Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/EGBRjPl07LC9IiSKlWfhoU-_Crk.roa
File: EGBRjPl07LC9IiSKlWfhoU-_Crk.roa (raw, json)
Hash identifier: bOSVTvIZ5LKS962rF/GAi5VGVNIMkbk2qTb5VU4uyO0=
Subject key identifier: 10:60:51:8C:F9:74:EC:B0:BD:22:24:8A:95:67:E1:A1:4F:BF:0A:B9
Certificate issuer: /CN=266547208206ad54474c69fccbedc24aa56a62c2
Certificate serial: 01942143D94FC9B234B2F140CDB2874FDDC9
Authority key identifier: 26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/EGBRjPl07LC9IiSKlWfhoU-_Crk.roa
Signing time: Wed 01 Jan 2025 09:48:02 +0000
ROA not before: Wed 01 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12301
IP address blocks: 91.196.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d9:4f:c9:b2:34:b2:f1:40:cd:b2:87:4f:dd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266547208206ad54474c69fccbedc24aa56a62c2
Validity
Not Before: Jan 1 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1060518cf974ecb0bd22248a9567e1a14fbf0ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:fe:87:38:8d:5f:c0:88:23:b5:35:8f:1a:
c1:3b:3f:04:98:fb:7a:0c:6d:93:aa:60:d9:ef:0f:
10:10:0f:83:37:88:7b:a9:73:52:5c:0e:db:2d:16:
c2:87:4e:9d:a5:5f:17:27:79:6b:61:1b:a7:0a:88:
b4:a0:41:51:ed:00:6c:b4:55:13:35:49:b1:ba:0b:
60:da:bd:9b:f6:61:d7:77:da:a5:f4:05:04:88:09:
52:4d:09:71:7f:75:d3:f2:84:82:e5:0e:4a:79:ff:
6f:0d:0d:60:e3:a9:3f:02:82:8d:10:a7:20:46:32:
e5:f6:a6:a3:02:0f:a7:3b:28:3e:c1:7f:04:3b:e6:
d0:00:24:a2:75:98:bb:5a:c9:d5:b8:5b:c8:fc:95:
da:ee:22:d0:13:5e:cc:31:ff:bb:5c:7c:87:06:a8:
d9:30:c7:51:35:48:8a:8f:4c:02:c2:17:24:eb:51:
53:b8:4b:51:1e:a1:49:95:f6:87:c9:f8:8e:3a:4c:
12:94:5a:97:40:47:73:63:f8:0b:0b:96:9e:46:9c:
51:6f:e5:a3:d4:6d:92:b3:ae:32:44:8d:5a:e2:e4:
b6:e1:3e:4a:22:a6:5e:16:d4:69:93:1c:f8:48:85:
35:a7:df:40:54:55:9c:3b:87:35:a7:a0:29:49:27:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:51:8C:F9:74:EC:B0:BD:22:24:8A:95:67:E1:A1:4F:BF:0A:B9
X509v3 Authority Key Identifier:
keyid:26:65:47:20:82:06:AD:54:47:4C:69:FC:CB:ED:C2:4A:A5:6A:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmVHIIIGrVRHTGn8y-3CSqVqYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/EGBRjPl07LC9IiSKlWfhoU-_Crk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a8f553-f52c-4949-97e2-822d159a97af/1/JmVHIIIGrVRHTGn8y-3CSqVqYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.112.0/22
Signature Algorithm: sha256WithRSAEncryption
