Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EZ7oClIWvCEQ1FJ3in9q6xieyQ0.roa
File: EZ7oClIWvCEQ1FJ3in9q6xieyQ0.roa (raw, json)
Hash identifier: aX8IxxYHUio0zde1QB5tgxhPJ1g+7iIrUBjLNh56LJY=
Subject key identifier: 11:9E:E8:0A:52:16:BC:21:10:D4:52:77:8A:7F:6A:EB:18:9E:C9:0D
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA7D1B02EBA89525050E26F26D06B2
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EZ7oClIWvCEQ1FJ3in9q6xieyQ0.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58305
IP address blocks: 2a0c:b642:1a0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:1b:02:eb:a8:95:25:05:0e:26:f2:6d:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119ee80a5216bc2110d452778a7f6aeb189ec90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:1f:9d:33:75:88:09:f2:c7:f4:1d:fc:7f:
50:b5:f4:0e:7f:13:ff:d7:92:1f:56:66:54:51:a7:
2b:aa:e6:be:23:0d:9f:5f:6e:28:02:94:7b:88:63:
21:27:e1:0d:fc:86:a0:20:8d:d6:ae:e5:bc:59:26:
91:f6:41:f0:06:0e:5b:a0:3d:3c:a2:3f:64:83:08:
41:25:c1:98:a6:40:5e:05:2e:57:25:20:13:b6:f2:
94:31:d6:c2:50:b3:f0:dd:8d:d9:c7:d5:34:ab:ee:
62:49:e4:6d:0a:d8:8e:b4:d3:9b:a8:b9:40:94:ba:
f2:a3:21:5b:a5:67:a3:22:0e:c3:37:51:ea:e8:ea:
99:e0:d9:cd:0f:7a:ae:2d:90:13:e9:22:cf:91:75:
23:d1:1f:12:48:60:82:f7:87:f9:5f:e9:bc:2b:11:
c9:47:9b:9a:6b:08:9f:36:a8:ca:8f:a2:f4:a8:2d:
ed:55:9b:ab:b8:eb:d5:23:c1:56:2a:c5:cf:4f:b3:
48:3d:95:fd:64:06:d0:fd:82:f9:d4:fb:f9:9a:ec:
5d:1e:fa:a7:ad:0d:d9:bc:69:af:b0:7a:dc:8b:ea:
32:86:57:74:30:51:96:e3:a5:54:65:60:ba:b1:2b:
5f:02:a1:df:a0:e9:09:d7:07:77:02:be:84:aa:24:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9E:E8:0A:52:16:BC:21:10:D4:52:77:8A:7F:6A:EB:18:9E:C9:0D
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EZ7oClIWvCEQ1FJ3in9q6xieyQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a0d::/48
Signature Algorithm: sha256WithRSAEncryption
74:c1:bf:44:49:7d:ff:5b:04:50:36:dc:b5:9b:54:d7:fa:a5:
1e:eb:96:f1:3b:01:ca:36:a2:78:89:76:b4:a3:5a:bd:7b:c8:
a1:18:52:50:ec:7b:03:7f:a0:ec:12:ec:61:66:50:c1:1e:45:
2a:23:ff:6f:fe:43:48:8e:1e:da:28:01:5d:a0:d2:57:25:f3:
99:64:e1:07:47:42:3f:0e:c3:9a:a9:4c:9f:f4:4e:9b:98:03:
4b:61:04:f4:b1:ca:6a:7f:86:49:69:37:c2:f7:64:33:89:96:
ee:d6:f5:11:a3:03:cc:74:a8:79:e0:53:66:42:82:b3:bb:1c:
09:21:9d:f0:2a:74:2c:60:64:e1:fb:76:ea:c2:ef:43:54:c6:
c1:bd:57:d5:eb:c8:99:38:70:48:3a:96:f6:d0:84:16:5b:8d:
f4:d8:01:28:c2:09:ee:dc:27:8f:a6:3a:b3:1f:43:05:a2:be:
bf:23:41:6b:1a:f8:06:48:78:61:39:1a:5d:29:a7:b8:39:0e:
7c:ed:a4:34:21:08:13:83:84:12:14:22:fb:a5:27:85:7e:2e:
05:96:17:9a:4a:2c:89:05:e6:92:4d:1b:10:f6:ed:c1:64:8c:
fe:4e:d0:c7:ca:6b:fa:c0:d0:d5:13:5e:2b:fb:c0:7f:78:3b:
27:08:d8:38
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQf+n0bAuuolSUFDibybQayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjUwMTAxMDM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTllZTgwYTUyMTZiYzIxMTBkNDUyNzc4YTdmNmFlYjE4OWVjOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK0fnTN1iAnyx/Qd/H9QtfQOfxP/
15IfVmZUUacrqua+Iw2fX24oApR7iGMhJ+EN/IagII3WruW8WSaR9kHwBg5boD08
oj9kgwhBJcGYpkBeBS5XJSATtvKUMdbCULPw3Y3Zx9U0q+5iSeRtCtiOtNObqLlA
lLryoyFbpWejIg7DN1Hq6OqZ4NnND3quLZAT6SLPkXUj0R8SSGCC94f5X+m8KxHJ
R5uaawifNqjKj6L0qC3tVZuruOvVI8FWKsXPT7NIPZX9ZAbQ/YL51Pv5muxdHvqn
rQ3ZvGmvsHrci+oyhld0MFGW46VUZWC6sStfAqHfoOkJ1wd3Ar6EqiRkuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBGe6ApSFrwhENRSd4p/ausYnskNMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvRVo3b0NsSVd2Q0VRMUZKM2luOXE2eGlleVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoN
MA0GCSqGSIb3DQEBCwUAA4IBAQB0wb9ESX3/WwRQNty1m1TX+qUe65bxOwHKNqJ4
iXa0o1q9e8ihGFJQ7HsDf6DsEuxhZlDBHkUqI/9v/kNIjh7aKAFdoNJXJfOZZOEH
R0I/DsOaqUyf9E6bmANLYQT0scpqf4ZJaTfC92QziZbu1vURowPMdKh54FNmQoKz
uxwJIZ3wKnQsYGTh+3bqwu9DVMbBvVfV68iZOHBIOpb20IQWW4302AEowgnu3CeP
pjqzH0MFor6/I0FrGvgGSHhhORpdKae4OQ587aQ0IQgTg4QSFCL7pSeFfi4Flhea
SiyJBeaSTRsQ9u3BZIz+TtDHymv6wNDVE14r+8B/eDsnCNg4
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:38 2025 by rpki-client