Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa
File: 4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa (raw, json)
Hash identifier: aS+lefUlxdDyZxk7hvBM2gPb0KZ4ihSIRGGBXAMkKqI=
Subject key identifier: E3:16:79:39:1A:3E:26:78:B2:1B:F5:0F:DD:7E:19:8C:8F:2F:3F:98
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019421B23AB2F0D2E24B9DF935EA23A48815
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21140
IP address blocks: 185.212.88.0/23 maxlen: 23
185.212.90.0/24 maxlen: 24
185.212.91.0/24 maxlen: 24
2a0b:7540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:b2:f0:d2:e2:4b:9d:f9:35:ea:23:a4:88:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e31679391a3e2678b21bf50fdd7e198c8f2f3f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:be:c8:d8:ca:d1:d9:8f:23:66:6b:90:83:
4e:00:ba:ac:9c:31:aa:c8:39:fa:bb:66:f1:2a:d6:
43:0b:af:16:fa:33:17:7a:9a:dc:a0:2d:b8:65:62:
89:9a:72:22:9a:6a:1b:ea:3a:12:8e:05:b1:c8:b1:
d3:7a:3a:2f:bb:24:46:78:64:32:1f:4c:84:e9:45:
35:c1:1b:e9:1f:30:df:73:c0:d4:f3:52:17:3b:78:
2d:4d:44:66:39:74:0d:83:23:21:cf:3b:c5:cc:48:
b0:01:81:2e:46:94:ae:67:68:43:e5:d8:82:e9:bf:
b1:15:ea:e1:84:b3:0b:c7:de:be:73:a2:fc:c5:ac:
48:89:90:f0:59:78:66:54:10:e5:1d:d8:f7:cd:43:
b8:59:29:13:9c:1d:9d:78:f7:49:6b:82:9f:37:a8:
22:f6:75:da:97:d5:62:9c:1f:80:c5:b8:11:cb:dc:
fe:3c:3d:2b:8d:4a:65:15:03:35:cc:68:01:ba:77:
c7:25:27:4f:46:d9:77:ad:ac:c2:d5:94:0a:6e:39:
da:12:ae:57:09:c6:51:19:fd:c5:0a:6e:e5:31:11:
5d:d9:04:f7:87:58:b4:ea:4e:1e:55:b2:c1:80:9b:
00:fe:e9:9e:43:81:24:9f:5c:ee:9a:66:8e:15:b6:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:16:79:39:1A:3E:26:78:B2:1B:F5:0F:DD:7E:19:8C:8F:2F:3F:98
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/4xZ5ORo-JniyG_UP3X4ZjI8vP5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0/22
IPv6:
2a0b:7540::/29
Signature Algorithm: sha256WithRSAEncryption
75:82:24:e2:39:0c:fa:96:7f:42:5b:e5:a8:73:75:ae:03:e3:
21:ac:8a:34:b5:cb:aa:a8:d7:7f:fa:b5:e2:e0:b8:37:27:de:
d4:94:98:69:e3:ff:0d:93:8e:c5:92:15:48:46:02:b9:87:8c:
f7:b5:4d:b2:62:0d:b8:7d:b9:96:77:53:6b:ed:71:66:85:9f:
7c:31:c1:76:5a:7d:88:bf:e8:d1:da:dd:3a:4f:7b:c1:0d:34:
22:e6:1e:2b:62:06:71:f5:70:d7:99:ae:b8:a6:90:6b:d5:a7:
0b:7d:b5:f0:ff:8f:d7:9b:93:21:19:e0:0b:83:39:34:6a:ec:
19:dd:d9:b1:11:07:a7:15:b1:96:a3:0f:01:2e:70:52:1c:99:
df:89:11:c1:0b:fc:fc:b8:46:e4:c4:87:41:e2:d4:3a:06:c7:
d7:1f:7d:32:63:b1:f9:b4:aa:2a:d8:08:d5:46:3d:27:f7:3e:
0d:52:d7:c1:2d:7e:bf:49:97:6a:d3:95:8b:8f:b5:c5:0d:36:
6e:66:8d:6a:12:99:05:58:21:12:e2:68:0a:6c:9f:8a:1c:18:
3b:3a:27:0d:a7:1c:51:52:ba:37:3e:d2:e2:80:05:e2:8b:c4:
e4:0e:19:5e:75:0c:00:69:94:82:d6:49:f2:34:3a:c8:cc:33:
fe:18:e5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:50:03 2025 by rpki-client