Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/EqmxfEPR61JZ1PILd4aiLsGlGKg.roa
File: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (raw, json)
Hash identifier: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=
Subject key identifier: 12:A9:B1:7C:43:D1:EB:52:59:D4:F2:0B:77:86:A2:2E:C1:A5:18:A8
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019422202BAF1B223F80BAC9230FCC908B4B
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/EqmxfEPR61JZ1PILd4aiLsGlGKg.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 45.159.204.0/22 maxlen: 24
2a09:db40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2b:af:1b:22:3f:80:ba:c9:23:0f:cc:90:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a9b17c43d1eb5259d4f20b7786a22ec1a518a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:98:c3:97:14:44:87:15:57:c0:b5:39:7e:
03:af:4f:58:1c:71:d6:5d:ee:87:54:49:bb:31:d2:
8f:50:42:fd:5f:4f:73:26:bf:ae:4a:f6:50:f5:7b:
fc:f3:82:33:19:6a:3b:80:6a:94:68:ec:d0:08:a9:
99:64:06:95:9c:7e:6e:cb:90:14:bd:f3:8a:d0:89:
1b:da:6e:3e:1a:62:19:83:6f:23:4e:94:5f:62:6c:
5a:31:1f:d2:d1:70:14:38:18:39:ee:b7:56:c8:30:
cd:5f:59:52:25:20:d3:05:e8:b4:c8:be:bd:d6:5d:
3e:ad:3e:97:f6:7f:4b:c9:8c:23:d3:53:e5:34:18:
f1:ca:37:0b:8c:39:c1:88:74:a1:72:f0:dd:c7:40:
90:86:0c:ac:33:de:59:68:a7:83:55:7e:03:d8:5a:
35:13:09:56:f2:dc:02:f2:43:e7:5b:33:2d:2b:be:
61:07:9a:51:23:3b:da:be:da:be:d7:31:de:a1:33:
f0:8a:b7:e3:3b:2e:64:3e:2e:43:26:54:89:a5:37:
fa:fd:43:6e:f8:9c:24:da:d5:fc:37:11:60:97:a6:
2d:40:2a:3a:c1:49:7f:5c:8b:fb:cf:26:fb:1a:26:
c3:65:c6:86:b4:8d:fc:bd:7b:8f:9f:e0:5e:f4:8c:
37:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:B1:7C:43:D1:EB:52:59:D4:F2:0B:77:86:A2:2E:C1:A5:18:A8
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/EqmxfEPR61JZ1PILd4aiLsGlGKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.204.0/22
IPv6:
2a09:db40::/29
Signature Algorithm: sha256WithRSAEncryption
6a:fe:31:b4:be:be:d8:48:c5:9f:37:ef:1b:6e:2d:91:ac:5a:
8c:0e:36:e5:d6:ce:cf:64:21:5b:9e:b3:1e:a3:ef:6d:b8:59:
3e:c1:c2:3e:6d:2a:8c:a1:1d:6d:b6:0d:af:ba:ed:3b:c8:e2:
c4:20:6f:c4:f2:3a:ed:6d:3c:ea:ce:6a:fd:e7:c5:b1:d7:51:
4a:31:0a:51:17:5b:d1:a9:12:8f:d1:5f:45:99:27:56:a6:f0:
02:3e:2d:10:8a:dd:20:68:ae:ef:c6:23:fb:e7:b1:87:e7:23:
c9:5e:78:7b:2e:e5:fa:03:39:1b:82:9c:f3:86:e0:c6:b5:ca:
1b:f2:f8:18:40:2a:0e:1c:8e:47:16:08:7d:86:90:75:74:5f:
a7:e1:63:52:4d:92:68:af:7e:7b:a0:34:00:82:b1:21:04:3a:
95:89:21:74:7b:fc:a4:83:c6:c3:f4:fe:38:b0:5e:25:7c:e0:
ec:b3:7a:ad:ba:38:14:88:0e:0a:03:cc:c4:83:62:19:4d:32:
26:24:5e:63:40:0f:69:24:a2:d0:fd:3e:96:4b:37:ae:f4:d0:
6b:e8:0e:ed:5a:0c:5b:d0:f4:d2:d5:1b:b0:ad:16:fd:e2:b1:
36:05:e1:3e:25:11:ce:65:9f:f2:02:4e:88:23:aa:fa:7f:2e:
27:a7:14:80
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiICuvGyI/gLrJIw/MkItLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjUwMTAxMTM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmE5YjE3YzQzZDFlYjUyNTlkNGYyMGI3Nzg2YTIyZWMxYTUxOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VOYw5cURIcVV8C1OX4Dr09YHHHW
Xe6HVEm7MdKPUEL9X09zJr+uSvZQ9Xv884IzGWo7gGqUaOzQCKmZZAaVnH5uy5AU
vfOK0Ikb2m4+GmIZg28jTpRfYmxaMR/S0XAUOBg57rdWyDDNX1lSJSDTBei0yL69
1l0+rT6X9n9LyYwj01PlNBjxyjcLjDnBiHShcvDdx0CQhgysM95ZaKeDVX4D2Fo1
EwlW8twC8kPnWzMtK75hB5pRIzvavtq+1zHeoTPwirfjOy5kPi5DJlSJpTf6/UNu
+Jwk2tX8NxFgl6YtQCo6wUl/XIv7zyb7GibDZcaGtI38vXuPn+Be9Iw3QwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBKpsXxD0etSWdTyC3eGoi7BpRioMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvRXFteGZFUFI2MUpaMVBJTGQ0YWlMc0dsR0tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ/MMA0E
AgACMAcDBQMqCdtAMA0GCSqGSIb3DQEBCwUAA4IBAQBq/jG0vr7YSMWfN+8bbi2R
rFqMDjbl1s7PZCFbnrMeo+9tuFk+wcI+bSqMoR1ttg2vuu07yOLEIG/E8jrtbTzq
zmr958Wx11FKMQpRF1vRqRKP0V9FmSdWpvACPi0Qit0gaK7vxiP757GH5yPJXnh7
LuX6AzkbgpzzhuDGtcob8vgYQCoOHI5HFgh9hpB1dF+n4WNSTZJor357oDQAgrEh
BDqViSF0e/ykg8bD9P44sF4lfODss3qtujgUiA4KA8zEg2IZTTImJF5jQA9pJKLQ
/T6WSzeu9NBr6A7tWgxb0PTS1RuwrRb94rE2BeE+JRHOZZ/yAk6II6r6fy4npxSA
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:56 2025 by rpki-client