Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/em3GdHNEQBbHlpzmuunEE4q_ZI8.roa
File: em3GdHNEQBbHlpzmuunEE4q_ZI8.roa (raw, json)
Hash identifier: BpM0Qjg2QGSEKls9rFeKoRK4EoSJgveIU1F9DuDBB0E=
Subject key identifier: 7A:6D:C6:74:73:44:40:16:C7:96:9C:E6:BA:E9:C4:13:8A:BF:64:8F
Certificate issuer: /CN=9577345dfcc93478c5ff221d482ee4c98483f908
Certificate serial: 01963E914656E8711EE0A13E67174958B492
Authority key identifier: 95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/em3GdHNEQBbHlpzmuunEE4q_ZI8.roa
Signing time: Wed 16 Apr 2025 12:27:10 +0000
ROA not before: Wed 16 Apr 2025 12:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35328
IP address blocks: 195.68.234.0/23 maxlen: 23
195.68.234.0/24 maxlen: 24
195.68.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:91:46:56:e8:71:1e:e0:a1:3e:67:17:49:58:b4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9577345dfcc93478c5ff221d482ee4c98483f908
Validity
Not Before: Apr 16 12:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6dc67473444016c7969ce6bae9c4138abf648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:16:66:63:64:aa:6d:58:35:5d:c0:7b:ee:
c5:c0:03:06:73:ef:c9:65:61:1b:64:a4:65:81:3f:
27:2f:84:0f:63:86:01:02:73:94:e9:ea:63:b8:d7:
5f:35:6e:db:0e:0b:ac:0c:ec:3c:0a:eb:8b:b2:74:
43:6b:be:73:f6:81:fa:b4:73:f2:34:47:e8:c4:ce:
49:29:83:7b:48:d1:bd:96:25:5d:7c:a9:b0:20:73:
1e:27:2d:10:1a:f4:0a:37:50:c8:fb:fe:88:16:be:
7c:ba:f3:21:d8:50:11:b8:68:a4:0c:cc:19:d8:59:
f8:cd:fc:bc:7c:86:8f:93:c5:e6:d5:40:28:63:7b:
ad:9b:0f:8d:b3:2f:c6:d1:2b:2c:56:01:4b:58:34:
3e:04:7f:3d:f0:e1:7f:5c:73:99:42:65:a3:cb:04:
08:5e:00:49:f5:b1:7a:eb:51:05:4c:2d:64:0a:7a:
54:26:d2:4c:7e:8c:ad:15:7a:46:c1:c0:fc:e8:51:
4f:d4:43:9f:bb:8a:a9:11:c0:7a:01:51:db:4c:18:
1e:59:da:e8:e6:6a:70:6a:81:77:d7:53:98:ac:2b:
16:ff:c7:77:80:73:b4:1b:fa:6c:4a:62:22:f0:89:
1e:0b:db:f2:2d:59:74:7e:7b:9b:40:08:a9:09:b1:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:C6:74:73:44:40:16:C7:96:9C:E6:BA:E9:C4:13:8A:BF:64:8F
X509v3 Authority Key Identifier:
keyid:95:77:34:5D:FC:C9:34:78:C5:FF:22:1D:48:2E:E4:C9:84:83:F9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/em3GdHNEQBbHlpzmuunEE4q_ZI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b16f66-2af4-463e-9785-433f5fa4f901/1/lXc0XfzJNHjF_yIdSC7kyYSD-Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:31:b1:5e:f4:79:cf:2e:4c:9e:d0:cc:ca:da:8d:a9:d7:5f:
