Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/EkaEyXozgiekll2E79hO4CO1uqA.roa
File: EkaEyXozgiekll2E79hO4CO1uqA.roa (raw, json)
Hash identifier: wP1NSmnrNLxRRtg48uADNbI9NtddzaJ1aUWyXkJo9AA=
Subject key identifier: 12:46:84:C9:7A:33:82:27:A4:96:5D:84:EF:D8:4E:E0:23:B5:BA:A0
Certificate issuer: /CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Certificate serial: 018CC79577748C1F7F191A886ACEF3BBAA17
Authority key identifier: C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/EkaEyXozgiekll2E79hO4CO1uqA.roa
Signing time: Tue 02 Jan 2024 00:31:50 +0000
ROA not before: Tue 02 Jan 2024 00:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398464
IP address blocks: 195.64.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:77:74:8c:1f:7f:19:1a:88:6a:ce:f3:bb:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9da2ff5a77e78eec3033dda5749a4a8c1e55164
Validity
Not Before: Jan 2 00:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=124684c97a338227a4965d84efd84ee023b5baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:3e:30:82:cb:d1:ec:c4:7c:a5:bb:25:a3:
54:7f:69:a9:19:47:54:13:be:56:96:7f:85:0b:dd:
5c:89:6e:9a:66:fe:a3:94:fe:3b:35:2b:ae:b6:d0:
19:77:f7:e5:e2:a7:e6:06:1e:1d:e9:a3:7a:1f:a6:
35:62:ec:ed:a9:7f:3b:d2:51:92:87:da:99:78:20:
a5:ab:8e:32:05:63:33:dd:e8:c3:74:83:f8:61:a7:
64:c8:cf:24:31:0d:11:b4:80:dc:47:e3:02:76:79:
3b:69:46:52:1d:70:0a:33:b4:43:f7:e1:dd:e0:1d:
1c:69:c3:62:59:4e:39:bf:3e:34:e6:2f:00:09:d4:
46:08:6f:8a:cb:5d:53:c8:37:0e:33:e1:ed:63:bd:
21:5d:12:8a:4b:6f:2a:1c:c5:4e:7d:05:6a:f5:58:
c5:89:8c:78:07:2f:f9:06:e0:dd:93:97:fa:87:8b:
64:e5:f3:7c:bf:08:2b:e2:6e:a7:52:e2:de:2a:5f:
2c:ac:ff:b8:4f:b9:35:96:e9:43:92:1c:54:d5:70:
d9:45:9f:f3:0b:4d:e5:49:24:a0:0f:dc:57:ec:32:
21:6d:ee:33:a0:ba:99:f5:31:9e:44:76:98:34:ce:
52:bc:e0:83:8c:0a:f8:16:a3:93:fe:1a:61:bb:da:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:84:C9:7A:33:82:27:A4:96:5D:84:EF:D8:4E:E0:23:B5:BA:A0
X509v3 Authority Key Identifier:
keyid:C9:DA:2F:F5:A7:7E:78:EE:C3:03:3D:DA:57:49:A4:A8:C1:E5:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydov9ad-eO7DAz3aV0mkqMHlUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/EkaEyXozgiekll2E79hO4CO1uqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3c08ae-eb6d-4608-82c3-6c04a6ed13c5/1/ydov9ad-eO7DAz3aV0mkqMHlUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:8c:b6:ea:d6:59:f5:7b:e5:13:43:e1:15:ea:4e:77:7b:
