Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rEwdtSFulCnCTL77TKt0RBsUn6E.roa
File: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (raw, json)
Hash identifier: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=
Subject key identifier: AC:4C:1D:B5:21:6E:94:29:C2:4C:BE:FB:4C:AB:74:44:1B:14:9F:A1
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C1B118D196AEA82D5D26F50038E7
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rEwdtSFulCnCTL77TKt0RBsUn6E.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34173
IP address blocks: 78.153.245.0/24 maxlen: 24
85.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c1:b1:18:d1:96:ae:a8:2d:5d:26:f5:00:38:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac4c1db5216e9429c24cbefb4cab74441b149fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:3c:c5:3b:05:b8:96:f0:7d:35:a3:01:d9:
ca:02:73:bb:86:59:f7:7a:5c:c6:db:e9:9f:4c:5a:
1b:c8:95:5a:1d:0b:10:f1:96:91:a8:e6:71:50:be:
09:3b:c0:c3:60:b4:c9:ef:b7:cc:a1:bd:c7:5b:49:
f6:2b:8d:71:ab:c3:b8:97:c8:51:4c:90:9e:bb:a3:
b6:ab:81:84:d4:41:f1:33:2b:e3:cc:38:b7:cf:6b:
7a:5a:fb:fc:44:0a:0f:6a:42:f8:23:0f:2d:48:c3:
b6:96:8a:c9:d8:02:0e:33:8d:82:71:52:5d:38:3c:
8e:4a:17:e5:34:a3:fb:ce:a0:03:e3:2f:47:6a:a5:
e9:ed:b0:6a:23:de:52:71:2d:aa:f9:91:64:cd:d0:
10:24:1b:da:33:b8:ca:41:b4:d3:fb:a1:eb:89:c5:
f9:4a:d3:41:27:63:11:4a:3f:f7:68:8e:29:e6:3d:
8f:30:82:69:d6:ea:3b:23:83:78:73:2f:61:2f:ac:
61:c5:28:35:3f:ae:2e:4b:af:3a:37:d3:e8:31:cc:
b8:40:a1:dd:01:f2:50:db:4a:8a:2e:27:d2:91:da:
bd:d1:b4:20:cd:f1:84:e2:ee:d8:ae:7b:c6:22:b8:
e9:25:41:71:cb:cb:92:86:48:89:24:86:77:22:c9:
1e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:1D:B5:21:6E:94:29:C2:4C:BE:FB:4C:AB:74:44:1B:14:9F:A1
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/rEwdtSFulCnCTL77TKt0RBsUn6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.245.0/24
85.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0d:dc:5d:c4:12:7d:08:89:9b:d6:40:ed:b4:6e:a4:2a:7b:
6f:48:4b:15:82:e8:c1:6d:15:05:d5:5f:07:af:4c:39:af:24:
c3:da:49:ff:23:72:f1:54:38:b1:18:8c:dc:2f:7e:8b:58:e8:
1f:3f:37:0d:91:b2:54:a2:33:be:fc:cf:93:09:40:dd:9c:b1:
aa:51:81:30:50:e5:a0:79:8a:86:fa:61:ea:e1:35:da:6f:1a:
a2:83:71:7d:90:89:bb:f7:4d:ee:dc:bb:b3:16:2f:cb:6c:7c:
ab:54:f2:58:4d:cc:be:a4:04:ba:51:da:81:37:8b:6b:99:b1:
3f:48:e9:fb:3b:e2:35:6f:34:92:3e:cf:d2:f7:b5:a4:62:d2:
32:15:32:08:06:df:cd:5e:77:2e:a8:55:df:06:ae:fe:24:6e:
ff:e2:78:2a:53:f7:a4:5c:3f:1e:bb:b0:37:72:6b:80:20:fd:
8d:23:43:1c:2a:05:b7:49:9c:b6:a9:20:b9:3e:52:96:ae:a2:
76:dc:ef:a6:0b:42:9b:72:6f:33:a0:65:2c:93:3c:77:22:6d:
70:2a:77:c3:82:e7:09:d1:7d:e6:e5:0f:e0:83:31:5d:c6:60:
c2:02:55:ef:37:3d:33:97:58:83:e6:ca:62:9c:9f:8a:ed:c4:
ee:66:a9:f3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIcGxGNGWrqgtXSb1ADjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjUwMTAyMDM0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzRjMWRiNTIxNmU5NDI5YzI0Y2JlZmI0Y2FiNzQ0NDFiMTQ5ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Hg8xTsFuJbwfTWjAdnKAnO7hln3
elzG2+mfTFobyJVaHQsQ8ZaRqOZxUL4JO8DDYLTJ77fMob3HW0n2K41xq8O4l8hR
TJCeu6O2q4GE1EHxMyvjzDi3z2t6Wvv8RAoPakL4Iw8tSMO2lorJ2AIOM42CcVJd
ODyOShflNKP7zqAD4y9HaqXp7bBqI95ScS2q+ZFkzdAQJBvaM7jKQbTT+6HricX5
StNBJ2MRSj/3aI4p5j2PMIJp1uo7I4N4cy9hL6xhxSg1P64uS686N9PoMcy4QKHd
AfJQ20qKLifSkdq90bQgzfGE4u7YrnvGIrjpJUFxy8uShkiJJIZ3IskedQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKxMHbUhbpQpwky++0yrdEQbFJ+hMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvckV3ZHRTRnVsQ25DVEw3N1RLdDBSQnNVbjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATpn1AwQA
VR/XMA0GCSqGSIb3DQEBCwUAA4IBAQCbDdxdxBJ9CImb1kDttG6kKntvSEsVgujB
bRUF1V8Hr0w5ryTD2kn/I3LxVDixGIzcL36LWOgfPzcNkbJUojO+/M+TCUDdnLGq
UYEwUOWgeYqG+mHq4TXabxqig3F9kIm7903u3LuzFi/LbHyrVPJYTcy+pAS6UdqB
N4trmbE/SOn7O+I1bzSSPs/S97WkYtIyFTIIBt/NXncuqFXfBq7+JG7/4ngqU/ek
XD8eu7A3cmuAIP2NI0McKgW3SZy2qSC5PlKWrqJ23O+mC0Kbcm8zoGUskzx3Im1w
KnfDgucJ0X3m5Q/ggzFdxmDCAlXvNz0zl1iD5spinJ+K7cTuZqnz
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:46:37 2025 by rpki-client