Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/enyletFJZSDPOaEKSgYKGMa47jo.roa
File: enyletFJZSDPOaEKSgYKGMa47jo.roa (raw, json)
Hash identifier: u3iDQK4A4s8TQoXw3DKhrju7cONghDYKJSTy8lJ2mFc=
Subject key identifier: 7A:7C:A5:7A:D1:49:65:20:CF:39:A1:0A:4A:06:0A:18:C6:B8:EE:3A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B3292FB5CD18B4EA46BA1AC29B45
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/enyletFJZSDPOaEKSgYKGMa47jo.roa
Signing time: Thu 02 Jan 2025 15:50:06 +0000
ROA not before: Thu 02 Jan 2025 15:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205553
IP address blocks: 5.188.9.0/24 maxlen: 24
5.188.63.0/24 maxlen: 24
5.188.167.0/24 maxlen: 24
146.185.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b3:29:2f:b5:cd:18:b4:ea:46:ba:1a:c2:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a7ca57ad1496520cf39a10a4a060a18c6b8ee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:54:90:b5:13:95:42:87:c5:1f:98:00:aa:
ca:64:69:cb:b5:70:e6:64:3e:c1:33:2d:23:a0:69:
15:a2:62:03:0f:9f:5f:30:0a:bc:35:2f:06:c6:1f:
b7:20:e6:c5:67:4a:5a:bd:1f:bb:44:ec:83:e1:4c:
2f:84:ed:11:41:ba:3a:f3:24:ef:a3:30:62:9c:84:
5e:4f:59:97:86:e3:c9:d6:2f:26:5f:f9:b0:e2:da:
5a:6e:85:c8:3a:f6:c4:8d:18:9e:99:ec:6d:12:a1:
b0:5f:d3:d0:d2:5f:41:4b:44:a6:28:6a:17:f6:2c:
fb:4e:2a:59:57:40:9a:af:75:d6:f4:b9:be:32:35:
0f:23:61:0c:b4:88:1e:63:e0:4f:ef:c1:3a:bb:f8:
26:a4:23:fb:51:ec:46:81:12:aa:81:bb:da:6e:2c:
2c:a5:b5:fa:dc:1f:68:66:02:62:9c:f0:ad:f5:28:
9c:6a:89:84:24:5c:ce:85:4a:19:c6:17:37:fe:37:
d9:bd:08:ee:96:ef:bd:e5:43:3c:3f:8d:34:7a:a0:
72:55:84:77:c3:a1:a4:6d:2a:40:32:14:3e:e8:9d:
07:78:25:c7:71:d4:2c:44:69:b5:c1:9e:70:26:c4:
6e:04:03:fd:1d:b7:8e:14:ae:8d:ce:75:a1:9f:25:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:A5:7A:D1:49:65:20:CF:39:A1:0A:4A:06:0A:18:C6:B8:EE:3A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/enyletFJZSDPOaEKSgYKGMa47jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.9.0/24
5.188.63.0/24
5.188.167.0/24
146.185.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:a7:ba:9d:c8:67:50:24:a3:da:d4:9a:51:b5:48:d0:bf:
f8:d4:37:a8:5a:14:f9:4b:8b:5b:c6:fd:14:0a:09:d1:93:70:
fb:f8:14:20:3b:a0:09:19:04:5a:11:0a:22:c6:1d:0e:3e:3f:
0f:43:a9:8f:7d:84:5b:cc:0c:ac:73:96:a1:df:66:be:75:ac:
4b:a7:37:fe:06:e3:ab:ce:65:c4:44:63:f2:b2:f8:e9:97:b4:
f5:e8:89:0e:af:7a:1f:3c:6d:82:55:ec:b6:bd:48:ac:bf:b5:
b1:1f:62:c3:fd:cd:db:8f:66:14:ee:0a:55:96:ff:dd:89:5e:
ac:e0:b4:02:5c:1d:2a:37:6b:54:b2:4c:cf:30:6f:c2:da:07:
58:22:6a:d9:04:12:01:9e:bb:b0:4d:53:eb:6a:35:b3:5d:b5:
01:32:40:b0:d3:c7:12:19:97:92:2d:f1:cd:ba:bd:c8:b3:b2:
bb:63:74:8a:e8:1b:34:2b:33:9a:de:37:57:6b:ef:c8:6a:43:
71:3f:98:bb:99:94:a3:c8:d1:a9:7a:27:1c:a4:68:e3:a8:99:
3c:28:50:a6:af:d7:84:a5:82:62:a9:a2:23:03:e1:45:f8:08:
df:e9:87:a3:69:d5:ca:36:2a:09:f7:81:5d:22:66:eb:89:36:
ec:0e:34:ce
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQntbMpL7XNGLTqRroawptFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjUwMTAyMTU1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdjYTU3YWQxNDk2NTIwY2YzOWExMGE0YTA2MGExOGM2YjhlZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdUkLUTlUKHxR+YAKrKZGnLtXDm
ZD7BMy0joGkVomIDD59fMAq8NS8Gxh+3IObFZ0pavR+7ROyD4UwvhO0RQbo68yTv
ozBinIReT1mXhuPJ1i8mX/mw4tpaboXIOvbEjRiemextEqGwX9PQ0l9BS0SmKGoX
9iz7TipZV0Car3XW9Lm+MjUPI2EMtIgeY+BP78E6u/gmpCP7UexGgRKqgbvabiws
pbX63B9oZgJinPCt9SicaomEJFzOhUoZxhc3/jfZvQjulu+95UM8P400eqByVYR3
w6GkbSpAMhQ+6J0HeCXHcdQsRGm1wZ5wJsRuBAP9HbeOFK6NznWhnyWH0wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHp8pXrRSWUgzzmhCkoGChjGuO46MB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvZW55bGV0RkpaU0RQT2FFS1NnWUtHTWE0N2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABbwJAwQA
Bbw/AwQABbynAwQAkrnqMA0GCSqGSIb3DQEBCwUAA4IBAQBfh6e6nchnUCSj2tSa
UbVI0L/41DeoWhT5S4tbxv0UCgnRk3D7+BQgO6AJGQRaEQoixh0OPj8PQ6mPfYRb
zAysc5ah32a+daxLpzf+BuOrzmXERGPysvjpl7T16IkOr3ofPG2CVey2vUisv7Wx
H2LD/c3bj2YU7gpVlv/diV6s4LQCXB0qN2tUskzPMG/C2gdYImrZBBIBnruwTVPr
ajWzXbUBMkCw08cSGZeSLfHNur3Is7K7Y3SK6Bs0KzOa3jdXa+/IakNxP5i7mZSj
yNGpeiccpGjjqJk8KFCmr9eEpYJiqaIjA+FF+Ajf6YejadXKNioJ94FdImbriTbs
DjTO
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:25 2025 by rpki-client