Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa
File: EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa (raw, json)
Hash identifier: Zh9Sz85xAOxdRH/TSTK08WUiIZwDMKmp8n0eSS6ma5U=
Subject key identifier: 12:34:E0:DC:52:E8:0A:AC:0C:61:26:B6:A1:59:CB:34:AA:7B:01:32
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019421B1A2C764CD325D21D73DA71A360FD3
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 62.72.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a2:c7:64:cd:32:5d:21:d7:3d:a7:1a:36:0f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1234e0dc52e80aac0c6126b6a159cb34aa7b0132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:11:6b:90:8a:7f:15:2c:d8:86:8b:4f:45:
b2:99:dc:02:14:55:69:a4:ea:7a:30:3e:ae:30:a7:
ca:f0:3b:f8:3c:a8:d7:2d:65:01:82:b8:18:af:13:
f6:d7:06:fd:ca:ef:bd:a8:e5:af:23:55:28:1a:89:
bc:6b:bc:34:ec:1e:91:e9:46:a9:2d:bd:37:43:cd:
b4:cc:49:f9:9c:89:b0:da:cb:df:bc:ae:c1:36:02:
2b:c2:1c:8d:9b:55:bc:f7:c9:c7:9d:28:87:8b:fa:
7f:a6:fe:83:3d:48:81:3b:5f:70:d9:79:e3:c7:24:
84:70:85:0f:cf:61:15:db:a6:f8:a6:03:fa:12:f7:
6d:52:45:08:b5:c6:a9:85:c1:45:4a:90:47:0c:7b:
78:67:cf:74:be:7f:3e:34:7c:b9:6a:3f:ca:0d:ae:
1f:09:93:ed:04:b1:a7:fd:d5:17:e2:3f:41:9b:df:
34:a1:80:c0:bf:c7:0d:d5:f6:ff:13:56:ea:fe:68:
58:43:4b:04:8b:6b:5b:a4:bf:a3:a1:9c:f4:85:7f:
34:29:3f:e2:8d:82:d7:eb:72:28:4c:18:21:25:c1:
e0:30:4c:23:2e:50:b8:80:50:c7:6e:d4:8d:ad:0f:
81:06:75:5b:f6:f7:40:7e:99:71:7f:6a:62:b8:c6:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:34:E0:DC:52:E8:0A:AC:0C:61:26:B6:A1:59:CB:34:AA:7B:01:32
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/EjTg3FLoCqwMYSa2oVnLNKp7ATI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.190.0/24
Signature Algorithm: sha256WithRSAEncryption
55:43:6c:a1:cd:c7:a1:a9:a5:b7:0c:c0:8c:65:c1:d7:6f:91:
a0:39:40:ea:2c:53:45:9e:34:51:c1:40:81:19:0c:0c:e7:7b:
5f:65:c9:bf:42:67:3f:bd:e7:9e:24:44:7d:c4:26:07:00:1b:
e1:ed:b9:8a:2b:7d:44:ff:1b:77:36:eb:06:17:53:25:76:a4:
ed:f1:f5:77:b5:6b:91:e0:b2:92:7c:c9:79:40:00:dd:29:e5:
e0:68:3d:9a:e1:d1:de:f9:bd:2a:68:11:0a:03:f1:00:44:ad:
45:5c:35:59:02:4f:4a:8b:a0:79:dd:6d:d9:6b:31:f0:73:6b:
a4:14:9f:11:3c:fd:a5:fc:64:34:72:66:9a:d5:93:88:c4:28:
c3:0e:38:b6:8d:07:96:67:60:9f:d5:8e:c6:71:10:2b:59:86:
4f:fc:6e:4d:c9:b7:10:ae:1b:bd:ce:7f:0b:d8:a1:cb:35:56:
ee:d0:e2:e0:cb:71:34:38:05:12:f4:20:0f:de:bc:25:33:de:
ef:88:9b:fa:5f:cd:bc:d9:69:cc:a9:2d:37:5d:98:07:26:3b:
9a:df:52:49:9e:23:41:77:0a:93:60:52:85:02:ba:30:71:f2:
ec:91:ab:28:97:5c:61:a9:34:67:c8:7b:e6:97:81:d4:b6:f3:
31:c3:01:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsaLHZM0yXSHXPacaNg/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjUwMTAxMTE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjM0ZTBkYzUyZTgwYWFjMGM2MTI2YjZhMTU5Y2IzNGFhN2IwMTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bwRa5CKfxUs2IaLT0WymdwCFFVp
pOp6MD6uMKfK8Dv4PKjXLWUBgrgYrxP21wb9yu+9qOWvI1UoGom8a7w07B6R6Uap
Lb03Q820zEn5nImw2svfvK7BNgIrwhyNm1W898nHnSiHi/p/pv6DPUiBO19w2Xnj
xySEcIUPz2EV26b4pgP6EvdtUkUItcaphcFFSpBHDHt4Z890vn8+NHy5aj/KDa4f
CZPtBLGn/dUX4j9Bm980oYDAv8cN1fb/E1bq/mhYQ0sEi2tbpL+joZz0hX80KT/i
jYLX63IoTBghJcHgMEwjLlC4gFDHbtSNrQ+BBnVb9vdAfplxf2piuMaNLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBI04NxS6AqsDGEmtqFZyzSqewEyMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvRWpUZzNGTG9DcXdNWVNhMm9WbkxOS3A3QVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPki+MA0G
CSqGSIb3DQEBCwUAA4IBAQBVQ2yhzcehqaW3DMCMZcHXb5GgOUDqLFNFnjRRwUCB
GQwM53tfZcm/Qmc/veeeJER9xCYHABvh7bmKK31E/xt3NusGF1MldqTt8fV3tWuR
4LKSfMl5QADdKeXgaD2a4dHe+b0qaBEKA/EARK1FXDVZAk9Ki6B53W3ZazHwc2uk
FJ8RPP2l/GQ0cmaa1ZOIxCjDDji2jQeWZ2Cf1Y7GcRArWYZP/G5NybcQrhu9zn8L
2KHLNVbu0OLgy3E0OAUS9CAP3rwlM97viJv6X8282WnMqS03XZgHJjua31JJniNB
dwqTYFKFArowcfLskasol1xhqTRnyHvml4HUtvMxwwHM
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:23 2025 by rpki-client