Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EpH20P4xP3V2g4vErHJO-EvTAVU.roa
File: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (raw, json)
Hash identifier: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=
Subject key identifier: 12:91:F6:D0:FE:31:3F:75:76:83:8B:C4:AC:72:4E:F8:4B:D3:01:55
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0194258F6A85B06C847B5EF4F0BB739173A4
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EpH20P4xP3V2g4vErHJO-EvTAVU.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214326
IP address blocks: 2a12:5844:1190::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6a:85:b0:6c:84:7b:5e:f4:f0:bb:73:91:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1291f6d0fe313f7576838bc4ac724ef84bd30155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:cb:47:34:7d:bb:f0:b0:e1:e5:30:9e:88:
38:a2:ca:43:cd:50:f0:7a:40:9e:4f:cb:e9:d4:6a:
ab:67:34:37:8b:7c:2c:f5:56:ff:93:28:43:b8:00:
38:5a:14:4e:c2:02:3b:38:2d:fb:0e:4a:ea:34:ae:
aa:2f:c4:68:bd:4e:00:2f:6f:9e:86:c7:2f:8f:34:
58:71:e6:95:28:90:02:0d:f1:91:10:55:0b:d2:ec:
28:83:0b:d2:bb:32:18:cc:14:4d:97:e9:6a:6f:ba:
c1:69:94:1d:17:45:f4:10:6f:73:8b:b3:ef:54:91:
26:03:cd:d6:3c:09:4e:d8:48:37:76:11:d0:06:26:
9f:40:75:41:c3:32:bc:c5:99:15:31:d8:6a:66:ba:
8b:33:04:f0:8b:fb:32:44:09:a1:23:57:e5:64:6c:
65:9b:07:84:19:38:24:f8:82:ef:63:dc:0c:ee:9d:
75:26:a3:85:f0:fe:88:64:6a:2f:d5:d4:2a:b1:0b:
6d:e1:58:cd:fe:9c:3d:3c:b6:3e:ab:d5:f3:ad:45:
3f:40:b2:bb:6d:ad:7e:02:c2:09:e8:3c:c9:8e:6b:
cb:ec:f0:ea:e7:60:c0:00:74:61:b2:d9:47:a1:7b:
5b:28:ac:b4:f2:93:bb:01:0a:1a:9d:4b:16:ba:a4:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:F6:D0:FE:31:3F:75:76:83:8B:C4:AC:72:4E:F8:4B:D3:01:55
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/EpH20P4xP3V2g4vErHJO-EvTAVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5844:1190::/44
Signature Algorithm: sha256WithRSAEncryption
1d:31:17:1f:b9:eb:8d:c2:e1:7e:d8:91:4d:73:9f:05:38:79:
56:72:62:a8:78:f8:09:ec:fb:e0:35:fa:0c:a8:8e:95:ee:6f:
a0:25:91:2a:9a:66:ae:67:91:78:6c:26:a8:70:fb:4c:d7:d7:
87:de:6a:8f:64:64:5d:37:90:18:99:9e:c1:08:67:c6:3d:13:
5e:97:5d:81:d3:76:79:77:9d:60:65:58:8f:fd:51:e5:83:f2:
6e:03:1d:ee:71:2a:1f:49:af:05:c3:c7:16:b7:c9:2c:bf:11:
89:7b:6a:c7:0b:2b:92:eb:ca:63:65:d4:51:6c:09:56:af:da:
74:18:55:67:31:08:ef:67:c1:50:4b:bc:65:bc:b9:1f:a5:6f:
d3:ed:52:84:d7:51:28:42:5b:4e:7e:4b:33:19:09:47:21:6c:
4f:8a:33:fd:c3:81:90:db:c0:7e:4e:2e:6c:25:15:8d:12:90:
86:11:70:f4:2c:39:35:69:e7:f2:e2:ff:43:24:26:3f:72:8c:
3d:b4:f3:aa:4d:f9:35:1b:6b:4b:18:48:c1:52:7a:77:91:d1:
44:f4:46:d4:53:bb:27:10:57:78:10:7a:88:2c:a3:2b:70:44:
2f:1d:c2:e1:78:9f:96:9d:a9:84:cb:53:fb:54:68:9e:fd:c1:
a9:d2:7e:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQlj2qFsGyEe1708LtzkXOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjUwMTAyMDU0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjkxZjZkMGZlMzEzZjc1NzY4MzhiYzRhYzcyNGVmODRiZDMwMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppbLRzR9u/Cw4eUwnog4ospDzVDw
ekCeT8vp1GqrZzQ3i3ws9Vb/kyhDuAA4WhROwgI7OC37DkrqNK6qL8RovU4AL2+e
hscvjzRYceaVKJACDfGREFUL0uwogwvSuzIYzBRNl+lqb7rBaZQdF0X0EG9zi7Pv
VJEmA83WPAlO2Eg3dhHQBiafQHVBwzK8xZkVMdhqZrqLMwTwi/syRAmhI1flZGxl
mweEGTgk+ILvY9wM7p11JqOF8P6IZGov1dQqsQtt4VjN/pw9PLY+q9XzrUU/QLK7
ba1+AsIJ6DzJjmvL7PDq52DAAHRhstlHoXtbKKy08pO7AQoanUsWuqTpywIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBKR9tD+MT91doOLxKxyTvhL0wFVMB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvRXBIMjBQNHhQM1YyZzR2RXJISk8tRXZUQVZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYRBGQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAdMRcfueuNwuF+2JFNc58FOHlWcmKoePgJ7Pvg
NfoMqI6V7m+gJZEqmmauZ5F4bCaocPtM19eH3mqPZGRdN5AYmZ7BCGfGPRNel12B
03Z5d51gZViP/VHlg/JuAx3ucSofSa8Fw8cWt8ksvxGJe2rHCyuS68pjZdRRbAlW
r9p0GFVnMQjvZ8FQS7xlvLkfpW/T7VKE11EoQltOfkszGQlHIWxPijP9w4GQ28B+
Ti5sJRWNEpCGEXD0LDk1aefy4v9DJCY/cow9tPOqTfk1G2tLGEjBUnp3kdFE9EbU
U7snEFd4EHqILKMrcEQvHcLheJ+WnamEy1P7VGie/cGp0n5e
-----END CERTIFICATE-----
Generated at Thu Apr 17 12:41:16 2025 by rpki-client