22:21:cc:92:fb:dd:db:d5:6b:29:1d:f9:93:b7:0c:69:4f:a2:
28:6d:ea:3c:b0:78:35:6b:9e:b5:b1:53:65:4f:14:31:52:b7:
8b:ed:79:a5:ab:36:2f:86:48:9a:c9:2c:0f:21:f5:ba:4e:97:
37:c0:d5:e6:de:50:6c:03:bb:e1:30:47:11:8a:a7:b5:55:62:
7a:a5:a5:ab:ba:8f:c1:c7:18:8e:70:be:a2:21:2e:6f:8a:23:
08:5c:05:43:3d:bd:1d:9a:e9:48:ed:4e:51:1e:e2:82:c1:0f:
3e:e9:ff:3f:72:2a:1a:d0:84:c3:bc:ff:6f:89:7d:4c:9a:27:
71:6a:90:16:b0:80:e0:f5:8f:44:ec:49:1d:ed:46:c5:be:73:
fc:79:3f:dd:b8:69:34:e6:9b:09:1d:86:19:c9:4f:78:f5:89:
91:49:94:42:f7:3b:c7:be:4e:68:cf:6f:9a:c4:1e:aa:7b:ee:
0b:eb:2e:5a:39:76:56:4e:d3:b9:d3:5b:57:5c:38:fb:b4:18:
4b:16:19:f0:84:1b:11:28:15:f0:32:09:41:1f:36:b1:44:26:
01:c6:3c:51:f3:29:e3:4f:fd:a1:73:15:10:88:88:1f:6d:53:
83:03:b3:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY+kUZW6HEe4KE+ZxdJWLSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NzczNDVkZmNjOTM0NzhjNWZmMjIxZDQ4MmVlNGM5ODQ4
M2Y5MDgwHhcNMjUwNDE2MTIyNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTZkYzY3NDczNDQ0MDE2Yzc5NjljZTZiYWU5YzQxMzhhYmY2NDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SQWZmNkqm1YNV3Ae+7FwAMGc+/J
ZWEbZKRlgT8nL4QPY4YBAnOU6epjuNdfNW7bDgusDOw8CuuLsnRDa75z9oH6tHPy
NEfoxM5JKYN7SNG9liVdfKmwIHMeJy0QGvQKN1DI+/6IFr58uvMh2FARuGikDMwZ
2Fn4zfy8fIaPk8Xm1UAoY3utmw+Nsy/G0SssVgFLWDQ+BH898OF/XHOZQmWjywQI
XgBJ9bF661EFTC1kCnpUJtJMfoytFXpGwcD86FFP1EOfu4qpEcB6AVHbTBgeWdro
5mpwaoF311OYrCsW/8d3gHO0G/psSmIi8IkeC9vyLVl0fnubQAipCbGFMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHptxnRzREAWx5ac5rrpxBOKv2SPMB8GA1UdIwQY
MBaAFJV3NF38yTR4xf8iHUgu5MmEg/kIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUt
NDMzZjVmYTRmOTAxLzEvZW0zR2RITkVRQmJIbHB6bXV1bkVFNHFfWkk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iMTZmNjYtMmFmNC00NjNlLTk3ODUtNDMzZjVmYTRmOTAx
LzEvbFhjMFhmekpOSGpGX3lJZFNDN2t5WVNELVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw0TqMA0G
CSqGSIb3DQEBCwUAA4IBAQB7MbFe9HnPLkye0MzK2o2p118iIcyS+93b1WspHfmT
twxpT6Iobeo8sHg1a561sVNlTxQxUreL7XmlqzYvhkiaySwPIfW6Tpc3wNXm3lBs
A7vhMEcRiqe1VWJ6paWruo/BxxiOcL6iIS5viiMIXAVDPb0dmulI7U5RHuKCwQ8+
6f8/cioa0ITDvP9viX1MmidxapAWsIDg9Y9E7Ekd7UbFvnP8eT/duGk05psJHYYZ
yU949YmRSZRC9zvHvk5oz2+axB6qe+4L6y5aOXZWTtO501tXXDj7tBhLFhnwhBsR
KBXwMglBHzaxRCYBxjxR8ynjT/2hcxUQiIgfbVODA7OG
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:21:25 2025 by rpki-client