Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ezqaab0bwqdf90_7IOfbG11wU3k.roa
File: ezqaab0bwqdf90_7IOfbG11wU3k.roa (raw, json)
Hash identifier: HE2lEmzfb3kBTM0wrU/8x8HA3I46Fx9OokRBflb5ojs=
Subject key identifier: 7B:3A:9A:69:BD:1B:C2:A7:5F:F7:4F:FB:20:E7:DB:1B:5D:70:53:79
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 018CC56E3BBAF32E911560875DA05B38E988
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ezqaab0bwqdf90_7IOfbG11wU3k.roa
Signing time: Mon 01 Jan 2024 14:29:44 +0000
ROA not before: Mon 01 Jan 2024 14:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50590
IP address blocks: 93.125.1.0/24 maxlen: 24
217.21.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3b:ba:f3:2e:91:15:60:87:5d:a0:5b:38:e9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 1 14:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3a9a69bd1bc2a75ff74ffb20e7db1b5d705379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:ab:bf:3b:f3:8f:54:c8:d9:11:1f:a6:5d:
37:0e:45:e1:48:8c:eb:17:79:fa:bc:30:40:71:16:
68:02:00:4f:b1:a0:21:e8:44:de:1f:69:23:b7:2c:
e0:73:48:30:b0:b7:1a:ff:9b:eb:47:81:90:06:2a:
92:3f:19:b3:c1:27:89:e2:39:57:a6:97:5d:63:1e:
d4:26:64:f5:ba:7e:d9:77:93:a9:b7:f3:40:0c:f9:
76:c8:6e:02:1f:3a:ac:98:fc:22:cb:86:bb:fe:53:
39:8a:00:f4:07:09:0e:f9:2c:84:dc:ea:24:72:36:
6a:b6:14:28:b2:3b:2b:23:22:d4:d3:cc:c7:12:9d:
f2:b7:4c:33:c9:c0:d1:4a:ad:1e:e8:bd:cd:17:1c:
db:07:63:2e:d8:88:5d:f4:98:7c:4a:e8:af:fe:31:
be:03:42:ca:eb:3a:b9:7d:fd:ca:ef:42:17:32:18:
90:25:6e:8a:bc:db:5e:ef:29:28:4c:35:b1:aa:d6:
10:4d:ac:46:d0:c5:2a:c9:f3:dd:50:3b:13:04:64:
e6:6f:89:00:bc:3a:c0:f6:c3:74:df:19:dc:78:93:
90:f2:5b:68:15:49:bf:d9:3f:2a:5e:a5:cd:ed:bc:
7a:7b:1e:6f:98:5f:a2:99:50:67:68:17:55:b3:83:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3A:9A:69:BD:1B:C2:A7:5F:F7:4F:FB:20:E7:DB:1B:5D:70:53:79
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/ezqaab0bwqdf90_7IOfbG11wU3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.1.0/24
217.21.53.0/24
Signature Algorithm: sha256WithRSAEncryption
53:33:aa:c9:2a:38:bd:07:71:62:be:ae:3c:90:cb:5f:18:ff:
d3:64:47:39:66:0d:f2:59:1c:07:b3:d2:42:6d:6e:df:36:74:
46:9d:14:22:6d:04:47:22:71:b4:0d:f0:1f:07:9e:50:a3:cb:
dc:42:32:2d:27:f7:89:b3:81:80:3f:fc:62:3d:d6:54:71:51:
20:51:e0:69:16:33:e8:9a:92:b7:05:ae:de:52:5a:6e:ea:9a:
9c:79:d8:29:d8:c2:39:19:c5:c3:94:32:d4:f5:dd:a9:e0:7b:
71:f9:60:07:a3:e3:b2:b8:25:67:d8:c7:19:c5:c3:7a:49:4a:
29:6b:1c:fb:86:e8:03:90:79:22:2e:1c:90:68:45:df:fd:0f:
94:2a:91:28:1b:ad:86:3b:b5:c5:cd:bb:20:5f:d2:25:60:77:
5b:6d:0a:2a:05:9d:56:fb:f8:1f:31:d3:a7:d3:eb:9a:03:0c:
30:19:83:da:7e:19:7d:4c:39:17:2b:1a:31:7a:6c:d0:ec:d2:
49:d5:d4:e2:7a:06:70:8a:e0:65:08:77:c9:59:1a:e7:da:8f:
72:2f:a8:11:5a:83:2b:82:4c:cb:74:0d:19:39:70:28:ca:38:
2e:61:7d:38:40:f7:91:14:c6:92:ca:00:54:92:96:79:fa:49:
19:1c:d6:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbju68y6RFWCHXaBbOOmIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj
ZmViYzEwHhcNMjQwMTAxMTQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjNhOWE2OWJkMWJjMmE3NWZmNzRmZmIyMGU3ZGIxYjVkNzA1Mzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Crvzvzj1TI2REfpl03DkXhSIzr
F3n6vDBAcRZoAgBPsaAh6ETeH2kjtyzgc0gwsLca/5vrR4GQBiqSPxmzwSeJ4jlX
ppddYx7UJmT1un7Zd5Opt/NADPl2yG4CHzqsmPwiy4a7/lM5igD0BwkO+SyE3Ook
cjZqthQosjsrIyLU08zHEp3yt0wzycDRSq0e6L3NFxzbB2Mu2Ihd9Jh8Suiv/jG+
A0LK6zq5ff3K70IXMhiQJW6KvNte7ykoTDWxqtYQTaxG0MUqyfPdUDsTBGTmb4kA
vDrA9sN03xnceJOQ8ltoFUm/2T8qXqXN7bx6ex5vmF+imVBnaBdVs4PTEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHs6mmm9G8KnX/dP+yDn2xtdcFN5MB8GA1UdIwQY
MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct
YWFiMGU0MTRjYzYzLzEvZXpxYWFiMGJ3cWRmOTBfN0lPZmJHMTF3VTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz
LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXX0BAwQA
2RU1MA0GCSqGSIb3DQEBCwUAA4IBAQBTM6rJKji9B3Fivq48kMtfGP/TZEc5Zg3y
WRwHs9JCbW7fNnRGnRQibQRHInG0DfAfB55Qo8vcQjItJ/eJs4GAP/xiPdZUcVEg
UeBpFjPompK3Ba7eUlpu6pqcedgp2MI5GcXDlDLU9d2p4Htx+WAHo+OyuCVn2McZ
xcN6SUopaxz7hugDkHkiLhyQaEXf/Q+UKpEoG62GO7XFzbsgX9IlYHdbbQoqBZ1W
+/gfMdOn0+uaAwwwGYPafhl9TDkXKxoxemzQ7NJJ1dTiegZwiuBlCHfJWRrn2o9y
L6gRWoMrgkzLdA0ZOXAoyjguYX04QPeRFMaSygBUkpZ5+kkZHNak
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:46:00 2024 by rpki-client on console-ams.rpki-client.org