00:89:f4:f4:a2:86:66:4d:70:21:9b:11:a2:43:4c:ff:a9:2c:
68:c1:26:df:b7:c9:29:c2:4d:b6:91:64:b6:a9:87:4f:d2:17:
42:b7:84:09:33:27:2c:d9:91:cb:1c:7a:2e:29:72:c9:76:81:
c0:df:3b:78:5b:eb:a6:2f:fe:2d:23:b7:30:4d:07:9c:b5:0e:
dd:53:cc:df:48:b8:71:53:47:52:49:a2:eb:7a:b9:e4:bf:87:
65:ca:16:d1:2e:21:6e:b0:f4:0e:3e:bc:6b:e6:6f:20:d7:f1:
b2:8d:7b:e6:02:af:15:10:fb:ca:86:a3:45:47:23:f1:a6:63:
9f:92:fd:c5:96:7a:b0:81:b0:76:6e:ab:8d:9f:f2:a3:b4:48:
9c:d6:46:e8:6c:2b:a6:72:60:c7:6f:13:b7:d3:36:9c:a1:70:
a6:fb:f1:5d:5c:97:2d:34:46:3e:50:f1:20:4e:2d:76:53:c6:
75:89:90:26:9e:26:25:d9:38:07:c7:de:52:7d:ae:be:a7:02:
42:50:15:c5:40:96:f2:1d:51:d7:a7:32:96:2a:4d:e5:04:77:
6e:85:98:a0:2c:fe:6d:27:00:ce:d9:28:44:d8:80:4d:9e:9c:
e6:51:0c:ab:11:11:f5:1a:ba:23:67:83:9c:19:f3:8e:4a:34:
5f:80:df:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhQ9lPybI0svFAzbKHT93JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjU0NzIwODIwNmFkNTQ0NzRjNjlmY2NiZWRjMjRhYTU2
YTYyYzIwHhcNMjUwMTAxMDk0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDYwNTE4Y2Y5NzRlY2IwYmQyMjI0OGE5NTY3ZTFhMTRmYmYwYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5v+hziNX8CII7U1jxrBOz8EmPt6
DG2TqmDZ7w8QEA+DN4h7qXNSXA7bLRbCh06dpV8XJ3lrYRunCoi0oEFR7QBstFUT
NUmxugtg2r2b9mHXd9ql9AUEiAlSTQlxf3XT8oSC5Q5Kef9vDQ1g46k/AoKNEKcg
RjLl9qajAg+nOyg+wX8EO+bQACSidZi7WsnVuFvI/JXa7iLQE17MMf+7XHyHBqjZ
MMdRNUiKj0wCwhck61FTuEtRHqFJlfaHyfiOOkwSlFqXQEdzY/gLC5aeRpxRb+Wj
1G2Ss64yRI1a4uS24T5KIqZeFtRpkxz4SIU1p99AVFWcO4c1p6ApSSe1AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBBgUYz5dOywvSIkipVn4aFPvwq5MB8GA1UdIwQY
MBaAFCZlRyCCBq1UR0xp/MvtwkqlamLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTIt
ODIyZDE1OWE5N2FmLzEvRUdCUmpQbDA3TEM5SWlTS2xXZmhvVS1fQ3JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hOGY1NTMtZjUyYy00OTQ5LTk3ZTItODIyZDE1OWE5N2Fm
LzEvSm1WSElJSUdyVlJIVEduOHktM0NTcVZxWXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8RwMA0G
CSqGSIb3DQEBCwUAA4IBAQAAifT0ooZmTXAhmxGiQ0z/qSxowSbft8kpwk22kWS2
qYdP0hdCt4QJMycs2ZHLHHouKXLJdoHA3zt4W+umL/4tI7cwTQectQ7dU8zfSLhx
U0dSSaLrernkv4dlyhbRLiFusPQOPrxr5m8g1/GyjXvmAq8VEPvKhqNFRyPxpmOf
kv3FlnqwgbB2bquNn/KjtEic1kbobCumcmDHbxO30zacoXCm+/FdXJctNEY+UPEg
Ti12U8Z1iZAmniYl2TgHx95Sfa6+pwJCUBXFQJbyHVHXpzKWKk3lBHduhZigLP5t
JwDO2ShE2IBNnpzmUQyrERH1GrojZ4OcGfOOSjRfgN+j
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:04:39 2025 by rpki-client