Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa
File: 4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa (raw, json)
Hash identifier: nxXggf/AC/RJxQoUxCNgb0lu+FwJmy4tkPULZ/J1w0w=
Subject key identifier: E0:F0:85:4D:9D:5A:7A:96:2F:3F:5D:FF:12:9E:EA:EE:66:41:BF:FB
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 01942143F7DBB2E65BC1061FC4D9E46BB985
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa
Signing time: Wed 01 Jan 2025 09:48:09 +0000
ROA not before: Wed 01 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 93.190.218.0/24 maxlen: 24
93.190.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f7:db:b2:e6:5b:c1:06:1f:c4:d9:e4:6b:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0f0854d9d5a7a962f3f5dff129eeaee6641bffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:0e:34:f5:81:1b:1e:ed:af:52:1f:d6:a1:
8a:c3:f6:00:ed:87:e6:cd:e7:4a:c0:d0:98:1f:bd:
37:48:36:08:22:10:9e:68:24:43:05:29:8a:23:5e:
97:f4:60:db:cf:26:8a:60:da:e3:99:a1:64:99:90:
5b:98:85:f5:65:81:9c:ea:dc:2e:e5:51:79:63:8a:
a9:3b:8e:e4:55:99:35:ca:63:ed:06:9d:20:cc:dd:
41:0f:d9:e6:95:2d:b6:7a:e2:9e:18:fd:82:3e:7c:
f6:71:82:6d:14:ba:cc:62:cc:3f:e5:35:e8:8e:57:
c0:1f:a5:89:d0:67:31:d4:c9:de:0f:a3:9c:e5:8e:
0a:b7:39:ca:f2:d1:3e:b3:4d:ea:6b:48:c9:91:b3:
8a:53:36:d1:a8:af:8f:1c:fc:54:b8:6f:ea:cf:c2:
25:04:54:6a:36:7a:7a:93:e8:d3:e1:a3:7e:6f:19:
a7:36:8f:00:b2:1b:98:7f:8d:d4:a3:5a:8a:ee:f5:
a0:6c:94:81:09:2f:f1:0a:b1:d9:9a:65:2d:bf:80:
7f:f2:14:e5:47:ab:1b:cb:17:d9:cc:1a:88:a6:20:
4f:c5:a4:15:18:d0:8e:4c:39:88:12:ca:e8:b1:fe:
de:5c:3b:57:cd:53:bb:32:35:36:4d:b9:e6:c9:9b:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:85:4D:9D:5A:7A:96:2F:3F:5D:FF:12:9E:EA:EE:66:41:BF:FB
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/4PCFTZ1aepYvP13_Ep7q7mZBv_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:a8:df:41:dd:2b:70:25:57:66:61:0e:d2:59:dc:8a:35:e9:
fc:2f:10:a5:d9:b8:bc:f4:8a:ea:10:e8:ec:33:79:9c:82:19:
f6:83:a9:e1:54:20:2f:3a:dd:6b:b5:5c:72:68:32:40:1b:d5:
45:57:1e:8f:b6:83:3d:2c:0a:ac:55:2b:16:8d:8b:2f:80:27:
cf:da:ed:c8:81:6e:35:75:59:e6:42:4f:aa:26:b7:db:e4:7e:
c2:1e:0d:31:8e:b6:67:89:38:57:ca:54:fb:f4:36:f6:f3:64:
52:20:84:96:4f:97:7b:7e:43:04:ad:d2:a5:fb:b0:e2:9e:dc:
2b:d6:82:af:2d:6d:ab:73:8e:d6:ad:46:7f:75:d5:51:ee:de:
ac:07:03:d0:48:cb:de:27:a9:5e:bb:1c:a5:50:63:da:c6:33:
e0:fb:ed:75:2e:a6:02:89:23:e8:dc:3f:05:95:b5:4f:7f:9a:
50:bb:4f:0c:a6:69:f9:b6:c0:45:96:c6:35:84:11:f1:46:cf:
37:91:08:d5:3d:ee:53:f5:b9:a2:78:28:08:ff:4f:cc:36:06:
5b:27:2f:d3:cf:04:dd:0d:d2:d7:9a:b1:dc:43:f1:e0:7a:80:
a9:0d:22:fe:c9:d1:53:af:e5:17:eb:86:72:64:0d:7e:0b:04:
21:b6:bb:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ/fbsuZbwQYfxNnka7mFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGUxOWJmMmYyZmRiNzMwMjMyZGEyYzQ1NTFhMzEyYmEz
ZTJlZTIwHhcNMjUwMTAxMDk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYwODU0ZDlkNWE3YTk2MmYzZjVkZmYxMjllZWFlZTY2NDFiZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mcONPWBGx7tr1If1qGKw/YA7Yfm
zedKwNCYH703SDYIIhCeaCRDBSmKI16X9GDbzyaKYNrjmaFkmZBbmIX1ZYGc6twu
5VF5Y4qpO47kVZk1ymPtBp0gzN1BD9nmlS22euKeGP2CPnz2cYJtFLrMYsw/5TXo
jlfAH6WJ0Gcx1MneD6Oc5Y4KtznK8tE+s03qa0jJkbOKUzbRqK+PHPxUuG/qz8Il
BFRqNnp6k+jT4aN+bxmnNo8AshuYf43Uo1qK7vWgbJSBCS/xCrHZmmUtv4B/8hTl
R6sbyxfZzBqIpiBPxaQVGNCOTDmIEsrosf7eXDtXzVO7MjU2TbnmyZtmdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODwhU2dWnqWLz9d/xKe6u5mQb/7MB8GA1UdIwQY
MBaAFHMOGb8vL9tzAjLaLEVRoxK6Pi7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAt
Y2FmOTUxZTE1MzFkLzEvNFBDRlRaMWFlcFl2UDEzX0VwN3E3bVpCdl9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lODE3NTUtNDU5Mi00ZjIwLWFmNzAtY2FmOTUxZTE1MzFk
LzEvY3c0WnZ5OHYyM01DTXRvc1JWR2pFcm8tTHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXb7aMA0G
CSqGSIb3DQEBCwUAA4IBAQB8qN9B3StwJVdmYQ7SWdyKNen8LxCl2bi89IrqEOjs
M3mcghn2g6nhVCAvOt1rtVxyaDJAG9VFVx6PtoM9LAqsVSsWjYsvgCfP2u3IgW41
dVnmQk+qJrfb5H7CHg0xjrZniThXylT79Db282RSIISWT5d7fkMErdKl+7Dintwr
1oKvLW2rc47WrUZ/ddVR7t6sBwPQSMveJ6leuxylUGPaxjPg++11LqYCiSPo3D8F
lbVPf5pQu08Mpmn5tsBFlsY1hBHxRs83kQjVPe5T9bmieCgI/0/MNgZbJy/TzwTd
DdLXmrHcQ/HgeoCpDSL+ydFTr+UX64ZyZA1+CwQhtrsI
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:54:29 2025 by rpki-client