Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vC6oqajOZxfWGK4VfzMV2PMa_EU.roa
File: vC6oqajOZxfWGK4VfzMV2PMa_EU.roa (raw, json)
Hash identifier: t9z6TRwbNnBf3Xj8qkpVMgLqFluIFTjPBjTDnTgqI+0=
Subject key identifier: BC:2E:A8:A9:A8:CE:67:17:D6:18:AE:15:7F:33:15:D8:F3:1A:FC:45
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCABA486AB1D41D6380BCF6EBFD402
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vC6oqajOZxfWGK4VfzMV2PMa_EU.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41097
IP address blocks: 77.79.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ab:a4:86:ab:1d:41:d6:38:0b:cf:6e:bf:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc2ea8a9a8ce6717d618ae157f3315d8f31afc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:3f:45:18:2c:7b:86:dd:e5:da:55:ae:fd:
f7:b4:ef:47:f7:ca:31:33:86:81:a4:5f:44:09:36:
db:d5:1a:2c:32:ec:ee:a7:13:fb:99:02:37:08:49:
59:b3:4c:d8:52:fc:9d:0b:ae:34:14:eb:32:ae:7c:
fb:11:cb:a4:96:be:35:8d:73:3b:d7:eb:7a:4d:db:
a8:c5:1e:89:87:6b:fd:81:99:ab:f5:23:1a:80:bd:
76:f7:df:93:6d:e9:8a:1f:40:34:3a:07:4a:1b:66:
0a:e7:9c:ab:05:6c:b8:a1:fc:81:1e:1d:b1:99:63:
60:11:85:c3:91:e2:bf:d3:09:9b:6c:be:ca:b5:ed:
f6:03:a0:3f:14:97:f8:a2:30:d7:4b:80:87:a7:e0:
c9:8e:b9:60:12:f0:53:2c:95:b4:7c:77:ba:f7:d3:
13:98:38:0c:22:6b:3a:5d:a2:07:be:81:02:12:78:
b4:71:5d:04:d5:36:37:4e:db:04:1b:d3:4b:f2:a8:
73:5e:2e:ec:c2:ea:5f:9b:3f:c4:49:e6:24:9d:0f:
69:7b:dc:18:54:d9:d3:0a:17:0b:0e:35:05:97:26:
62:0d:23:1f:29:1c:47:c0:53:c8:d6:31:00:1c:a4:
0f:19:ed:2d:60:6e:ff:0f:b7:14:77:c9:b8:4b:12:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:A8:A9:A8:CE:67:17:D6:18:AE:15:7F:33:15:D8:F3:1A:FC:45
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/vC6oqajOZxfWGK4VfzMV2PMa_EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.79.205.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:f2:aa:a3:1f:02:77:2f:44:d7:a5:5f:13:29:35:85:32:
c9:2d:79:b0:75:21:f1:4b:23:f1:71:5e:1d:f3:23:88:c6:29:
e0:73:3b:18:5e:e0:09:7b:9f:88:f8:8b:ab:b0:98:aa:4e:60:
99:37:d7:78:56:38:18:cb:87:09:aa:65:27:0b:34:07:01:72:
8b:37:6a:19:60:98:51:d8:6b:c1:c9:6d:cb:00:fc:39:cb:73:
47:c7:f8:27:85:c2:60:40:ce:cc:92:af:5d:5c:99:4a:4f:b5:
91:57:72:73:98:c2:b0:66:62:aa:71:53:e3:f4:89:38:79:98:
e9:13:94:dd:2d:50:7f:b3:19:6f:4b:07:88:bc:2f:ac:61:81:
35:6c:1e:3e:23:68:64:89:63:bf:f9:da:5a:00:a1:38:7d:8e:
76:b6:11:5f:c9:01:d4:f1:22:c7:50:d0:3d:e9:4f:c4:0d:bd:
1f:2b:2b:34:dc:ad:52:20:72:48:c3:cb:d0:b5:cc:63:b2:15:
9b:c5:03:2c:39:8b:fb:42:27:f4:65:70:d2:76:6e:dd:64:e6:
49:01:92:38:39:7a:5c:fb:00:a6:29:af:bd:e3:78:c9:59:59:
eb:98:32:9b:4a:85:4f:30:34:67:46:d5:3d:0d:71:c6:b3:ca:
73:fb:78:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/KukhqsdQdY4C89uv9QCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjUwMTAyMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzJlYThhOWE4Y2U2NzE3ZDYxOGFlMTU3ZjMzMTVkOGYzMWFmYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkc/RRgse4bd5dpVrv33tO9H98ox
M4aBpF9ECTbb1RosMuzupxP7mQI3CElZs0zYUvydC640FOsyrnz7Ecuklr41jXM7
1+t6TduoxR6Jh2v9gZmr9SMagL1299+TbemKH0A0OgdKG2YK55yrBWy4ofyBHh2x
mWNgEYXDkeK/0wmbbL7Kte32A6A/FJf4ojDXS4CHp+DJjrlgEvBTLJW0fHe699MT
mDgMIms6XaIHvoECEni0cV0E1TY3TtsEG9NL8qhzXi7swupfmz/ESeYknQ9pe9wY
VNnTChcLDjUFlyZiDSMfKRxHwFPI1jEAHKQPGe0tYG7/D7cUd8m4SxLk5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwuqKmozmcX1hiuFX8zFdjzGvxFMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvdkM2b3Fhak9aeGZXR0s0VmZ6TVYyUE1hX0VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATU/NMA0G
CSqGSIb3DQEBCwUAA4IBAQBAWfKqox8Cdy9E16VfEyk1hTLJLXmwdSHxSyPxcV4d
8yOIxingczsYXuAJe5+I+IursJiqTmCZN9d4VjgYy4cJqmUnCzQHAXKLN2oZYJhR
2GvByW3LAPw5y3NHx/gnhcJgQM7Mkq9dXJlKT7WRV3JzmMKwZmKqcVPj9Ik4eZjp
E5TdLVB/sxlvSweIvC+sYYE1bB4+I2hkiWO/+dpaAKE4fY52thFfyQHU8SLHUNA9
6U/EDb0fKys03K1SIHJIw8vQtcxjshWbxQMsOYv7Qif0ZXDSdm7dZOZJAZI4OXpc
+wCmKa+943jJWVnrmDKbSoVPMDRnRtU9DXHGs8pz+3gh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:18 2025 by rpki-client