Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/eKaWRxU48jVjME70Pg-sKw71ysM.roa
File: eKaWRxU48jVjME70Pg-sKw71ysM.roa (raw, json)
Hash identifier: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=
Subject key identifier: 78:A6:96:47:15:38:F2:35:63:30:4E:F4:3E:0F:AC:2B:0E:F5:CA:C3
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 0194266BB0971038F7B7B5A3131EB958295A
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/eKaWRxU48jVjME70Pg-sKw71ysM.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 45.143.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b0:97:10:38:f7:b7:b5:a3:13:1e:b9:58:29:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a696471538f23563304ef43e0fac2b0ef5cac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:f2:df:3d:04:d5:dc:29:68:a5:05:7e:32:
dc:c7:da:61:45:2a:7f:eb:fe:37:53:c5:eb:9a:99:
37:a8:df:d1:5b:eb:18:c9:f2:6d:71:a3:9b:9d:7b:
35:53:ff:49:a9:47:49:64:19:05:8d:fb:d5:a8:78:
1f:95:f2:ed:b8:fa:e4:b4:7b:da:71:a7:5a:45:2d:
76:d6:1c:9d:ae:87:ed:7b:ab:7d:dd:b1:36:c7:3f:
a5:82:c5:4a:02:1e:0a:84:ad:e7:fc:07:d8:3e:03:
6d:56:81:0c:37:a5:0e:35:dd:63:95:12:06:d7:75:
5f:2d:56:4b:1e:72:1c:1a:d1:27:d6:c4:33:14:7d:
b9:e9:e4:2d:52:83:a9:88:71:9e:19:7a:16:e8:b5:
cb:0f:87:b7:f2:de:11:56:c6:b6:f1:6a:7c:52:6b:
00:7a:c1:7b:bb:90:d3:bb:f7:fd:4d:5e:86:9b:12:
19:c7:97:24:8b:08:d2:87:29:01:72:b6:ed:04:c1:
4b:e7:40:1b:52:80:68:eb:e9:d7:cf:e1:7c:2e:aa:
12:e4:9f:66:68:0c:81:9d:96:24:aa:7b:14:3d:dc:
6a:bd:fc:c4:86:2b:7a:4f:b2:5f:a5:0a:56:98:3e:
df:13:af:72:9a:35:08:ec:98:35:27:ea:ff:9b:f9:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:96:47:15:38:F2:35:63:30:4E:F4:3E:0F:AC:2B:0E:F5:CA:C3
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/eKaWRxU48jVjME70Pg-sKw71ysM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3f:82:95:df:8e:20:80:f3:f4:68:25:9b:39:b2:7d:ff:74:
aa:28:78:44:e6:30:be:0f:35:cb:c7:71:1a:8c:4b:51:81:39:
cd:df:3a:8a:2d:f3:57:16:71:b3:a4:e8:4e:de:fa:15:8b:f8:
45:b6:8e:4f:fc:ab:8c:a9:99:df:1d:f8:1b:0f:cc:b9:5a:bd:
da:f0:e5:31:d5:60:45:a7:d9:3a:e8:1e:cd:1c:86:10:c3:64:
7d:57:f0:46:f4:6a:0d:f5:c0:0d:78:4e:0b:b6:d7:fd:7b:68:
97:7c:5e:9d:20:5e:69:33:a1:cc:1f:83:3e:28:5d:99:52:b0:
e3:ad:a3:20:2f:bf:13:91:7d:d1:59:ec:ef:18:fa:63:cf:5b:
c4:35:56:25:32:f0:da:71:c3:c6:7c:92:bf:1b:99:30:a6:8f:
bf:10:f1:3a:a9:ac:fb:d5:fb:31:6d:33:92:52:dc:2a:d2:84:
f2:0d:be:7d:ff:ee:ef:3a:f5:13:79:0a:62:ac:e1:f7:b7:1b:
cd:a8:62:a1:79:5d:42:37:6b:5b:1b:ec:1f:4b:1f:1c:a7:5c:
69:06:12:95:7e:41:0e:b3:74:f9:5a:0d:c7:8e:2c:e2:d2:c7:
5c:73:cb:57:f3:0e:26:f6:d7:1d:aa:e0:b6:10:0c:66:87:d7:
32:17:4b:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7CXEDj3t7WjEx65WClaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwMTAyMDk0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGE2OTY0NzE1MzhmMjM1NjMzMDRlZjQzZTBmYWMyYjBlZjVjYWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodHy3z0E1dwpaKUFfjLcx9phRSp/
6/43U8Xrmpk3qN/RW+sYyfJtcaObnXs1U/9JqUdJZBkFjfvVqHgflfLtuPrktHva
cadaRS121hydrofte6t93bE2xz+lgsVKAh4KhK3n/AfYPgNtVoEMN6UONd1jlRIG
13VfLVZLHnIcGtEn1sQzFH256eQtUoOpiHGeGXoW6LXLD4e38t4RVsa28Wp8UmsA
esF7u5DTu/f9TV6GmxIZx5ckiwjShykBcrbtBMFL50AbUoBo6+nXz+F8LqoS5J9m
aAyBnZYkqnsUPdxqvfzEhit6T7JfpQpWmD7fE69ymjUI7Jg1J+r/m/kW9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHimlkcVOPI1YzBO9D4PrCsO9crDMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvZUthV1J4VTQ4alZqTUU3MFBnLXNLdzcxeXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+3MA0G
CSqGSIb3DQEBCwUAA4IBAQCdP4KV344ggPP0aCWbObJ9/3SqKHhE5jC+DzXLx3Ea
jEtRgTnN3zqKLfNXFnGzpOhO3voVi/hFto5P/KuMqZnfHfgbD8y5Wr3a8OUx1WBF
p9k66B7NHIYQw2R9V/BG9GoN9cANeE4Lttf9e2iXfF6dIF5pM6HMH4M+KF2ZUrDj
raMgL78TkX3RWezvGPpjz1vENVYlMvDaccPGfJK/G5kwpo+/EPE6qaz71fsxbTOS
Utwq0oTyDb59/+7vOvUTeQpirOH3txvNqGKheV1CN2tbG+wfSx8cp1xpBhKVfkEO
s3T5Wg3Hjizi0sdcc8tX8w4m9tcdquC2EAxmh9cyF0sx
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:49:21 2025 by rpki-client