUzNGU0YWM5M2I4YTBkMWVlOGExZTUxYmEwNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PoWJpHXyD9yo6w3XuO2fGGkfBl6
mH1b4oGyOJnSGPFY+r88tc+Lf8jVx6e3gOMiITfPDFF/XQeObtVBImR35JIN+t8/
1wqAsICN1bpCTso+FmUrrFLqLy1IXPQD4q81ZFj34EznwArkciKIY/0U7kpl4QOm
8LlsuAIevcU6nEY8Hda5czConKmqF/xb89RXc1y4UKgiEs29YbY5hsrto6lV8ju0
izF2zRSa4+NUxeHhjbGAC99hXBq4aga7lpVSK1kdQZ8WnCCT8lijadnZ2IB1yPpZ
eRPHiofk5o2A7Nkm93qWmVSPeef7bHAO/tccf2AVsFO5AQla95AuNnPSqQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOIFHiCObjTkrJO4oNHuih5RugRwMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNGdVZUlJNXVOT1NzazdpZzBlNktIbEc2QkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbdfAwQA
LVajAwQALh69MA0GCSqGSIb3DQEBCwUAA4IBAQAn9PwWvVQSt5kTUoi9Noi2tpj3
kELg0GAFW8dZAnFaY+frc6C5jlO1nR9tEwy2AJ8xQvSZATQSURcKvGi0h8btx4kS
e5xg9N9TFznJz4YO8+YjJk8y3D1/8HH5ilKOHjlgfYmU5tauQ+yV7z0Nmu1bB0dT
aio5kUH/VK9YbXwi9fYgrtmwrZEghPU5BG+0qFEcpE9SJy6eBXNvGcUWv3kwN37v
dHxJ5VCPQDo1eB4ldea4pTJIQEVS1c5JI0YYUROshNaym410472cmIBFmPNwS7Wi
DXHg1RiSXVYNdUA3bXQ6WSKaDm2LA3CsnRE3f7uoZYZ4meRHAgARMlESyRe/
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:58 2025 by rpki-client