Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/EJEuDnvuXiXSyssiuX3zmzznLmY.roa
File: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (raw, json)
Hash identifier: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=
Subject key identifier: 10:91:2E:0E:7B:EE:5E:25:D2:CA:CB:22:B9:7D:F3:9B:3C:E7:2E:66
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 0194266C1CC33427F3538C964C2D194809E1
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/EJEuDnvuXiXSyssiuX3zmzznLmY.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59625
IP address blocks: 185.84.68.0/24 maxlen: 24
185.84.69.0/24 maxlen: 24
185.84.70.0/24 maxlen: 24
185.84.71.0/24 maxlen: 24
185.240.16.0/24 maxlen: 24
185.240.17.0/24 maxlen: 24
185.240.18.0/24 maxlen: 24
185.240.19.0/24 maxlen: 24
185.244.176.0/24 maxlen: 24
185.244.178.0/24 maxlen: 24
185.244.179.0/24 maxlen: 24
204.154.200.0/24 maxlen: 24
204.154.201.0/24 maxlen: 24
204.154.202.0/24 maxlen: 24
204.154.203.0/24 maxlen: 24
204.154.204.0/24 maxlen: 24
204.154.205.0/24 maxlen: 24
204.154.206.0/24 maxlen: 24
204.154.207.0/24 maxlen: 24
2a03:7020::/40 maxlen: 40
2a03:7020::/48 maxlen: 48
2a03:7020:1::/48 maxlen: 48
2a03:7020:8::/48 maxlen: 48
2a03:7020:10::/48 maxlen: 48
2a03:7020:200::/48 maxlen: 48
2a03:7020:201::/48 maxlen: 48
2a03:7020:800::/40 maxlen: 40
2a03:7020:1200::/40 maxlen: 40
2a03:7020:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1c:c3:34:27:f3:53:8c:96:4c:2d:19:48:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10912e0e7bee5e25d2cacb22b97df39b3ce72e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c5:6b:ae:ce:6e:46:78:03:40:7b:ef:89:a3:
b7:71:9f:15:25:e8:58:db:d9:06:f9:9b:ef:28:d3:
dc:a8:de:7f:c6:bb:c1:c8:dc:1e:c4:b0:1a:7c:64:
bd:10:7d:53:dd:ee:10:ab:eb:06:57:6e:71:43:5d:
78:7a:26:e0:3a:92:bc:48:2a:1b:dd:22:d0:25:33:
c9:ff:1b:d3:25:d0:d0:12:52:4b:47:7f:a7:93:61:
5f:b3:c1:c4:f3:4c:c5:7e:d3:4a:a2:ef:d7:ef:8f:
e5:a0:92:eb:98:36:13:f8:59:17:69:86:70:ac:f1:
4a:c2:79:cd:1f:d7:93:b9:e4:b3:f9:83:72:57:bf:
5e:d7:30:8b:5c:c2:19:4a:aa:15:88:d5:39:ca:56:
f8:bb:76:00:0e:3d:98:30:4a:53:4d:e6:fc:04:b4:
d8:5c:cc:2f:cf:4f:89:38:bf:c4:f5:2a:37:07:fd:
c8:7b:c3:1f:20:02:91:6e:72:44:27:99:cc:a8:b8:
aa:a0:c4:c7:ec:3c:d5:23:98:4f:c0:85:b6:7b:6c:
27:d0:33:8d:aa:b8:36:bc:49:2f:36:3d:cf:d5:0a:
d6:40:a8:62:37:04:53:36:4b:db:d6:26:1c:5e:70:
f0:3a:ed:a3:7e:38:3a:30:6b:0b:3a:b5:d4:46:13:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:91:2E:0E:7B:EE:5E:25:D2:CA:CB:22:B9:7D:F3:9B:3C:E7:2E:66
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/EJEuDnvuXiXSyssiuX3zmzznLmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.68.0/22
185.240.16.0/22
185.244.176.0/24
