Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/e8yOi_zjBd2PptdyDsyc4j2wCEY.roa
File: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (raw, json)
Hash identifier: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=
Subject key identifier: 7B:CC:8E:8B:FC:E3:05:DD:8F:A6:D7:72:0E:CC:9C:E2:3D:B0:08:46
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 019422FC305A56DAE572178C73902F37ED47
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/e8yOi_zjBd2PptdyDsyc4j2wCEY.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 193.25.48.0/24 maxlen: 24
193.25.49.0/24 maxlen: 24
193.25.50.0/24 maxlen: 24
193.25.51.0/24 maxlen: 24
193.25.52.0/24 maxlen: 24
193.25.53.0/24 maxlen: 24
193.25.54.0/24 maxlen: 24
193.25.55.0/24 maxlen: 24
193.25.56.0/24 maxlen: 24
193.25.57.0/24 maxlen: 24
193.25.58.0/24 maxlen: 24
193.25.59.0/24 maxlen: 24
193.25.60.0/24 maxlen: 24
193.25.61.0/24 maxlen: 24
193.25.62.0/24 maxlen: 24
193.25.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:30:5a:56:da:e5:72:17:8c:73:90:2f:37:ed:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bcc8e8bfce305dd8fa6d7720ecc9ce23db00846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:ef:d9:c7:94:6e:a8:20:0c:26:93:14:a4:
a3:28:3d:af:ae:61:ba:f4:e6:20:e5:03:b3:8b:e5:
09:f3:24:0f:d0:ea:5d:fb:cc:88:f4:71:b1:dd:c7:
81:ba:65:c3:6c:c8:fb:95:b8:df:2c:77:81:4e:8e:
33:88:8a:9c:04:04:0b:30:b6:98:5f:e0:3d:73:ef:
ee:f0:e7:e5:2b:59:2e:08:c3:b4:c1:0d:4c:58:fd:
a4:fe:ef:00:ac:41:bb:83:04:68:78:a9:60:46:ea:
2e:19:29:38:07:e3:06:54:cd:15:41:fa:43:29:bf:
00:30:79:13:7d:22:9b:8f:c0:ff:48:18:23:a7:a7:
ce:db:52:48:23:0e:24:75:d6:92:6d:13:96:8c:78:
f0:98:51:91:7c:43:6b:3c:43:4b:29:3f:b0:1b:6f:
35:b5:59:54:12:aa:18:a0:6c:1e:c0:3f:0c:8e:bf:
e6:16:87:e7:7c:4d:6d:34:51:77:ca:e0:51:e6:a0:
eb:9d:3f:f9:5f:01:71:81:6e:50:bd:f0:92:4b:8a:
00:84:f2:44:75:ab:0c:32:1d:3a:7f:f9:81:b6:84:
0d:62:cc:06:8f:f8:e1:ab:a9:a6:cc:eb:a1:3d:28:
d9:64:40:e7:f6:9e:f2:87:d0:de:c7:20:c2:70:26:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CC:8E:8B:FC:E3:05:DD:8F:A6:D7:72:0E:CC:9C:E2:3D:B0:08:46
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/e8yOi_zjBd2PptdyDsyc4j2wCEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.48.0/20
Signature Algorithm: sha256WithRSAEncryption
20:55:ef:35:01:9f:18:ed:70:56:53:b7:d5:8d:c7:9d:75:ba:
de:58:c6:58:a3:07:c6:0f:a3:32:1a:9b:f3:a0:5d:77:e7:f0:
da:4f:d6:8b:16:2b:db:a5:5d:ed:9e:3b:1e:d0:ce:cb:e6:12:
49:6b:e5:96:a9:71:47:41:1b:b5:dd:80:43:83:88:86:aa:a9:
d3:3b:65:8e:72:92:fb:c6:bb:bc:5b:7a:6a:6f:5c:81:55:ad:
49:b3:a3:1d:15:6a:2d:b1:72:99:8f:c0:d6:d8:1f:84:50:9f:
08:ea:14:e5:1e:2c:79:11:7e:d7:3e:b5:62:2d:81:a4:e0:bd:
eb:e5:08:8f:46:04:1c:b0:ef:88:64:24:83:21:6c:6b:de:f6:
f1:31:be:61:a4:fb:4f:0a:b6:82:b7:73:a1:c3:44:74:b3:c1:
b2:5b:03:51:7f:a3:04:0d:4a:40:72:6f:9e:c0:3d:f5:37:96:
51:59:f1:96:96:19:f2:74:90:c2:05:99:40:e6:51:c7:2d:6a:
03:35:35:f0:fc:1e:ad:e1:1c:68:ca:99:a6:f9:e4:b1:76:46:
85:44:d2:8e:57:01:76:f3:bd:48:31:8b:ee:24:7d:5e:38:00:
33:55:19:9f:05:7a:ba:08:c1:31:f2:7d:ee:ac:83:5e:93:bd:
28:c8:81:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/DBaVtrlcheMc5AvN+1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmNjOGU4YmZjZTMwNWRkOGZhNmQ3NzIwZWNjOWNlMjNkYjAwODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0/v2ceUbqggDCaTFKSjKD2vrmG6
9OYg5QOzi+UJ8yQP0Opd+8yI9HGx3ceBumXDbMj7lbjfLHeBTo4ziIqcBAQLMLaY
X+A9c+/u8OflK1kuCMO0wQ1MWP2k/u8ArEG7gwRoeKlgRuouGSk4B+MGVM0VQfpD
Kb8AMHkTfSKbj8D/SBgjp6fO21JIIw4kddaSbROWjHjwmFGRfENrPENLKT+wG281
tVlUEqoYoGwewD8Mjr/mFofnfE1tNFF3yuBR5qDrnT/5XwFxgW5QvfCSS4oAhPJE
dasMMh06f/mBtoQNYswGj/jhq6mmzOuhPSjZZEDn9p7yh9DexyDCcCbLzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvMjov84wXdj6bXcg7MnOI9sAhGMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvZTh5T2lfempCZDJQcHRkeURzeWM0ajJ3Q0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwRkwMA0G
CSqGSIb3DQEBCwUAA4IBAQAgVe81AZ8Y7XBWU7fVjceddbreWMZYowfGD6MyGpvz
oF135/DaT9aLFivbpV3tnjse0M7L5hJJa+WWqXFHQRu13YBDg4iGqqnTO2WOcpL7
xru8W3pqb1yBVa1Js6MdFWotsXKZj8DW2B+EUJ8I6hTlHix5EX7XPrViLYGk4L3r
5QiPRgQcsO+IZCSDIWxr3vbxMb5hpPtPCraCt3Ohw0R0s8GyWwNRf6MEDUpAcm+e
wD31N5ZRWfGWlhnydJDCBZlA5lHHLWoDNTXw/B6t4Rxoypmm+eSxdkaFRNKOVwF2
871IMYvuJH1eOAAzVRmfBXq6CMEx8n3urINek70oyIES
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:56:45 2025 by rpki-client