Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/4tF4-i9U2calaQJH5W9DdonR7g8.roa
File: 4tF4-i9U2calaQJH5W9DdonR7g8.roa (raw, json)
Hash identifier: c6hF2fcYIr6EH2qbgW+meE0n3KbUVbdo/KfH+zDiN2k=
Subject key identifier: E2:D1:78:FA:2F:54:D9:C6:A5:69:02:47:E5:6F:43:76:89:D1:EE:0F
Certificate issuer: /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial: 01963EA9FED9EA1D389589EF02EBC64B0C41
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/4tF4-i9U2calaQJH5W9DdonR7g8.roa
Signing time: Wed 16 Apr 2025 12:54:10 +0000
ROA not before: Wed 16 Apr 2025 12:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41652
IP address blocks: 45.80.0.0/22 maxlen: 22
91.223.131.0/24 maxlen: 24
193.26.14.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
2a0e:3780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:a9:fe:d9:ea:1d:38:95:89:ef:02:eb:c6:4b:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
Validity
Not Before: Apr 16 12:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2d178fa2f54d9c6a5690247e56f437689d1ee0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:bb:c4:6d:46:5c:74:cf:d7:bc:06:80:67:
58:d4:3b:59:08:53:fc:17:86:e1:da:87:fe:aa:fd:
3f:2a:88:20:be:a7:5e:6a:d5:ec:03:1e:67:ab:c6:
19:24:d4:a4:ff:a9:99:85:86:97:46:d0:04:fa:1f:
05:af:2c:58:94:3b:0a:6e:ab:35:1b:a7:82:13:e2:
69:56:e4:1c:a3:f2:f1:b3:1b:0e:ba:b0:f2:02:5d:
18:bd:30:5a:3c:04:d7:4b:d3:ab:fe:e6:e7:52:88:
c2:8c:9e:21:08:98:a9:e1:70:6f:23:a0:15:07:4c:
24:44:6f:e5:1f:dd:ae:0a:ec:0d:bc:e0:80:dd:1f:
a7:28:1a:7f:15:98:64:10:47:b6:f4:97:bf:0a:f6:
28:54:9f:5d:08:16:f9:c0:9a:d9:cc:8b:b5:8c:d2:
e0:84:31:ea:a4:b3:b0:1c:91:c4:a4:5d:52:fb:6b:
b6:31:e4:04:1b:2a:05:5b:a6:83:5d:df:80:d9:30:
8e:58:8c:bf:c4:b0:0b:11:38:87:99:01:ea:7f:5d:
b5:78:9d:80:2f:e6:e4:3a:0d:55:f5:96:3c:05:aa:
51:f9:51:f2:05:56:59:26:54:07:2d:f1:92:62:e4:
92:d0:69:40:0b:04:1a:ef:45:6e:22:86:79:88:a9:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:78:FA:2F:54:D9:C6:A5:69:02:47:E5:6F:43:76:89:D1:EE:0F
X509v3 Authority Key Identifier:
keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/4tF4-i9U2calaQJH5W9DdonR7g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.0.0/22
91.223.131.0/24
193.26.14.0/24
193.26.21.0-193.26.22.255
IPv6:
2a0e:3780::/29
Signature Algorithm: sha256WithRSAEncryption
1c:a5:89:a0:47:30:28:5d:7a:1d:bf:18:c4:2d:15:85:b8:d3:
c5:53:2f:92:a0:f4:f6:d4:5d:53:83:6a:3f:f1:5c:40:c1:99:
8e:a1:f0:c8:33:47:d3:63:62:67:d5:04:ef:7b:b5:a1:22:13:
57:e9:44:3a:a8:52:db:ff:e1:f7:c9:04:14:a3:2e:f7:eb:69:
e8:03:18:bd:5e:54:3e:5f:ac:02:c1:6d:83:ca:5a:1f:ce:25:
7a:b0:81:b2:18:fe:c2:fc:5e:78:79:a4:80:b6:ac:bf:a2:3f:
86:fa:bb:9f:9a:c1:ba:b5:bd:d4:b6:8d:84:8b:41:dc:cf:7e:
00:ed:be:3a:8f:37:0c:66:b9:89:d6:47:54:d7:eb:a4:f8:b6:
84:24:ce:3e:a7:00:46:59:2e:dc:b2:5b:d8:6e:9a:69:c6:f0:
be:62:a9:c6:9d:9c:d8:e3:0e:be:9f:66:b0:80:ea:de:f9:cb:
1f:3e:f8:1a:92:5a:94:63:1e:21:a0:fd:75:e7:13:b9:62:82:
ac:50:a6:73:ba:f1:92:6e:d3:00:cf:5d:2d:d0:63:f1:75:86:
16:1f:e3:d8:ea:43:32:ae:35:58:6c:7d:a4:47:13:4b:91:5e:
ed:17:1d:9a:63:b4:b7:17:3e:89:64:18:e7:48:91:ba:25:da:
ff:64:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:01:23 2025 by rpki-client