Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/ECOt3z1NgPTTiGfJC8hmlqy13dg.roa
File: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (raw, json)
Hash identifier: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=
Subject key identifier: 10:23:AD:DF:3D:4D:80:F4:D3:88:67:C9:0B:C8:66:96:AC:B5:DD:D8
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 0194266C0B9625571E3CF8634C110330DA61
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/ECOt3z1NgPTTiGfJC8hmlqy13dg.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49440
IP address blocks: 88.97.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0b:96:25:57:1e:3c:f8:63:4c:11:03:30:da:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1023addf3d4d80f4d38867c90bc86696acb5ddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a8:57:5f:16:1b:b8:af:5f:02:c9:b5:4d:33:
32:16:ad:a9:b9:5f:f8:8e:c5:ee:db:ad:e3:bd:8b:
51:d6:74:8a:f7:10:92:51:21:c4:34:18:1a:35:a9:
93:98:db:00:99:4e:c6:0a:e9:d2:b3:c4:45:e8:64:
26:43:70:71:f7:e4:f2:dc:06:e6:54:3a:2b:5f:3f:
b8:06:a5:ac:f6:dc:5c:c3:63:50:e0:c1:b3:4e:3a:
25:0a:d9:79:f6:26:b4:9a:c5:14:cc:a7:c8:82:6f:
59:8d:52:63:e1:b5:92:ee:1c:16:a4:05:ac:c4:54:
eb:6b:32:5f:f3:5f:cc:11:e2:10:61:b1:8d:5c:e7:
a7:64:fa:fb:02:50:d4:52:6d:d7:ff:84:54:6d:26:
f3:55:ec:34:d6:a7:2b:df:6f:a2:fc:a3:8c:f3:55:
ca:af:27:9e:2e:4d:fb:c1:7b:e4:3f:9d:16:18:a5:
95:9c:9d:34:fb:fd:f3:76:bd:06:67:ae:31:29:17:
cb:00:79:74:13:74:d3:0f:cc:89:29:f1:f8:5b:20:
25:3a:6d:21:86:bf:4c:32:33:78:0a:34:ca:5f:47:
2e:15:e9:7e:bb:76:ce:b6:a6:53:40:65:c5:3b:7c:
42:79:6d:04:23:1d:0c:2a:d8:1c:85:ac:7e:70:de:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:23:AD:DF:3D:4D:80:F4:D3:88:67:C9:0B:C8:66:96:AC:B5:DD:D8
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/ECOt3z1NgPTTiGfJC8hmlqy13dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.97.168.0/22
Signature Algorithm: sha256WithRSAEncryption
59:17:80:a4:bb:f2:46:81:20:4b:3b:d1:c1:a4:81:5a:ee:33:
b5:37:1c:32:4e:85:e5:09:e5:f1:59:f0:8c:80:c1:52:be:84:
19:e7:14:87:8d:b8:30:db:48:92:5d:55:41:bf:10:71:93:86:
b3:54:de:d1:99:b7:13:f2:73:89:31:bb:d6:7c:a9:75:e1:73:
13:ff:22:74:1a:cd:a6:18:f6:0e:eb:70:ef:b7:34:7b:d0:ab:
be:48:a1:a0:97:3c:93:2f:2d:6d:d6:c7:e2:d1:72:03:55:b7:
13:ec:b4:be:33:7f:7c:ed:87:fb:56:17:dd:b8:45:50:d7:ae:
92:0f:49:b2:19:ed:f9:9d:fa:24:37:81:b5:0b:ea:ce:3e:81:
24:d5:21:4c:91:cb:ca:ce:ea:ec:ae:76:d1:e6:ae:6e:dd:80:
04:31:ee:e2:86:bc:28:c9:5f:9c:29:0c:bc:f4:ad:65:2a:18:
df:5b:2a:fe:54:e5:d5:93:99:f7:45:17:53:bf:d9:ec:b5:41:
fb:2b:32:f9:bf:84:bd:28:8f:94:87:79:9e:10:ce:52:d6:11:
b2:8c:5b:53:62:52:f3:66:cf:59:1a:5d:43:44:0d:bc:a8:83:
37:f2:33:dd:22:39:ff:23:0c:e2:d7:6a:e3:d9:b0:fa:22:97:
70:81:c9:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbAuWJVcePPhjTBEDMNphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm
OTM2OTUwHhcNMjUwMTAyMDk1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDIzYWRkZjNkNGQ4MGY0ZDM4ODY3YzkwYmM4NjY5NmFjYjVkZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtahXXxYbuK9fAsm1TTMyFq2puV/4
jsXu263jvYtR1nSK9xCSUSHENBgaNamTmNsAmU7GCunSs8RF6GQmQ3Bx9+Ty3Abm
VDorXz+4BqWs9txcw2NQ4MGzTjolCtl59ia0msUUzKfIgm9ZjVJj4bWS7hwWpAWs
xFTrazJf81/MEeIQYbGNXOenZPr7AlDUUm3X/4RUbSbzVew01qcr32+i/KOM81XK
ryeeLk37wXvkP50WGKWVnJ00+/3zdr0GZ64xKRfLAHl0E3TTD8yJKfH4WyAlOm0h
hr9MMjN4CjTKX0cuFel+u3bOtqZTQGXFO3xCeW0EIx0MKtgchax+cN6ijQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAjrd89TYD004hnyQvIZpastd3YMB8GA1UdIwQY
MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt
NjBjZjlhYjFiMTNlLzEvRUNPdDN6MU5nUFRUaUdmSkM4aG1scXkxM2RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl
LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWGGoMA0G
CSqGSIb3DQEBCwUAA4IBAQBZF4Cku/JGgSBLO9HBpIFa7jO1NxwyToXlCeXxWfCM
gMFSvoQZ5xSHjbgw20iSXVVBvxBxk4azVN7RmbcT8nOJMbvWfKl14XMT/yJ0Gs2m
GPYO63DvtzR70Ku+SKGglzyTLy1t1sfi0XIDVbcT7LS+M3987Yf7VhfduEVQ166S
D0myGe35nfokN4G1C+rOPoEk1SFMkcvKzursrnbR5q5u3YAEMe7ihrwoyV+cKQy8
9K1lKhjfWyr+VOXVk5n3RRdTv9nstUH7KzL5v4S9KI+Uh3meEM5S1hGyjFtTYlLz
Zs9ZGl1DRA28qIM38jPdIjn/Iwzi12rj2bD6Ipdwgck0
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:25:07 2025 by rpki-client