Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ejkdYE_ASX3LDghXOJDEJwhAHI.roa
File: 1ejkdYE_ASX3LDghXOJDEJwhAHI.roa (raw, json)
Hash identifier: k+3aChW4qdVjcG64sbdEr69HV+JaFnxS2R+CSCD3/J8=
Subject key identifier: D5:E8:E4:75:81:3F:01:25:F7:2C:38:21:5C:E2:43:10:9C:21:00:72
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FED14B1905FFFD885E47CEE5C1571
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ejkdYE_ASX3LDghXOJDEJwhAHI.roa
Signing time: Thu 02 Jan 2025 05:49:36 +0000
ROA not before: Thu 02 Jan 2025 05:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202668
IP address blocks: 146.158.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ed:14:b1:90:5f:ff:d8:85:e4:7c:ee:5c:15:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e8e475813f0125f72c38215ce243109c210072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:bf:2a:26:3d:b7:ec:58:cd:60:61:21:3b:
b8:6d:69:f4:e7:83:fc:04:1b:75:15:07:fe:25:55:
41:86:94:42:51:da:d6:9e:57:50:bf:39:ad:fc:21:
ef:a9:e0:47:f2:2c:32:b4:ee:1c:02:12:89:92:9d:
15:f5:2e:a1:04:95:d1:82:38:c1:c6:e1:62:43:f7:
4b:db:8f:0f:e3:67:fd:57:23:81:4f:03:90:ea:c4:
87:33:ee:a2:6b:df:91:fe:78:a5:e5:a4:31:f2:d2:
40:44:b8:6c:a6:9b:57:6a:09:3a:2c:d9:86:9d:71:
e0:95:c3:00:61:49:90:7a:f5:cf:e9:9c:af:7e:97:
b7:d4:b6:8e:22:58:b1:72:51:13:c6:e5:b3:11:6f:
f0:ce:e4:47:44:7b:25:0e:e9:00:36:a2:1c:1e:e4:
55:25:6f:b3:f2:f9:5d:02:17:c8:62:69:b6:d3:c5:
b9:a2:46:eb:c2:97:65:6b:4e:50:d8:42:ae:57:28:
ac:3c:65:18:09:fd:57:2e:36:f8:5f:e2:11:d0:59:
b7:64:01:6c:8a:20:1c:55:34:0d:68:e7:e6:b1:b7:
e4:3d:bc:f3:2b:ec:e5:5f:d5:f6:07:94:d3:4b:f9:
86:96:d1:2b:a4:43:ae:6d:e7:a8:2f:a8:5c:1b:81:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:E4:75:81:3F:01:25:F7:2C:38:21:5C:E2:43:10:9C:21:00:72
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1ejkdYE_ASX3LDghXOJDEJwhAHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:45:fe:59:b9:61:93:90:e4:59:e7:c7:2a:f2:e0:71:00:84:
6c:cd:a3:a0:63:36:48:63:6b:55:f9:f8:07:26:88:18:fc:b4:
9b:4e:da:a4:a3:f7:25:60:2b:45:8f:32:cb:ec:5f:2d:ec:77:
ec:83:c4:7f:24:71:01:f3:7b:31:f6:39:82:38:6a:f7:ee:a3:
6c:13:f9:df:5e:c6:3a:ad:38:dd:04:57:e2:53:95:4e:3f:dc:
a2:00:81:f9:6a:c4:62:28:94:33:2f:dd:25:54:c5:66:09:24:
9d:21:8b:34:88:14:a0:fa:97:90:6c:af:ba:ad:5e:30:ed:59:
51:f1:f9:a3:4e:c3:dc:ca:b6:e3:d4:9d:cb:71:df:2f:e3:e7:
04:16:b6:e7:b9:f3:ff:92:53:d3:10:d2:5e:f0:53:b4:17:56:
b0:77:77:54:9d:67:25:10:dc:82:35:fa:4d:d1:ca:86:5a:da:
2a:26:0f:60:4c:2a:96:82:dc:45:b2:ce:1b:af:b7:5a:7f:17:
74:ca:1a:a3:e2:f9:65:c5:0f:14:a8:d6:b8:5b:af:55:72:a4:
49:42:e8:4d:fe:bd:e5:f6:29:ea:73:2f:06:9c:40:b8:85:b3:
68:a4:bf:bb:64:b7:8c:97:f1:32:67:37:4e:24:03:2a:86:a6:
6f:3e:17:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj+0UsZBf/9iF5HzuXBVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWU4ZTQ3NTgxM2YwMTI1ZjcyYzM4MjE1Y2UyNDMxMDljMjEwMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufe/KiY9t+xYzWBhITu4bWn054P8
BBt1FQf+JVVBhpRCUdrWnldQvzmt/CHvqeBH8iwytO4cAhKJkp0V9S6hBJXRgjjB
xuFiQ/dL248P42f9VyOBTwOQ6sSHM+6ia9+R/nil5aQx8tJARLhspptXagk6LNmG
nXHglcMAYUmQevXP6Zyvfpe31LaOIlixclETxuWzEW/wzuRHRHslDukANqIcHuRV
JW+z8vldAhfIYmm208W5okbrwpdla05Q2EKuVyisPGUYCf1XLjb4X+IR0Fm3ZAFs
iiAcVTQNaOfmsbfkPbzzK+zlX9X2B5TTS/mGltErpEOubeeoL6hcG4FvfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNXo5HWBPwEl9yw4IVziQxCcIQByMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMWVqa2RZRV9BU1gzTERnaFhPSkRFSndoQUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkp4eMA0G
CSqGSIb3DQEBCwUAA4IBAQCbRf5ZuWGTkORZ58cq8uBxAIRszaOgYzZIY2tV+fgH
JogY/LSbTtqko/clYCtFjzLL7F8t7Hfsg8R/JHEB83sx9jmCOGr37qNsE/nfXsY6
rTjdBFfiU5VOP9yiAIH5asRiKJQzL90lVMVmCSSdIYs0iBSg+peQbK+6rV4w7VlR
8fmjTsPcyrbj1J3Lcd8v4+cEFrbnufP/klPTENJe8FO0F1awd3dUnWclENyCNfpN
0cqGWtoqJg9gTCqWgtxFss4br7dafxd0yhqj4vllxQ8UqNa4W69VcqRJQuhN/r3l
9inqcy8GnEC4hbNopL+7ZLeMl/EyZzdOJAMqhqZvPhcP
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:56 2025 by rpki-client