Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EjlYvPztTxZKIzATqt0KIIJjYVc.roa
File: EjlYvPztTxZKIzATqt0KIIJjYVc.roa (raw, json)
Hash identifier: 2EYnKWCgsom+cuN41kX7OeH142McVu2H7O9U2cTM3VE=
Subject key identifier: 12:39:58:BC:FC:ED:4F:16:4A:23:30:13:AA:DD:0A:20:82:63:61:57
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018E2FF7FE8F9A4B4313132F424376AC91B3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EjlYvPztTxZKIzATqt0KIIJjYVc.roa
Signing time: Tue 12 Mar 2024 00:02:45 +0000
ROA not before: Tue 12 Mar 2024 00:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 109.111.32.0/22 maxlen: 22
109.111.36.0/22 maxlen: 22
109.111.40.0/22 maxlen: 22
109.111.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:f7:fe:8f:9a:4b:43:13:13:2f:42:43:76:ac:91:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 12 00:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=123958bcfced4f164a233013aadd0a2082636157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:71:1f:0e:d4:44:73:01:ff:68:89:e6:d2:
57:f5:53:4e:4f:62:e7:28:88:a9:06:26:ae:df:80:
e0:82:dd:39:77:c1:42:c3:d1:d2:d2:81:ff:e6:8a:
ea:98:ac:70:b8:2b:7e:82:15:01:8f:69:1e:56:3f:
eb:4c:06:1e:e9:9a:cf:61:05:49:91:65:a9:f1:bd:
c7:fd:e9:59:ca:c2:35:d1:01:8e:f4:6a:49:b1:70:
ed:fe:ca:89:01:94:73:d2:9d:3b:18:d7:cc:a5:ae:
dd:26:d4:bd:3f:ab:be:3e:27:e2:cc:30:43:0a:38:
97:e7:d8:97:b1:6f:e6:9d:e0:d8:ed:fa:6a:65:56:
63:c8:64:2a:14:20:70:10:32:bf:06:eb:90:21:e2:
d4:a8:79:1d:0d:7d:7a:02:5d:7c:b8:ae:ed:32:7d:
b5:ed:a5:93:c0:eb:ea:fd:a7:38:68:45:25:6e:c5:
2f:29:1b:99:ad:5a:49:ac:e8:31:f7:13:98:3b:16:
7d:1b:74:b4:8d:3f:4c:1d:96:7c:f0:f9:72:73:54:
1b:e8:2f:dc:d5:ca:c9:57:ca:b6:6e:ba:ca:e5:25:
06:e5:15:f0:a4:2a:4f:51:ac:1a:db:a8:82:af:cc:
a1:9c:ff:4b:50:ea:54:ec:c7:24:77:49:f6:9a:f1:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:39:58:BC:FC:ED:4F:16:4A:23:30:13:AA:DD:0A:20:82:63:61:57
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/EjlYvPztTxZKIzATqt0KIIJjYVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:7c:a6:2d:2c:a3:f3:04:7d:6a:07:29:5e:03:39:34:01:b5:
4f:62:13:6f:da:1c:76:2b:68:ae:1c:7c:e3:04:0c:61:a2:87:
bd:57:8c:45:08:b6:77:70:3d:4c:26:8d:1b:26:67:6c:cc:e4:
92:5a:a9:7b:1c:bc:9c:d0:90:14:1b:b9:34:c9:76:1a:c2:b1:
83:ce:36:6f:95:0a:fa:b4:e0:db:72:9c:27:a4:9c:61:72:a2:
0b:f3:d9:09:b5:90:b4:bc:9d:b6:8c:75:b7:93:a9:bd:2c:99:
9f:fe:9d:10:4a:31:e6:73:2c:8e:12:c0:65:c8:32:d0:f3:40:
82:ae:b2:cd:b9:3c:7e:fb:6d:b8:58:99:05:1e:7d:12:f2:11:
57:7e:83:3e:ce:88:42:fc:e9:25:76:5d:c8:d5:c7:3b:21:11:
0f:7b:f8:d9:0a:be:38:13:cd:f7:77:85:34:12:5b:f2:58:f3:
8c:65:ad:0d:5d:de:09:20:ea:17:28:fe:a3:30:42:77:86:e3:
8f:a8:99:83:1d:53:2b:e5:8a:14:96:6b:b4:56:7d:b5:ff:39:
69:da:fc:e9:1a:ca:ac:cd:ca:87:a2:0c:52:54:d2:e7:0b:35:
f6:56:4b:53:67:27:b3:f1:31:65:b9:9d:f1:37:db:f8:8c:53:
68:37:96:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4v9/6PmktDExMvQkN2rJGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwMzEyMDAwMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjM5NThiY2ZjZWQ0ZjE2NGEyMzMwMTNhYWRkMGEyMDgyNjM2MTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZxHw7URHMB/2iJ5tJX9VNOT2Ln
KIipBiau34Dggt05d8FCw9HS0oH/5orqmKxwuCt+ghUBj2keVj/rTAYe6ZrPYQVJ
kWWp8b3H/elZysI10QGO9GpJsXDt/sqJAZRz0p07GNfMpa7dJtS9P6u+PifizDBD
CjiX59iXsW/mneDY7fpqZVZjyGQqFCBwEDK/BuuQIeLUqHkdDX16Al18uK7tMn21
7aWTwOvq/ac4aEUlbsUvKRuZrVpJrOgx9xOYOxZ9G3S0jT9MHZZ88Plyc1Qb6C/c
1crJV8q2brrK5SUG5RXwpCpPUawa26iCr8yhnP9LUOpU7Mckd0n2mvEQxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBI5WLz87U8WSiMwE6rdCiCCY2FXMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvRWpsWXZQenRUeFpLSXpBVHF0MEtJSUpqWVZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbW8gMA0G
CSqGSIb3DQEBCwUAA4IBAQCkfKYtLKPzBH1qByleAzk0AbVPYhNv2hx2K2iuHHzj
BAxhooe9V4xFCLZ3cD1MJo0bJmdszOSSWql7HLyc0JAUG7k0yXYawrGDzjZvlQr6
tODbcpwnpJxhcqIL89kJtZC0vJ22jHW3k6m9LJmf/p0QSjHmcyyOEsBlyDLQ80CC
rrLNuTx++224WJkFHn0S8hFXfoM+zohC/Okldl3I1cc7IREPe/jZCr44E833d4U0
ElvyWPOMZa0NXd4JIOoXKP6jMEJ3huOPqJmDHVMr5YoUlmu0Vn21/zlp2vzpGsqs
zcqHogxSVNLnCzX2VktTZyez8TFluZ3xN9v4jFNoN5ZT
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:00:15 2024 by rpki-client on console-fra.rpki-client.org