Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa
File: ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa (raw, json)
Hash identifier: n7Rzh1zK0MckYzOS9a8lwv/AGXV+Jr0CvxhzGO4UHW8=
Subject key identifier: 13:12:72:3E:3A:39:11:66:50:52:9C:31:49:2D:13:EC:0D:D3:72:58
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 01941F8C16FE1EA93AB3E57805A4A41D0A1F
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205572
IP address blocks: 185.213.84.0/22 maxlen: 22
2a0b:8540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:16:fe:1e:a9:3a:b3:e5:78:05:a4:a4:1d:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1312723e3a39116650529c31492d13ec0dd37258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:ab:2a:af:39:ce:d5:71:68:cb:0c:a5:aa:
43:a5:cd:63:2a:86:5f:1d:b9:94:65:ee:89:da:13:
74:4f:57:51:b2:7c:2e:91:8b:58:03:ef:72:ed:34:
ed:38:c9:65:e2:96:cd:2b:7b:e2:63:37:2a:74:95:
9c:bc:82:ac:4c:43:09:3b:2e:2f:6c:dc:34:e7:b0:
b1:96:db:f5:c9:65:20:ae:3e:72:e4:2c:83:fd:48:
d2:b7:20:66:f5:51:7a:be:5f:5a:69:aa:3f:1b:3a:
23:78:36:11:87:97:ff:db:6f:4a:d7:4e:95:5f:a4:
49:0e:bc:a2:06:4c:58:eb:45:25:da:3a:73:40:b7:
25:f4:b3:c1:ad:9a:5e:a7:25:2a:e7:94:90:40:9c:
c3:b7:5c:4a:66:90:3d:c4:67:67:31:65:64:cc:c2:
81:b6:b0:91:50:e5:b2:19:6b:ad:9f:94:56:f4:0d:
be:f1:9e:62:93:09:1a:fe:cf:33:5c:e7:e0:db:7b:
81:6e:51:58:7e:ac:40:8f:96:52:ba:31:89:3b:fb:
cd:28:31:3e:a4:ea:d7:1c:17:3e:16:f5:70:67:dc:
bd:6f:9f:90:1e:27:fd:29:73:fc:bc:f7:fa:1a:46:
01:98:53:d1:a8:9b:78:7d:b3:db:2b:12:68:ed:de:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:72:3E:3A:39:11:66:50:52:9C:31:49:2D:13:EC:0D:D3:72:58
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/ExJyPjo5EWZQUpwxSS0T7A3Tclg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.84.0/22
IPv6:
2a0b:8540::/29
Signature Algorithm: sha256WithRSAEncryption
b5:13:c8:e4:ae:06:86:43:b0:09:de:69:92:84:3d:9d:62:c9:
17:82:16:00:7a:07:3a:d4:37:0b:cf:29:d5:b1:b1:20:5d:fb:
a8:94:ac:ce:4e:8a:a9:63:0f:2c:67:af:98:d7:6a:1a:f1:d4:
69:c6:a1:fc:ac:d5:cb:c5:15:ed:68:63:23:71:48:19:14:fd:
e3:d6:25:fb:38:b4:11:4c:74:66:c5:29:0a:41:b6:bf:07:fb:
28:7d:c8:43:11:ff:1b:1a:73:b1:e0:e0:ae:5b:59:a4:c0:ca:
4e:9c:af:ce:9f:d4:41:00:d1:87:5c:ca:9e:91:a4:ba:d0:eb:
9b:7e:1b:f7:27:23:5a:48:28:d0:7f:96:d4:ee:27:f0:3e:21:
cf:d3:02:bf:68:cf:60:68:df:42:6f:ad:e4:e8:7a:32:25:da:
78:70:ad:31:1a:e2:99:a7:d1:15:35:c9:82:6a:99:8f:ed:29:
5c:2b:69:2e:24:b2:bd:31:58:01:86:14:56:58:70:c4:8f:85:
d1:d5:d2:87:d9:7c:14:96:3e:78:b5:c0:0a:ba:c5:52:10:71:
b3:09:43:be:de:df:88:84:bc:4b:f9:c0:3a:65:7b:5e:65:52:
ea:2e:43:1a:c9:1d:82:80:de:96:1e:ee:ee:11:3a:c5:7d:5b:
54:e0:23:8e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjBb+Hqk6s+V4BaSkHQofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YWRhOTAxZDQwOGJmN2Y1Yjk0MzU5MjFlNDgwMGE4Zjgy
ZGJkYWIwHhcNMjUwMTAxMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzEyNzIzZTNhMzkxMTY2NTA1MjljMzE0OTJkMTNlYzBkZDM3MjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOGrKq85ztVxaMsMpapDpc1jKoZf
HbmUZe6J2hN0T1dRsnwukYtYA+9y7TTtOMll4pbNK3viYzcqdJWcvIKsTEMJOy4v
bNw057Cxltv1yWUgrj5y5CyD/UjStyBm9VF6vl9aaao/GzojeDYRh5f/229K106V
X6RJDryiBkxY60Ul2jpzQLcl9LPBrZpepyUq55SQQJzDt1xKZpA9xGdnMWVkzMKB
trCRUOWyGWutn5RW9A2+8Z5ikwka/s8zXOfg23uBblFYfqxAj5ZSujGJO/vNKDE+
pOrXHBc+FvVwZ9y9b5+QHif9KXP8vPf6GkYBmFPRqJt4fbPbKxJo7d5rRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBMScj46ORFmUFKcMUktE+wN03JYMB8GA1UdIwQY
MBaAFPWtqQHUCL9/W5Q1kh5IAKj4Lb2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2Yt
YTMzNjQ5ZTNlMmM1LzEvRXhKeVBqbzVFV1pRVXB3eFNTMFQ3QTNUY2xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hZmE2ZDYtNTBmOS00MWQ0LWI3Y2YtYTMzNjQ5ZTNlMmM1
LzEvOWEycEFkUUl2MzlibERXU0hrZ0FxUGd0dmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudVUMA0E
AgACMAcDBQMqC4VAMA0GCSqGSIb3DQEBCwUAA4IBAQC1E8jkrgaGQ7AJ3mmShD2d
YskXghYAegc61DcLzynVsbEgXfuolKzOToqpYw8sZ6+Y12oa8dRpxqH8rNXLxRXt
aGMjcUgZFP3j1iX7OLQRTHRmxSkKQba/B/sofchDEf8bGnOx4OCuW1mkwMpOnK/O
n9RBANGHXMqekaS60Oubfhv3JyNaSCjQf5bU7ifwPiHP0wK/aM9gaN9Cb63k6Hoy
Jdp4cK0xGuKZp9EVNcmCapmP7SlcK2kuJLK9MVgBhhRWWHDEj4XR1dKH2XwUlj54
tcAKusVSEHGzCUO+3t+IhLxL+cA6ZXteZVLqLkMayR2CgN6WHu7uETrFfVtU4COO
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:19 2025 by rpki-client