Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/yECgV0Zjm63pdebLZV2oJguqmFo.roa
File: yECgV0Zjm63pdebLZV2oJguqmFo.roa (raw, json)
Hash identifier: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=
Subject key identifier: C8:40:A0:57:46:63:9B:AD:E9:75:E6:CB:65:5D:A8:26:0B:AA:98:5A
Certificate issuer: /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial: 019619A788C206384FBD8315AAC22FE028E6
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/yECgV0Zjm63pdebLZV2oJguqmFo.roa
Signing time: Wed 09 Apr 2025 08:25:31 +0000
ROA not before: Wed 09 Apr 2025 08:25:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33993
IP address blocks: 91.207.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:a7:88:c2:06:38:4f:bd:83:15:aa:c2:2f:e0:28:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Validity
Not Before: Apr 9 08:25:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c840a05746639bade975e6cb655da8260baa985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:c3:af:d9:b8:1f:a1:96:c9:3a:76:06:45:
82:ea:6d:fe:91:aa:a4:df:5a:69:6b:f6:48:13:91:
fa:4f:7d:53:d7:47:bd:eb:71:97:9e:cf:7e:56:7f:
b6:60:89:ba:ad:26:dd:c9:04:51:04:c0:a3:82:cc:
ec:58:f1:ce:04:24:bb:5d:32:8f:51:fc:d7:2a:75:
90:12:0e:50:72:cb:a9:79:1e:fc:80:dd:ba:d7:1d:
bb:14:86:c3:ab:d3:41:05:22:5d:bc:e6:ee:da:7d:
4c:a9:95:00:18:8c:c5:07:21:8d:09:66:34:d6:43:
0a:a3:5f:4a:db:79:96:45:ab:04:9e:1e:dc:7f:2d:
18:d1:83:45:3b:cc:63:ee:f1:55:54:27:55:81:70:
8c:fd:4f:36:62:f0:9f:54:04:f2:dc:4a:bb:a9:9c:
be:a8:d2:a3:c5:d7:e2:84:69:91:64:80:9b:95:66:
36:61:fb:39:88:50:e1:70:5e:7a:57:fb:c8:c4:18:
48:ba:a0:d2:44:0c:62:34:2c:59:c4:b6:f8:31:84:
bd:64:a4:ed:e2:72:ef:b2:09:da:fd:ab:eb:98:70:
43:3e:88:0a:79:19:f2:5c:93:9a:ee:9e:ab:f3:cd:
a7:21:fc:ef:70:3f:89:fa:af:67:cf:53:a0:89:47:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:A0:57:46:63:9B:AD:E9:75:E6:CB:65:5D:A8:26:0B:AA:98:5A
X509v3 Authority Key Identifier:
keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/yECgV0Zjm63pdebLZV2oJguqmFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.183.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d0:a6:2c:51:b2:d2:c7:1b:22:6a:43:2a:f3:cf:e5:14:30:
18:94:03:9e:fd:90:1f:20:bb:36:42:d4:85:cb:0a:06:b2:ae:
33:e4:cc:48:cc:62:c7:59:2d:50:ee:62:ac:e0:14:b5:0f:86:
74:ee:3a:b9:00:19:7b:ba:00:c2:1b:53:11:82:6b:2c:99:fd:
fc:60:c3:3a:95:f2:d7:ab:c0:bd:bb:27:01:a9:96:c2:8f:83:
d2:52:8e:d8:48:e0:ce:6b:9b:41:9e:94:b9:6b:73:c6:1d:dc:
e8:2b:e6:71:81:5e:90:b8:da:95:39:dc:f6:df:76:3b:19:6a:
41:24:cd:08:a0:21:a1:28:c5:1d:5c:c2:a3:0c:5b:72:de:d1:
a5:53:47:cb:e6:5d:8f:fc:8c:fb:ee:74:0b:8d:88:27:58:92:
8f:79:3c:02:cc:fb:58:88:ab:68:fe:85:31:0a:57:a9:67:5d:
c2:18:b8:df:a1:47:9a:85:a5:2e:71:37:7c:70:57:ad:2d:72:
f5:a0:27:2a:64:23:ed:01:4e:18:ea:4f:bd:3a:ed:16:19:82:
26:fc:5e:e4:40:9d:b3:54:f6:d2:7c:ba:0c:d5:fe:a9:5b:55:
60:f8:ab:e3:81:79:c3:db:02:81:50:30:7a:70:f4:72:b0:91:
dc:50:6f:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYZp4jCBjhPvYMVqsIv4CjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNWEwOGY0MWMzNzMwMjdlMDgxYjVjMWNhOGE4MDBiZjE4
NTVkOWYwHhcNMjUwNDA5MDgyNTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQwYTA1NzQ2NjM5YmFkZTk3NWU2Y2I2NTVkYTgyNjBiYWE5ODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHDDr9m4H6GWyTp2BkWC6m3+kaqk
31ppa/ZIE5H6T31T10e963GXns9+Vn+2YIm6rSbdyQRRBMCjgszsWPHOBCS7XTKP
UfzXKnWQEg5QcsupeR78gN261x27FIbDq9NBBSJdvObu2n1MqZUAGIzFByGNCWY0
1kMKo19K23mWRasEnh7cfy0Y0YNFO8xj7vFVVCdVgXCM/U82YvCfVATy3Eq7qZy+
qNKjxdfihGmRZICblWY2Yfs5iFDhcF56V/vIxBhIuqDSRAxiNCxZxLb4MYS9ZKTt
4nLvsgna/avrmHBDPogKeRnyXJOa7p6r882nIfzvcD+J+q9nz1OgiUciuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhAoFdGY5ut6XXmy2VdqCYLqphaMB8GA1UdIwQY
MBaAFIpaCPQcNzAn4IG1wcqKgAvxhV2fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUt
OGE1NmIwZjUwNzMxLzEveUVDZ1YwWmptNjNwZGViTFpWMm9KZ3VxbUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYzI0ODItYzY1MS00YTJkLWFhZWUtOGE1NmIwZjUwNzMx
LzEvaWxvSTlCdzNNQ2ZnZ2JYQnlvcUFDX0dGWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8+3MA0G
CSqGSIb3DQEBCwUAA4IBAQBl0KYsUbLSxxsiakMq88/lFDAYlAOe/ZAfILs2QtSF
ywoGsq4z5MxIzGLHWS1Q7mKs4BS1D4Z07jq5ABl7ugDCG1MRgmssmf38YMM6lfLX
q8C9uycBqZbCj4PSUo7YSODOa5tBnpS5a3PGHdzoK+ZxgV6QuNqVOdz233Y7GWpB
JM0IoCGhKMUdXMKjDFty3tGlU0fL5l2P/Iz77nQLjYgnWJKPeTwCzPtYiKto/oUx
ClepZ13CGLjfoUeahaUucTd8cFetLXL1oCcqZCPtAU4Y6k+9Ou0WGYIm/F7kQJ2z
VPbSfLoM1f6pW1Vg+KvjgXnD2wKBUDB6cPRysJHcUG9w
-----END CERTIFICATE-----
Generated at Sat Apr 19 02:28:33 2025 by rpki-client