Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EpHgXNyFpwyiiEMnqqcIY6VPLog.roa
File: EpHgXNyFpwyiiEMnqqcIY6VPLog.roa (raw, json)
Hash identifier: WJmBOVMOx9MxxqfdUdUiRu4dLRoD6uAtAD9gGAYNQhs=
Subject key identifier: 12:91:E0:5C:DC:85:A7:0C:A2:88:43:27:AA:A7:08:63:A5:4F:2E:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01931036690E2C17F9CBA012BD7C924DA428
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EpHgXNyFpwyiiEMnqqcIY6VPLog.roa
Signing time: Sat 09 Nov 2024 09:17:01 +0000
ROA not before: Sat 09 Nov 2024 09:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213958
IP address blocks: 93.113.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:36:69:0e:2c:17:f9:cb:a0:12:bd:7c:92:4d:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 9 09:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1291e05cdc85a70ca2884327aaa70863a54f2e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:7f:9a:8d:48:8d:d3:13:da:8e:86:29:8f:
b4:6b:ba:82:bf:c8:3d:e2:52:f6:48:12:39:00:86:
9f:d0:4e:6d:31:83:59:de:db:6b:20:0b:f8:28:57:
7e:b0:00:9c:4a:b2:e4:46:e9:25:0e:fb:1e:4b:3e:
ee:b2:f4:98:c5:e6:99:5f:40:d6:86:76:c3:9d:37:
54:dc:34:37:cc:9b:59:02:fa:bf:24:ce:c1:ee:ee:
f7:50:5f:5f:f8:3e:34:47:eb:21:df:2d:1c:6e:d0:
37:6d:50:60:ca:05:26:27:43:99:9d:80:42:4c:09:
78:f6:cd:c7:f7:9f:48:b9:e4:9e:61:b7:c1:0a:1d:
02:26:31:6a:15:40:1a:d6:5c:c3:ad:66:f9:97:c9:
08:bb:f5:8b:ee:39:75:a1:e4:6f:9d:66:ab:21:aa:
2c:6f:57:72:1e:2f:87:e8:25:9d:58:e3:35:16:da:
4a:6a:ae:7f:1d:c8:d8:c4:3c:fc:03:20:3e:8a:51:
d0:6b:44:7a:11:16:0c:43:15:59:20:43:d2:2d:20:
91:72:3c:4e:dc:8f:90:43:01:6d:86:01:36:73:bd:
d8:6e:bb:5d:aa:8a:87:6b:19:a0:c6:79:89:d2:13:
2f:d4:c1:52:b9:52:dd:af:46:77:bb:d9:1e:55:17:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:E0:5C:DC:85:A7:0C:A2:88:43:27:AA:A7:08:63:A5:4F:2E:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EpHgXNyFpwyiiEMnqqcIY6VPLog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.57.0/24
Signature Algorithm: sha256WithRSAEncryption
05:98:42:a9:1e:13:26:ae:d3:1d:60:7b:c6:57:72:eb:92:f0:
24:51:a4:4d:63:fa:89:2e:16:7f:17:cf:59:fa:e5:5f:31:53:
10:a1:e4:82:86:49:36:e7:12:da:f1:f4:dc:20:77:3d:0d:20:
e7:fb:ea:da:57:de:b2:35:c4:c6:1c:cb:25:48:0e:24:94:79:
46:41:6c:07:4e:db:7c:f3:f6:13:5c:48:b1:ac:8c:bc:89:89:
a7:72:b2:b7:31:5c:ed:ee:d4:b9:07:3e:00:49:b1:a7:e3:b2:
d8:6d:5c:07:39:42:48:6e:0e:6b:4b:bf:f8:5d:5f:90:6c:cb:
fc:ce:c1:db:0a:a0:75:2e:b7:32:6e:c5:03:ea:63:ed:21:6b:
1e:db:d1:04:96:c3:e9:de:05:4f:c6:e7:e2:0b:93:bf:0f:12:
5c:9c:07:5d:b2:0f:f1:99:87:a0:fe:5a:9a:fc:42:7b:64:a0:
da:36:39:ed:32:18:4b:0d:05:a9:3e:b9:07:ff:e7:73:5c:ce:
15:cd:eb:53:c3:65:fe:3e:f2:91:c4:d2:58:0d:ce:a2:c3:e3:
29:4b:28:0f:a3:3a:eb:9e:9e:e4:c9:01:26:f1:d0:91:67:d4:
e6:bf:7d:46:f0:14:05:c3:8f:e2:75:db:73:e0:90:d8:fc:9f:
00:db:82:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMQNmkOLBf5y6ASvXySTaQoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTA5MDkxNzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjkxZTA1Y2RjODVhNzBjYTI4ODQzMjdhYWE3MDg2M2E1NGYyZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4t/mo1IjdMT2o6GKY+0a7qCv8g9
4lL2SBI5AIaf0E5tMYNZ3ttrIAv4KFd+sACcSrLkRuklDvseSz7usvSYxeaZX0DW
hnbDnTdU3DQ3zJtZAvq/JM7B7u73UF9f+D40R+sh3y0cbtA3bVBgygUmJ0OZnYBC
TAl49s3H959IueSeYbfBCh0CJjFqFUAa1lzDrWb5l8kIu/WL7jl1oeRvnWarIaos
b1dyHi+H6CWdWOM1FtpKaq5/HcjYxDz8AyA+ilHQa0R6ERYMQxVZIEPSLSCRcjxO
3I+QQwFthgE2c73YbrtdqoqHaxmgxnmJ0hMv1MFSuVLdr0Z3u9keVRf9MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKR4FzchacMoohDJ6qnCGOlTy6IMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRXBIZ1hOeUZwd3lpaUVNbnFxY0lZNlZQTG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXE5MA0G
CSqGSIb3DQEBCwUAA4IBAQAFmEKpHhMmrtMdYHvGV3LrkvAkUaRNY/qJLhZ/F89Z
+uVfMVMQoeSChkk25xLa8fTcIHc9DSDn++raV96yNcTGHMslSA4klHlGQWwHTtt8
8/YTXEixrIy8iYmncrK3MVzt7tS5Bz4ASbGn47LYbVwHOUJIbg5rS7/4XV+QbMv8
zsHbCqB1LrcybsUD6mPtIWse29EElsPp3gVPxufiC5O/DxJcnAddsg/xmYeg/lqa
/EJ7ZKDaNjntMhhLDQWpPrkH/+dzXM4VzetTw2X+PvKRxNJYDc6iw+MpSygPozrr
np7kyQEm8dCRZ9Tmv31G8BQFw4/iddtz4JDY/J8A24IZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:27:04 2024 by rpki-client on console-ams.rpki-client.org