Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eW2feC_fvyD5GGty5cazOwICcpo.roa
File: eW2feC_fvyD5GGty5cazOwICcpo.roa (raw, json)
Hash identifier: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=
Subject key identifier: 79:6D:9F:78:2F:DF:BF:20:F9:18:6B:72:E5:C6:B3:3B:02:02:72:9A
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019424B2A23D96E01578B6F0B354095554B6
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eW2feC_fvyD5GGty5cazOwICcpo.roa
Signing time: Thu 02 Jan 2025 01:47:54 +0000
ROA not before: Thu 02 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209336
IP address blocks: 217.180.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a2:3d:96:e0:15:78:b6:f0:b3:54:09:55:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=796d9f782fdfbf20f9186b72e5c6b33b0202729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:7b:67:e0:ef:17:89:eb:4e:8f:a8:f1:fa:
cf:a6:69:85:4b:6e:13:d2:06:30:a9:47:52:35:7f:
8f:13:74:eb:47:6e:07:63:6d:f9:ed:9c:7f:6f:14:
d6:ef:1c:b3:e1:1e:8b:06:80:4f:ae:cf:00:48:28:
ea:67:01:71:4c:f0:d5:25:49:8b:5a:d4:44:f7:6d:
a1:84:60:a2:5c:af:c6:51:47:e1:a5:8f:2d:bf:0e:
cb:89:c3:6e:89:65:60:38:f9:19:17:18:12:8c:24:
bf:db:1a:71:86:6c:c4:6f:f5:54:14:c1:36:1f:3e:
8c:66:20:ef:11:90:75:3d:20:c1:d1:13:53:82:bb:
82:97:f4:b5:b1:37:58:ec:9c:f7:ff:fc:d0:08:6b:
bd:74:cd:60:ad:2a:9d:75:bc:89:29:c4:38:de:fb:
e4:40:9e:43:5c:8e:85:c7:0a:a4:01:2e:de:2a:03:
c1:65:bd:48:a0:c1:97:12:7c:c7:76:35:62:8d:af:
11:55:27:d8:e0:01:8b:b9:12:42:b9:58:5d:cd:53:
2e:7f:70:9d:70:cd:d2:0c:b9:c5:c5:93:ee:c3:0a:
3e:c6:20:de:f6:57:a5:6d:a7:57:9d:f8:90:ae:b7:
f7:d8:50:b2:4b:ab:cb:f3:65:65:2b:3b:46:d5:6f:
94:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:9F:78:2F:DF:BF:20:F9:18:6B:72:E5:C6:B3:3B:02:02:72:9A
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/eW2feC_fvyD5GGty5cazOwICcpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e9:0e:80:4a:53:27:ad:34:81:e4:01:30:9a:16:06:a7:58:
af:5a:97:31:f6:e5:a9:42:90:c1:e7:7e:eb:3e:2b:b8:c4:08:
94:50:17:3c:7f:1b:6d:79:25:bb:44:9a:e6:e7:e5:63:95:50:
17:9f:45:40:92:a8:3b:7f:01:ea:81:d4:72:3e:ff:5d:87:74:
0d:21:d4:3f:5d:c6:a7:15:79:ac:bd:6e:6f:6a:6b:6e:a5:06:
48:87:fb:49:71:90:84:ac:a8:09:85:37:94:e4:3e:c8:2f:d3:
44:49:2d:0d:48:82:00:bf:6e:e4:fe:8f:52:22:7c:00:4d:cc:
fc:c5:1e:b5:f9:1e:2b:a7:5a:95:5c:69:c1:9e:eb:25:ce:0c:
c6:cc:3b:6a:35:a0:19:ed:38:8d:b7:1d:33:f6:61:f1:e5:9a:
cb:a2:42:75:a9:31:43:b4:da:3a:5b:ad:d2:81:65:c2:2a:ca:
1a:cb:39:96:97:3b:bd:4b:19:2d:19:49:23:ff:76:9a:f1:07:
85:6f:25:ff:1c:fe:8d:bf:46:9f:ba:cb:7d:be:32:47:d7:59:
6c:3a:83:3c:06:6b:58:d6:cf:f3:bb:c0:72:de:5b:c2:dd:fe:
b0:49:d5:fc:aa:62:95:ea:7d:04:93:f7:30:1e:87:70:63:4c:
a5:11:2e:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksqI9luAVeLbws1QJVVS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy
ZGE3NGQwHhcNMjUwMTAyMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTZkOWY3ODJmZGZiZjIwZjkxODZiNzJlNWM2YjMzYjAyMDI3MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZ7Z+DvF4nrTo+o8frPpmmFS24T
0gYwqUdSNX+PE3TrR24HY2357Zx/bxTW7xyz4R6LBoBPrs8ASCjqZwFxTPDVJUmL
WtRE922hhGCiXK/GUUfhpY8tvw7LicNuiWVgOPkZFxgSjCS/2xpxhmzEb/VUFME2
Hz6MZiDvEZB1PSDB0RNTgruCl/S1sTdY7Jz3//zQCGu9dM1grSqddbyJKcQ43vvk
QJ5DXI6FxwqkAS7eKgPBZb1IoMGXEnzHdjVija8RVSfY4AGLuRJCuVhdzVMuf3Cd
cM3SDLnFxZPuwwo+xiDe9lelbadXnfiQrrf32FCyS6vL82VlKztG1W+U7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHltn3gv378g+RhrcuXGszsCAnKaMB8GA1UdIwQY
MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt
YzE5OTQyNzM3ZTZkLzEvZVcyZmVDX2Z2eUQ1R0d0eTVjYXpPd0lDY3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk
LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2bQ8MA0G
CSqGSIb3DQEBCwUAA4IBAQAd6Q6ASlMnrTSB5AEwmhYGp1ivWpcx9uWpQpDB537r
Piu4xAiUUBc8fxtteSW7RJrm5+VjlVAXn0VAkqg7fwHqgdRyPv9dh3QNIdQ/Xcan
FXmsvW5vamtupQZIh/tJcZCErKgJhTeU5D7IL9NESS0NSIIAv27k/o9SInwATcz8
xR61+R4rp1qVXGnBnuslzgzGzDtqNaAZ7TiNtx0z9mHx5ZrLokJ1qTFDtNo6W63S
gWXCKsoayzmWlzu9SxktGUkj/3aa8QeFbyX/HP6Nv0afust9vjJH11lsOoM8BmtY
1s/zu8By3lvC3f6wSdX8qmKV6n0Ek/cwHodwY0ylES6y
-----END CERTIFICATE-----
Generated at Wed Feb 5 14:41:22 2025 by rpki-client