04:56:19:ef:91:fb:cc:ac:c4:27:f5:c3:69:4e:e3:ed:e2:bc:
6b:fb:88:f3:4a:15:0d:d8:9c:99:26:4d:68:77:b8:15:67:22:
d7:ff:2a:b8:13:3a:5b:1c:99:6b:53:95:f7:70:a1:21:ec:4b:
7b:58:b1:0a:01:41:b0:95:06:0e:2b:5e:ef:38:ac:1a:08:53:
f1:ab:2f:47:9f:14:d6:1f:ec:43:08:54:11:7a:a2:de:9a:a5:
10:b3:cb:7e:12:d9:d9:26:b5:65:9a:bf:fe:2a:38:ae:f3:1b:
12:a4:5e:77:2a:82:55:85:62:36:a6:26:83:e4:40:7c:bc:30:
55:3c:5f:df:1e:57:00:ce:98:ac:8a:89:71:83:00:43:34:7b:
16:79:7c:73:32:46:50:ed:f9:56:81:92:4a:dc:67:c0:40:cb:
a4:be:8a:69:fe:fc:0b:1a:5d:1e:16:72:59:6c:3b:5f:d0:cf:
cf:0b:ab:4c:43:69:b6:5b:3a:66:83:b8:03:53:68:41:74:27:
9e:f2:6f:44:30:06:42:2b:48:3d:04:1b:40:40:7a:ee:e1:cb:
1b:d3:7a:9e:d4:0d:90:a4:d9:9a:d4:f9:4c:5a:91:b6:5f:c9:
ce:c0:2c:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlXd0jB9/GRqIas7zu6oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZGEyZmY1YTc3ZTc4ZWVjMzAzM2RkYTU3NDlhNGE4YzFl
NTUxNjQwHhcNMjQwMTAyMDAzMTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjQ2ODRjOTdhMzM4MjI3YTQ5NjVkODRlZmQ4NGVlMDIzYjViYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXg+MILL0ezEfKW7JaNUf2mpGUdU
E75Wln+FC91ciW6aZv6jlP47NSuuttAZd/fl4qfmBh4d6aN6H6Y1YuztqX870lGS
h9qZeCClq44yBWMz3ejDdIP4YadkyM8kMQ0RtIDcR+MCdnk7aUZSHXAKM7RD9+Hd
4B0cacNiWU45vz405i8ACdRGCG+Ky11TyDcOM+HtY70hXRKKS28qHMVOfQVq9VjF
iYx4By/5BuDdk5f6h4tk5fN8vwgr4m6nUuLeKl8srP+4T7k1lulDkhxU1XDZRZ/z
C03lSSSgD9xX7DIhbe4zoLqZ9TGeRHaYNM5SvOCDjAr4FqOT/hphu9ryiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJGhMl6M4InpJZdhO/YTuAjtbqgMB8GA1UdIwQY
MBaAFMnaL/WnfnjuwwM92ldJpKjB5VFkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMt
NmMwNGE2ZWQxM2M1LzEvRWthRXlYb3pnaWVrbGwyRTc5aE80Q08xdXFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zYzA4YWUtZWI2ZC00NjA4LTgyYzMtNmMwNGE2ZWQxM2M1
LzEveWRvdjlhZC1lTzdEQXozYVYwbWtxTUhsVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BzMA0G
CSqGSIb3DQEBCwUAA4IBAQBr0oy26tZZ9XvlE0PhFepOd3sEVhnvkfvMrMQn9cNp
TuPt4rxr+4jzShUN2JyZJk1od7gVZyLX/yq4EzpbHJlrU5X3cKEh7Et7WLEKAUGw
lQYOK17vOKwaCFPxqy9HnxTWH+xDCFQReqLemqUQs8t+EtnZJrVlmr/+Kjiu8xsS
pF53KoJVhWI2piaD5EB8vDBVPF/fHlcAzpisiolxgwBDNHsWeXxzMkZQ7flWgZJK
3GfAQMukvopp/vwLGl0eFnJZbDtf0M/PC6tMQ2m2Wzpmg7gDU2hBdCee8m9EMAZC
K0g9BBtAQHru4csb03qe1A2QpNma1PlMWpG2X8nOwCx4
-----END CERTIFICATE-----
Generated at Thu May 2 09:15:37 2024 by rpki-client on console-fra.rpki-client.org