Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa
File: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (raw, json)
Hash identifier: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=
Subject key identifier: 7A:83:A7:2C:68:8E:E8:21:64:97:8F:51:C3:DD:81:29:55:99:D5:86
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 01942067D05B0315969183BE2EBD839B6E34
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 193.163.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d0:5b:03:15:96:91:83:be:2e:bd:83:9b:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a83a72c688ee82164978f51c3dd81295599d586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:9b:04:05:7b:54:76:16:47:2d:46:e4:a8:
31:ec:e1:34:ae:99:5d:a3:d3:c9:02:12:ce:6a:61:
06:3d:5e:da:fe:25:f7:97:fc:45:c5:6c:b0:f5:08:
32:9b:29:69:fc:d7:5b:2c:12:6e:22:47:8b:47:d3:
c3:0e:2e:7a:f7:fa:0c:c4:d1:92:16:04:9f:02:a1:
59:f9:57:70:67:68:82:80:b5:18:16:52:70:f8:de:
1d:08:9e:d9:c9:1b:17:86:ac:f0:50:32:21:8d:ff:
30:32:d3:02:5a:ef:40:85:51:da:79:bd:57:1d:ee:
e6:db:70:18:ea:32:da:c8:b9:42:c3:31:cc:a8:50:
ce:37:54:71:1d:fa:3c:39:90:e3:3a:fd:e2:1f:eb:
4e:85:e0:96:ff:97:4c:d5:fc:a2:2a:fa:9d:97:56:
83:dd:0b:98:8c:a7:29:38:b5:e8:2b:e8:81:14:83:
b5:63:27:49:9c:b9:f7:b3:de:6c:ff:72:68:90:bf:
a0:bd:15:46:c7:08:c4:e4:83:86:14:61:be:87:ee:
b0:c0:5a:06:86:e7:96:50:7f:41:61:d3:d0:c8:e8:
25:e2:a9:ea:5c:36:3c:ef:a4:7f:d3:60:8c:8e:3b:
56:85:4a:33:ab:d3:36:3f:56:75:8d:7c:0c:df:c6:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:83:A7:2C:68:8E:E8:21:64:97:8F:51:C3:DD:81:29:55:99:D5:86
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:1a:b5:6c:31:2d:0f:39:ec:af:35:5b:2b:4e:ac:e7:c8:6d:
3a:0a:d1:bf:7b:ba:dd:7e:c9:2a:9b:f5:3c:5e:97:72:a5:4e:
f5:0e:cb:fd:d5:3d:ba:13:38:8e:ef:fc:50:8f:a3:4f:2c:15:
9c:0f:f3:38:f6:1b:85:fc:e6:81:cc:82:22:d9:d7:d6:0e:59:
99:f0:8f:8b:0d:9d:96:92:2b:84:d5:af:6e:55:f9:d3:fc:5a:
c0:95:e5:61:2d:57:11:52:66:4f:fc:58:bd:9c:34:41:06:0c:
51:56:bc:bf:c6:00:07:a5:9c:2b:33:14:ff:1b:85:19:ed:ad:
5d:81:8b:27:bb:eb:d5:e2:52:aa:44:86:c6:fa:3d:f8:6b:d7:
a3:cf:98:15:9c:e7:df:ab:3c:e7:49:51:d0:4a:57:aa:76:89:
d2:36:81:ed:12:b9:00:c4:57:1c:09:56:9f:24:ed:21:03:69:
57:6f:69:31:da:53:81:42:22:3e:db:72:51:fd:7c:4a:43:f3:
66:2f:18:5b:dc:61:f1:8d:51:65:a7:10:dd:4a:7f:65:bb:82:
e8:ba:9e:c4:c1:8e:43:8a:62:f8:2a:dc:3d:82:7d:24:55:b4:
cf:9c:7f:84:61:98:52:ff:d1:f5:d0:5c:79:80:99:1a:2b:63:
e4:dd:10:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9BbAxWWkYO+Lr2Dm240MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDllODY1NzZjMDY1ZTE0YmZiZWU4ZjY1MmFiNmMyNzlj
Y2RlMTIwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTgzYTcyYzY4OGVlODIxNjQ5NzhmNTFjM2RkODEyOTU1OTlkNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGebBAV7VHYWRy1G5Kgx7OE0rpld
o9PJAhLOamEGPV7a/iX3l/xFxWyw9Qgymylp/NdbLBJuIkeLR9PDDi569/oMxNGS
FgSfAqFZ+VdwZ2iCgLUYFlJw+N4dCJ7ZyRsXhqzwUDIhjf8wMtMCWu9AhVHaeb1X
He7m23AY6jLayLlCwzHMqFDON1RxHfo8OZDjOv3iH+tOheCW/5dM1fyiKvqdl1aD
3QuYjKcpOLXoK+iBFIO1YydJnLn3s95s/3JokL+gvRVGxwjE5IOGFGG+h+6wwFoG
hueWUH9BYdPQyOgl4qnqXDY876R/02CMjjtWhUozq9M2P1Z1jXwM38bwmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqDpyxojughZJePUcPdgSlVmdWGMB8GA1UdIwQY
MBaAFKUJ6GV2wGXhS/vuj2UqtsJ5zN4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODct
YTBmNTc0MmIxYjA0LzEvZW9PbkxHaU82Q0ZrbDQ5Unc5MkJLVldaMVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wMTQyNDUtODY4NS00YWYzLTkzODctYTBmNTc0MmIxYjA0
LzEvcFFub1pYYkFaZUZMLS02UFpTcTJ3bm5NM2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPGMA0G
CSqGSIb3DQEBCwUAA4IBAQAsGrVsMS0POeyvNVsrTqznyG06CtG/e7rdfskqm/U8
XpdypU71Dsv91T26EziO7/xQj6NPLBWcD/M49huF/OaBzIIi2dfWDlmZ8I+LDZ2W
kiuE1a9uVfnT/FrAleVhLVcRUmZP/Fi9nDRBBgxRVry/xgAHpZwrMxT/G4UZ7a1d
gYsnu+vV4lKqRIbG+j34a9ejz5gVnOffqzznSVHQSleqdonSNoHtErkAxFccCVaf
JO0hA2lXb2kx2lOBQiI+23JR/XxKQ/NmLxhb3GHxjVFlpxDdSn9lu4Loup7EwY5D
imL4Ktw9gn0kVbTPnH+EYZhS/9H10Fx5gJkaK2Pk3RBT
-----END CERTIFICATE-----
Generated at Mon Mar 10 00:44:30 2025 by rpki-client