Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/epNs1frSSHg0k8RApfvyiS1o3e4.roa
File: epNs1frSSHg0k8RApfvyiS1o3e4.roa (raw, json)
Hash identifier: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=
Subject key identifier: 7A:93:6C:D5:FA:D2:48:78:34:93:C4:40:A5:FB:F2:89:2D:68:DD:EE
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 01942369D21912BDB7F1CEDE4F3B519CAD71
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/epNs1frSSHg0k8RApfvyiS1o3e4.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50220
IP address blocks: 193.104.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d2:19:12:bd:b7:f1:ce:de:4f:3b:51:9c:ad:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a936cd5fad248783493c440a5fbf2892d68ddee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:12:61:9b:9d:ab:cf:2f:6e:36:35:25:e0:
53:c3:e8:4c:3c:df:93:da:9a:a8:5e:6d:e9:e6:27:
06:d8:c1:f2:d6:0e:25:ab:89:15:ce:96:e6:6a:15:
0e:c3:f2:db:28:50:8b:e3:33:14:be:ef:38:75:58:
0d:fc:91:65:dc:11:f1:c8:b8:44:a8:ed:49:7b:82:
a8:51:b7:6b:02:1c:bf:2f:8d:3b:81:0f:76:4c:07:
2e:8f:c5:80:ba:8d:0d:d9:12:14:30:b9:ef:63:1a:
c3:3d:66:fb:28:d1:2a:e6:04:f1:21:b1:5e:ec:8a:
9d:3f:70:e1:cd:8e:02:42:d7:5a:eb:f3:6a:4f:92:
80:3f:b9:7d:d2:9e:a1:04:06:f1:6c:00:1d:5f:33:
da:0e:1f:0b:d9:06:aa:44:8a:f6:35:80:51:44:13:
6d:d6:16:94:6f:f1:75:87:90:39:5f:62:0b:2d:ae:
ba:29:05:b3:d4:1d:39:fc:2d:9c:85:a2:4b:85:b0:
58:e6:43:22:a7:52:f5:fe:46:92:25:4a:92:c8:c3:
4f:23:4c:9f:7b:72:46:60:4e:9b:4d:3f:e7:5b:6d:
ac:7a:70:7e:6a:5f:f3:f7:f6:f9:92:52:e1:8d:27:
22:36:3a:3f:c2:9d:b5:61:2f:98:5d:11:51:bf:6d:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:93:6C:D5:FA:D2:48:78:34:93:C4:40:A5:FB:F2:89:2D:68:DD:EE
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/epNs1frSSHg0k8RApfvyiS1o3e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.180.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5c:8e:4e:a3:09:f3:00:e9:8e:dd:f6:9a:57:89:2b:55:5d:
a8:fb:c7:64:a0:0d:ee:70:1a:19:bb:a7:d0:4d:44:09:12:c4:
21:0c:83:ae:7b:29:2c:b5:d0:12:d5:98:0c:4f:d7:ae:a7:83:
5b:94:1b:44:04:46:8a:8d:32:8a:7b:73:63:fb:9d:16:93:2d:
7b:d7:f5:5c:1d:3e:6a:0a:60:ee:c2:41:0d:dc:da:b1:01:f7:
ff:1a:38:5f:2a:c5:98:47:03:8d:6d:f6:7e:9b:0b:c6:e7:86:
4b:1f:27:e6:ef:39:73:cf:21:30:3f:c0:8a:47:f4:19:ba:c4:
26:6f:cb:4d:a8:a8:90:8e:8e:38:29:d1:f1:bc:64:1a:9f:a4:
8c:b4:d4:42:1b:e1:d0:85:99:b8:4d:f8:97:84:74:f7:1e:87:
9e:04:9f:c0:ca:e6:58:3a:ec:99:73:7b:ad:4e:7d:91:f0:b5:
44:7a:1d:36:79:db:f5:06:84:da:29:be:8b:92:98:53:2a:c9:
bc:9b:35:13:39:99:40:b0:2a:de:dd:3f:41:be:96:e9:63:58:
8b:14:2a:77:d8:e9:c3:1c:d9:79:1f:a7:92:76:21:1f:48:19:
ad:68:7a:01:58:ce:15:d7:89:12:dc:5f:a0:19:af:4e:37:f6:
f1:84:39:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadIZEr238c7eTztRnK1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm
NmI0Y2QwHhcNMjUwMTAxMTk0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTkzNmNkNWZhZDI0ODc4MzQ5M2M0NDBhNWZiZjI4OTJkNjhkZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmgSYZudq88vbjY1JeBTw+hMPN+T
2pqoXm3p5icG2MHy1g4lq4kVzpbmahUOw/LbKFCL4zMUvu84dVgN/JFl3BHxyLhE
qO1Je4KoUbdrAhy/L407gQ92TAcuj8WAuo0N2RIUMLnvYxrDPWb7KNEq5gTxIbFe
7IqdP3DhzY4CQtda6/NqT5KAP7l90p6hBAbxbAAdXzPaDh8L2QaqRIr2NYBRRBNt
1haUb/F1h5A5X2ILLa66KQWz1B05/C2chaJLhbBY5kMip1L1/kaSJUqSyMNPI0yf
e3JGYE6bTT/nW22senB+al/z9/b5klLhjSciNjo/wp21YS+YXRFRv219+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqTbNX60kh4NJPEQKX78oktaN3uMB8GA1UdIwQY
MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt
MjRmMjg3YzlhNWY0LzEvZXBOczFmclNTSGcwazhSQXBmdnlpUzFvM2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0
LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWi0MA0G
CSqGSIb3DQEBCwUAA4IBAQCIXI5OownzAOmO3faaV4krVV2o+8dkoA3ucBoZu6fQ
TUQJEsQhDIOueykstdAS1ZgMT9eup4NblBtEBEaKjTKKe3Nj+50Wky171/VcHT5q
CmDuwkEN3NqxAff/GjhfKsWYRwONbfZ+mwvG54ZLHyfm7zlzzyEwP8CKR/QZusQm
b8tNqKiQjo44KdHxvGQan6SMtNRCG+HQhZm4TfiXhHT3HoeeBJ/AyuZYOuyZc3ut
Tn2R8LVEeh02edv1BoTaKb6LkphTKsm8mzUTOZlAsCre3T9BvpbpY1iLFCp32OnD
HNl5H6eSdiEfSBmtaHoBWM4V14kS3F+gGa9ON/bxhDlQ
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:48 2025 by rpki-client