Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa
File: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (raw, json)
Hash identifier: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=
Subject key identifier: D4:DE:18:F9:CC:73:FC:9F:33:BF:25:48:3E:7E:31:69:0E:7A:5B:62
Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Certificate serial: 019426D95248CBAC5AD822EFFBCADECFE50A
Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211903
IP address blocks: 45.94.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:48:cb:ac:5a:d8:22:ef:fb:ca:de:cf:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4de18f9cc73fc9f33bf25483e7e31690e7a5b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:4d:0a:3e:a4:a8:d0:57:46:40:fe:08:48:
79:18:28:d8:09:f9:da:86:07:5a:b0:ba:a6:f4:a1:
24:01:96:8e:b9:75:1b:d7:e6:07:77:ae:1a:75:56:
de:2f:1a:0a:28:d1:47:a9:32:b4:bf:08:bc:42:dd:
cb:3b:fc:47:da:e0:6f:e9:52:18:29:f2:ea:91:59:
54:a9:5c:d0:1b:6f:57:68:6c:74:25:fb:2f:27:2a:
0a:d9:6b:31:8f:63:18:70:2c:aa:76:4d:13:03:7c:
a0:60:3d:a2:bf:f7:82:66:b0:25:f0:01:c5:ea:13:
d1:20:f8:41:d1:38:cf:14:31:ce:3f:00:26:58:da:
54:f6:23:ae:aa:6a:5c:32:05:56:49:9c:f9:b6:3c:
d7:1b:57:ee:9b:0e:80:40:36:0e:a1:e7:ba:92:1a:
0f:f9:fb:1c:64:29:04:eb:2e:77:67:fc:90:f0:2b:
9e:99:e9:3a:ea:47:4c:67:74:4d:83:d6:39:11:64:
02:4d:f3:9c:64:89:f5:b0:92:54:52:14:7d:ab:d0:
bf:55:00:bc:5e:aa:f7:88:5b:1c:1d:e8:10:08:a0:
f4:d1:f1:b9:ba:09:77:2e:ba:7b:bc:09:54:b2:96:
3e:b5:62:36:9c:af:31:a1:ec:eb:ca:42:18:a8:88:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DE:18:F9:CC:73:FC:9F:33:BF:25:48:3E:7E:31:69:0E:7A:5B:62
X509v3 Authority Key Identifier:
keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.253.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ec:1d:6c:55:f7:27:6b:09:27:ea:d8:06:8a:7e:b1:6f:79:
2d:1f:89:1c:7a:38:aa:9c:9e:1a:d2:13:58:d0:e2:bd:c6:fa:
ea:33:16:a4:d9:77:70:ce:19:c2:db:6b:ea:61:fe:59:97:3c:
03:16:74:e7:e8:69:e8:f4:38:c7:e3:c7:a8:ba:66:7e:b0:ad:
48:1b:62:7a:13:8a:13:7e:69:9e:85:78:42:78:6f:0e:ca:89:
c0:71:91:14:72:3e:16:24:da:8d:72:bc:ea:3f:59:4d:6a:6c:
6c:a2:bd:d7:a0:52:2d:94:01:25:1a:f9:93:fc:61:bc:73:b7:
a7:38:c6:6d:0a:28:6f:d7:87:5b:a9:7e:91:d9:67:2d:4b:8b:
54:dc:95:fc:4d:9f:59:81:18:44:d6:43:35:63:a4:fe:41:b9:
af:74:59:bf:5d:d8:27:8d:3f:f2:02:c0:4f:96:d9:68:3c:19:
08:98:1c:bd:8e:78:18:a6:ef:77:18:9a:09:0e:fc:45:f0:fc:
c5:98:0c:e2:9e:b5:37:a8:dc:fb:08:49:af:32:5e:ff:7c:a5:
9c:db:ef:d7:00:2e:ab:3b:3f:50:71:f0:92:f0:39:53:11:16:
99:be:d5:ef:ca:f9:0d:19:5a:cb:4b:45:f5:7e:01:9c:cf:71:
b3:8b:a8:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VJIy6xa2CLv+8rez+UKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4
NGU1NWQwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGRlMThmOWNjNzNmYzlmMzNiZjI1NDgzZTdlMzE2OTBlN2E1YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH1NCj6kqNBXRkD+CEh5GCjYCfna
hgdasLqm9KEkAZaOuXUb1+YHd64adVbeLxoKKNFHqTK0vwi8Qt3LO/xH2uBv6VIY
KfLqkVlUqVzQG29XaGx0JfsvJyoK2Wsxj2MYcCyqdk0TA3ygYD2iv/eCZrAl8AHF
6hPRIPhB0TjPFDHOPwAmWNpU9iOuqmpcMgVWSZz5tjzXG1fumw6AQDYOoee6khoP
+fscZCkE6y53Z/yQ8Cuemek66kdMZ3RNg9Y5EWQCTfOcZIn1sJJUUhR9q9C/VQC8
Xqr3iFscHegQCKD00fG5ugl3Lrp7vAlUspY+tWI2nK8xoezrykIYqIh9JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNTeGPnMc/yfM78lSD5+MWkOeltiMB8GA1UdIwQY
MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt
NTAwMTUzOWQ3MTg1LzEvMU40WS1jeHpfSjh6dnlWSVBuNHhhUTU2VzJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1
LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV79MA0G
CSqGSIb3DQEBCwUAA4IBAQBy7B1sVfcnawkn6tgGin6xb3ktH4kcejiqnJ4a0hNY
0OK9xvrqMxak2XdwzhnC22vqYf5ZlzwDFnTn6Gno9DjH48eoumZ+sK1IG2J6E4oT
fmmehXhCeG8OyonAcZEUcj4WJNqNcrzqP1lNamxsor3XoFItlAElGvmT/GG8c7en
OMZtCihv14dbqX6R2WctS4tU3JX8TZ9ZgRhE1kM1Y6T+QbmvdFm/XdgnjT/yAsBP
ltloPBkImBy9jngYpu93GJoJDvxF8PzFmAzinrU3qNz7CEmvMl7/fKWc2+/XAC6r
Oz9QcfCS8DlTERaZvtXvyvkNGVrLS0X1fgGcz3Gzi6g1
-----END CERTIFICATE-----
Generated at Sat May 3 16:00:43 2025 by rpki-client