Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/4eT-mW2UcQ9kNb0XbHZf4utls6k.roa
File: 4eT-mW2UcQ9kNb0XbHZf4utls6k.roa (raw, json)
Hash identifier: pWKqm9dxjrmHdVu6fXo7RV80//gt2D0eFFO08R5PXW4=
Subject key identifier: E1:E4:FE:99:6D:94:71:0F:64:35:BD:17:6C:76:5F:E2:EB:65:B3:A9
Certificate issuer: /CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Certificate serial: 019424B381B86DF95A6F097C50A4F90AF637
Authority key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/4eT-mW2UcQ9kNb0XbHZf4utls6k.roa
Signing time: Thu 02 Jan 2025 01:48:51 +0000
ROA not before: Thu 02 Jan 2025 01:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205239
IP address blocks: 91.229.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:b8:6d:f9:5a:6f:09:7c:50:a4:f9:0a:f6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e4fe996d94710f6435bd176c765fe2eb65b3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:1d:ff:a0:50:e5:a1:ff:ab:47:4b:36:f3:
c0:56:b7:66:41:ae:15:1b:61:a1:bd:ae:f7:e2:cb:
ee:91:3f:e0:e9:1a:21:c7:26:f4:37:12:53:08:36:
a4:e2:ee:6b:61:7a:20:52:9e:e5:a6:e6:1f:7e:d5:
0c:c6:85:59:a1:20:8c:3e:3d:f9:52:9a:67:40:d6:
04:07:e2:be:d8:65:28:c3:4a:3e:20:7a:36:41:85:
10:a7:cc:d7:0f:b4:fd:90:7c:de:5f:41:53:cd:d2:
4a:75:94:aa:17:f5:1d:dd:6a:ff:06:d7:07:9a:f5:
17:8b:eb:8a:59:75:5d:96:00:d0:5d:6a:4c:d8:d8:
9b:1d:cd:59:35:c4:11:ae:90:f8:e4:49:44:b2:7a:
cd:e9:d3:4e:c0:e1:c0:41:cd:93:39:d0:d0:35:90:
6f:fa:36:ec:64:2a:91:8f:19:2e:e8:43:e4:67:d4:
a0:b1:2f:43:c7:a5:27:d6:64:5d:55:ff:8e:ab:4b:
1a:7d:04:27:6b:83:b0:e8:ab:6a:49:0b:b3:4a:45:
b9:f6:d0:4c:2c:23:c2:a7:c6:54:6a:33:e4:fc:59:
c8:27:e6:97:2e:ef:a2:ad:44:f4:45:34:9d:14:68:
15:cb:50:af:da:cf:f7:53:80:59:8f:b3:3d:08:01:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:FE:99:6D:94:71:0F:64:35:BD:17:6C:76:5F:E2:EB:65:B3:A9
X509v3 Authority Key Identifier:
keyid:8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/4eT-mW2UcQ9kNb0XbHZf4utls6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.101.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5c:a9:dd:9a:7d:98:39:02:c6:7e:80:c2:bf:d3:f4:da:94:
35:21:9b:af:f5:f0:39:03:d2:72:9e:b0:ec:50:fb:6a:ff:98:
7d:b7:b1:83:73:4e:f7:2d:56:9b:b5:aa:a8:d9:aa:8f:dd:f3:
ee:a7:e3:c0:00:2d:e7:06:0e:6f:91:a3:da:84:0e:ed:00:13:
64:f2:80:1d:3d:73:52:1b:72:e1:1c:63:39:51:53:25:64:8d:
cd:7e:e1:84:cb:05:4e:2c:0b:e2:4f:ee:58:8e:8b:d8:7c:aa:
1e:0c:c8:b7:bd:14:26:c0:a5:c6:40:b2:0b:c1:61:f0:fd:a4:
f0:a6:54:96:85:50:9e:f0:34:8e:16:0e:bf:d5:c5:87:71:9e:
49:16:28:06:b9:f7:05:f5:97:bc:fd:96:a0:fc:b0:f0:ea:d8:
ca:eb:80:ce:b6:59:72:dc:2c:71:4d:a7:5e:8c:a1:1e:59:20:
ce:4d:2a:fc:5f:3e:d4:fb:30:df:3f:c0:5c:51:1e:b1:6b:2b:
d1:02:ee:82:96:2c:b9:a2:cb:1d:df:39:45:5d:af:0c:d2:53:
51:08:1c:49:c3:78:18:f5:7c:98:4c:20:76:99:10:27:b9:a9:
f1:a0:03:a2:cc:8d:c2:5d:4b:d9:2e:8d:3d:18:65:13:8a:cf:
58:4e:27:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks4G4bflabwl8UKT5CvY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTdiMTQ0NzY0MmMxNGYxMWMwNGI2NDFjZjFkOGRlOGFk
YWM3ODQwHhcNMjUwMTAyMDE0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWU0ZmU5OTZkOTQ3MTBmNjQzNWJkMTc2Yzc2NWZlMmViNjViM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxUd/6BQ5aH/q0dLNvPAVrdmQa4V
G2Ghva734svukT/g6Rohxyb0NxJTCDak4u5rYXogUp7lpuYfftUMxoVZoSCMPj35
UppnQNYEB+K+2GUow0o+IHo2QYUQp8zXD7T9kHzeX0FTzdJKdZSqF/Ud3Wr/BtcH
mvUXi+uKWXVdlgDQXWpM2NibHc1ZNcQRrpD45ElEsnrN6dNOwOHAQc2TOdDQNZBv
+jbsZCqRjxku6EPkZ9SgsS9Dx6Un1mRdVf+Oq0safQQna4Ow6KtqSQuzSkW59tBM
LCPCp8ZUajPk/FnIJ+aXLu+irUT0RTSdFGgVy1Cv2s/3U4BZj7M9CAGpmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOHk/pltlHEPZDW9F2x2X+LrZbOpMB8GA1UdIwQY
MBaAFI5XsUR2QsFPEcBLZBzx2N6K2seEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgt
YWYzMzRhMGExZTkzLzEvNGVULW1XMlVjUTlrTmIwWGJIWmY0dXRsczZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMWM3YzktY2M4MC00NWQ3LWE2ZDgtYWYzMzRhMGExZTkz
LzEvamxleFJIWkN3VThSd0V0a0hQSFkzb3JheDRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+VlMA0G
CSqGSIb3DQEBCwUAA4IBAQADXKndmn2YOQLGfoDCv9P02pQ1IZuv9fA5A9JynrDs
UPtq/5h9t7GDc073LVabtaqo2aqP3fPup+PAAC3nBg5vkaPahA7tABNk8oAdPXNS
G3LhHGM5UVMlZI3NfuGEywVOLAviT+5YjovYfKoeDMi3vRQmwKXGQLILwWHw/aTw
plSWhVCe8DSOFg6/1cWHcZ5JFigGufcF9Ze8/Zag/LDw6tjK64DOtlly3CxxTade
jKEeWSDOTSr8Xz7U+zDfP8BcUR6xayvRAu6Cliy5ossd3zlFXa8M0lNRCBxJw3gY
9XyYTCB2mRAnuanxoAOizI3CXUvZLo09GGUTis9YTide
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:57 2025 by rpki-client