185.244.178.0/23
204.154.200.0/21
IPv6:
2a03:7020::/40
2a03:7020:200::/47
2a03:7020:800::/40
2a03:7020:1200::/39
Signature Algorithm: sha256WithRSAEncryption
7f:0a:2e:06:10:a5:0e:fd:f2:c1:f1:43:b2:47:cd:cf:36:7c:
d4:2a:13:de:f4:5a:43:15:99:a5:36:7f:f6:b1:66:b7:e7:10:
8c:a3:73:ae:25:f0:12:00:71:8b:8b:f5:ae:1d:49:db:19:f5:
a1:07:81:5e:b7:fa:78:3f:7b:34:fa:7a:13:2d:bd:d0:a4:f3:
05:e3:57:1d:4b:01:f8:a1:2e:3c:92:64:c1:8c:e3:4f:e5:d9:
0e:91:a8:e1:1b:be:d2:6f:50:70:1a:b7:04:ad:49:db:77:58:
60:5c:b9:6b:e3:25:23:f3:e3:69:08:46:8f:13:1d:9e:65:95:
6c:14:f9:07:27:7d:69:c7:0b:d2:f1:40:75:d1:17:9f:84:e2:
67:c5:ac:1f:6d:24:42:cf:8f:c7:93:6e:9c:4e:40:17:23:59:
6a:d4:36:ce:e6:bb:d9:8d:3d:20:2d:bd:9b:24:d7:8a:af:be:
a6:c7:2e:d2:68:29:2a:22:77:9c:11:32:ed:54:fc:57:36:d2:
17:16:58:41:ff:46:00:f0:45:f9:80:24:d1:31:df:ca:f2:a4:
d1:13:26:a6:ef:64:ac:f2:73:bc:c7:ac:11:8f:cd:42:69:cb:
c2:e9:e4:f0:71:a3:1a:69:40:c9:27:98:a4:fd:5a:28:2c:49:
00:11:c4:6d
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZQmbBzDNCfzU4yWTC0ZSAnhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxN2I0OTFkY2NiNTYzMjIxNmQ4MGI0OGY4ZDYyODZiMWVm
ZmQ4ZDcwHhcNMjUwMTAyMDk1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDkxMmUwZTdiZWU1ZTI1ZDJjYWNiMjJiOTdkZjM5YjNjZTcyZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicVrrs5uRngDQHvviaO3cZ8VJehY
29kG+ZvvKNPcqN5/xrvByNwexLAafGS9EH1T3e4Qq+sGV25xQ114eibgOpK8SCob
3SLQJTPJ/xvTJdDQElJLR3+nk2Ffs8HE80zFftNKou/X74/loJLrmDYT+FkXaYZw
rPFKwnnNH9eTueSz+YNyV79e1zCLXMIZSqoViNU5ylb4u3YADj2YMEpTTeb8BLTY
XMwvz0+JOL/E9So3B/3Ie8MfIAKRbnJEJ5nMqLiqoMTH7DzVI5hPwIW2e2wn0DON
qrg2vEkvNj3P1QrWQKhiNwRTNkvb1iYcXnDwOu2jfjg6MGsLOrXURhPU1QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBCRLg577l4l0srLIrl985s85y5mMB8GA1UdIwQY
MBaAFCF7SR3MtWMiFtgLSPjWKGse/9jXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAt
NmRlMDVhMzE2MjM5LzEvRUpFdURudnVYaVhTeXNzaXVYM3ptenpuTG1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9lOWYyOWMtOTIzMS00NTBkLWFkYjAtNmRlMDVhMzE2MjM5
LzEvSVh0SkhjeTFZeUlXMkF0SS1OWW9heDdfMk5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAkBAIAATAeAwQCuVREAwQC
ufAQAwQAufSwAwQBufSyAwQDzJrIMCcEAgACMCEDBgAqA3AgAAMHASoDcCACAAMG
ACoDcCAIAwYBKgNwIBIwDQYJKoZIhvcNAQELBQADggEBAH8KLgYQpQ798sHxQ7JH
zc82fNQqE970WkMVmaU2f/axZrfnEIyjc64l8BIAcYuL9a4dSdsZ9aEHgV63+ng/
ezT6ehMtvdCk8wXjVx1LAfihLjySZMGM40/l2Q6RqOEbvtJvUHAatwStSdt3WGBc
uWvjJSPz42kIRo8THZ5llWwU+QcnfWnHC9LxQHXRF5+E4mfFrB9tJELPj8eTbpxO
QBcjWWrUNs7mu9mNPSAtvZsk14qvvqbHLtJoKSoid5wRMu1U/Fc20hcWWEH/RgDw
RfmAJNEx38rypNETJqbvZKzyc7zHrBGPzUJpy8Lp5PBxoxppQMknmKT9WigsSQAR
xG0=
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:54:18 2025 by rpki-client