Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa
File: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (raw, json)
Hash identifier: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=
Subject key identifier: 12:E3:08:56:FB:63:7F:07:30:E0:7F:F5:A8:DF:CD:4D:36:31:B4:1D
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 019423D7B884F2CACC15BAB295955486DA22
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa
Signing time: Wed 01 Jan 2025 21:48:47 +0000
ROA not before: Wed 01 Jan 2025 21:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.57.80.0/22 maxlen: 22
2001:7f8:17::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b8:84:f2:ca:cc:15:ba:b2:95:95:54:86:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jan 1 21:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e30856fb637f0730e07ff5a8dfcd4d3631b41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:40:45:c7:58:ab:f9:11:1b:1e:c6:96:29:
4f:8b:b8:25:dc:9b:ba:39:40:04:5c:30:24:27:85:
c5:d4:11:94:8c:68:7b:12:a1:2e:76:c4:79:a6:e2:
8a:22:b8:d0:5e:7a:57:74:99:e7:a9:e5:96:23:53:
70:17:c2:93:1d:85:e8:b6:40:62:04:cb:e6:9e:98:
a4:05:a4:2c:97:0a:2a:fb:ac:58:c0:70:88:f0:86:
c4:cb:0d:ac:51:f0:92:b7:8b:20:c6:a3:de:1c:3e:
43:a0:27:3e:3b:a4:af:d2:9c:46:5b:f8:7d:22:4d:
14:78:4c:fa:2e:9f:46:d8:87:c9:2d:0c:d3:a3:d2:
fe:a1:95:10:88:bd:ad:4c:a3:f0:87:0a:17:30:19:
5f:d5:2d:a2:6b:9d:e2:f6:70:bc:8b:a8:56:f6:7c:
0a:31:92:c2:57:cf:fe:2f:7b:b4:dc:e5:e2:94:54:
be:d3:64:a5:16:f7:ba:c3:5f:93:7e:b9:c3:07:78:
0b:00:75:b2:62:49:fd:fe:3a:11:9a:7b:ca:30:49:
15:c5:da:10:9c:b8:90:d7:fd:ef:60:78:f2:f2:bd:
f1:e3:63:37:d5:90:b8:8d:07:83:fa:d5:bf:ec:c5:
92:c9:0c:64:2f:fe:f3:4b:5e:6c:de:a5:3b:d4:82:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:08:56:FB:63:7F:07:30:E0:7F:F5:A8:DF:CD:4D:36:31:B4:1D
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.80.0/22
IPv6:
2001:7f8:17::/64
Signature Algorithm: sha256WithRSAEncryption
4e:74:69:5a:5f:d5:5b:3f:42:ef:90:cb:df:26:6e:0e:0e:04:
66:a5:73:c7:5b:aa:0a:4c:88:85:65:66:58:f9:1e:8f:08:ed:
c3:46:7d:b2:af:cd:a2:2c:47:a2:db:09:3c:86:df:08:96:4a:
f7:00:9e:0f:be:b5:02:5e:ee:2b:eb:15:97:35:99:c6:a2:ca:
fe:8d:c7:e1:b8:d3:77:ce:a3:d4:bd:a4:09:ec:02:7c:dd:fa:
82:66:9f:99:5c:56:79:42:c8:35:25:90:77:2b:39:34:f8:2f:
ee:26:27:20:57:6d:e2:f0:54:4b:6b:99:c4:7c:d0:fa:27:ef:
07:8b:fe:4d:27:e0:18:a3:5d:f9:7e:e8:c4:73:9b:4d:a2:22:
ab:84:f7:de:cc:f0:31:da:c7:52:bc:6a:97:4b:2f:b7:25:a3:
df:b5:48:e2:16:b9:5d:76:f3:96:2c:48:d8:3d:eb:0d:bc:b0:
a6:9e:40:f4:f0:09:4e:75:d1:dc:d0:e9:68:27:94:ca:f0:0b:
b6:fb:36:a2:fe:05:28:09:29:de:e5:f7:7c:fc:1e:f1:56:df:
6a:02:86:83:11:26:e5:7a:01:a9:40:d3:6e:60:94:3a:a6:c1:
1b:00:fb:bc:4e:8b:2c:26:51:0d:57:66:c9:83:d9:f8:2f:0c:
26:5b:f7:c7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZQj17iE8srMFbqylZVUhtoiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjUwMTAxMjE0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmUzMDg1NmZiNjM3ZjA3MzBlMDdmZjVhOGRmY2Q0ZDM2MzFiNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs9ARcdYq/kRGx7GlilPi7gl3Ju6
OUAEXDAkJ4XF1BGUjGh7EqEudsR5puKKIrjQXnpXdJnnqeWWI1NwF8KTHYXotkBi
BMvmnpikBaQslwoq+6xYwHCI8IbEyw2sUfCSt4sgxqPeHD5DoCc+O6Sv0pxGW/h9
Ik0UeEz6Lp9G2IfJLQzTo9L+oZUQiL2tTKPwhwoXMBlf1S2ia53i9nC8i6hW9nwK
MZLCV8/+L3u03OXilFS+02SlFve6w1+TfrnDB3gLAHWyYkn9/joRmnvKMEkVxdoQ
nLiQ1/3vYHjy8r3x42M31ZC4jQeD+tW/7MWSyQxkL/7zS15s3qU71IKUPwIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFBLjCFb7Y38HMOB/9ajfzU02MbQdMB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvRXVNSVZ2dGpmd2N3NEhfMXFOX05UVFl4dEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQCBTlQMBEE
AgACMAsDCQAgAQf4ABcAADANBgkqhkiG9w0BAQsFAAOCAQEATnRpWl/VWz9C75DL
3yZuDg4EZqVzx1uqCkyIhWVmWPkejwjtw0Z9sq/NoixHotsJPIbfCJZK9wCeD761
Al7uK+sVlzWZxqLK/o3H4bjTd86j1L2kCewCfN36gmafmVxWeULINSWQdys5NPgv
7iYnIFdt4vBUS2uZxHzQ+ifvB4v+TSfgGKNd+X7oxHObTaIiq4T33szwMdrHUrxq
l0svtyWj37VI4ha5XXbzlixI2D3rDbywpp5A9PAJTnXR3NDpaCeUyvALtvs2ov4F
KAkp3uX3fPwe8VbfagKGgxEm5XoBqUDTbmCUOqbBGwD7vE6LLCZRDVdmyYPZ+C8M
Jlv3xw==
-----END CERTIFICATE-----
Generated at Wed Feb 5 15:58:09 2025 by rpki-client