Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/eV3A69o5dbmXhkcbRscNdwCcmUw.roa
File: eV3A69o5dbmXhkcbRscNdwCcmUw.roa (raw, json)
Hash identifier: 1+RfsWC1iIY4uoQdBg4VWebMYcz8BpqPe7dmv43mNg4=
Subject key identifier: 79:5D:C0:EB:DA:39:75:B9:97:86:47:1B:46:C7:0D:77:00:9C:99:4C
Certificate issuer: /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial: 01942368DF2D4152C6978E94B09F7241D95E
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/eV3A69o5dbmXhkcbRscNdwCcmUw.roa
Signing time: Wed 01 Jan 2025 19:47:42 +0000
ROA not before: Wed 01 Jan 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 786
IP address blocks: 149.157.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:df:2d:41:52:c6:97:8e:94:b0:9f:72:41:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795dc0ebda3975b99786471b46c70d77009c994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:b0:9a:d0:00:28:30:bb:96:4d:0d:13:d7:
75:e5:b1:10:72:fa:09:e6:fc:56:7c:f5:0a:d6:55:
b5:a5:54:67:0a:5f:9f:cb:a3:f5:7c:97:fc:63:9b:
46:03:54:97:7e:42:c9:6a:6a:0e:df:f8:9a:89:b3:
ee:78:4b:b5:95:51:84:a5:ea:a1:05:48:6e:60:6b:
4e:b8:39:56:53:11:ed:25:ce:1f:12:2f:42:4f:00:
bf:4b:c0:97:44:78:72:f6:f8:8a:6e:b7:e5:87:96:
47:35:ef:70:2c:e5:09:40:14:21:bc:07:b7:05:5c:
bd:c1:b2:af:24:2d:84:c3:f6:bf:75:c7:59:94:00:
1b:64:dd:51:0b:80:d5:1e:7d:30:42:a2:5e:ec:45:
fe:b4:1f:dd:43:bb:7c:36:50:2f:48:f8:5e:c3:cb:
be:4e:e3:f7:9c:5f:93:f7:4e:11:a8:dc:75:91:84:
d8:5a:26:9d:c5:ce:cd:90:20:83:f4:a6:90:ac:63:
c3:a9:79:52:70:74:15:80:9f:ef:5c:71:5d:de:02:
6f:50:03:93:4a:27:96:fc:06:95:3b:e5:09:94:90:
13:91:be:f9:cf:b8:19:96:d0:ac:f6:91:be:13:f2:
fc:d2:d6:ea:69:6a:2e:94:b7:83:2f:84:be:05:28:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5D:C0:EB:DA:39:75:B9:97:86:47:1B:46:C7:0D:77:00:9C:99:4C
X509v3 Authority Key Identifier:
keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/eV3A69o5dbmXhkcbRscNdwCcmUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:0d:ac:c4:0d:84:ed:cd:ca:c6:ef:e7:56:ed:ca:e8:d9:09:
c8:bd:f6:18:eb:bd:62:b1:45:40:0a:3f:a6:da:b5:6f:0e:90:
be:be:0f:c4:db:a5:d0:59:d3:cf:6d:76:45:58:f7:18:0d:d1:
ae:a0:a9:06:7f:fa:61:1b:f8:75:73:f2:35:08:35:6d:cb:e4:
02:34:64:94:a1:77:fc:3d:98:f0:91:40:29:c5:c2:2f:d5:1e:
37:50:bb:e3:61:cb:03:9b:76:e5:b9:fd:af:85:61:5b:76:b7:
4e:a5:17:5a:1f:a9:01:bd:c8:83:9f:4d:de:bc:13:a8:53:ea:
ba:9c:b0:d6:56:e9:42:3b:5f:d6:ba:1d:57:0c:11:b5:a5:a4:
5c:20:22:8b:04:fa:60:5a:5e:e5:12:c4:b3:3f:71:bd:55:27:
9e:46:e5:c1:2d:7e:fb:b9:52:96:9c:27:9e:ba:36:46:44:85:
6e:eb:c0:d5:e3:39:e6:e6:61:eb:1d:db:e0:90:0d:95:10:6d:
3d:ec:56:48:ca:da:c2:97:7b:be:f3:48:94:ef:c4:c2:a2:84:
82:87:a2:be:07:1c:00:02:f3:44:0a:f1:60:af:ee:a6:24:3f:
31:42:b7:bf:5e:58:a1:9f:98:6c:f1:28:44:ca:9e:fb:ac:15:
75:4c:0c:ed
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZQjaN8tQVLGl46UsJ9yQdleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MGViZDA0NjlhNWM2OWMxMDk4OTcxY2FhYjM2ZmUwMzJl
Y2UzMTEwHhcNMjUwMTAxMTk0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTVkYzBlYmRhMzk3NWI5OTc4NjQ3MWI0NmM3MGQ3NzAwOWM5OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzmwmtAAKDC7lk0NE9d15bEQcvoJ
5vxWfPUK1lW1pVRnCl+fy6P1fJf8Y5tGA1SXfkLJamoO3/iaibPueEu1lVGEpeqh
BUhuYGtOuDlWUxHtJc4fEi9CTwC/S8CXRHhy9viKbrflh5ZHNe9wLOUJQBQhvAe3
BVy9wbKvJC2Ew/a/dcdZlAAbZN1RC4DVHn0wQqJe7EX+tB/dQ7t8NlAvSPhew8u+
TuP3nF+T904RqNx1kYTYWiadxc7NkCCD9KaQrGPDqXlScHQVgJ/vXHFd3gJvUAOT
SieW/AaVO+UJlJATkb75z7gZltCs9pG+E/L80tbqaWoulLeDL4S+BSg8bQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHldwOvaOXW5l4ZHG0bHDXcAnJlMMB8GA1UdIwQY
MBaAFJcOvQRppcacEJiXHKqzb+Ay7OMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQt
OTE0YjRiMzRmOTgxLzEvZVYzQTY5bzVkYm1YaGtjYlJzY05kd0NjbVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82MjAwMWEtYTMxMy00ZTMzLWJiMDQtOTE0YjRiMzRmOTgx
LzEvbHc2OUJHbWx4cHdRbUpjY3FyTnY0RExzNHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlZ0wDQYJ
KoZIhvcNAQELBQADggEBAFUNrMQNhO3Nysbv51btyujZCci99hjrvWKxRUAKP6ba
tW8OkL6+D8TbpdBZ089tdkVY9xgN0a6gqQZ/+mEb+HVz8jUINW3L5AI0ZJShd/w9
mPCRQCnFwi/VHjdQu+NhywObduW5/a+FYVt2t06lF1ofqQG9yIOfTd68E6hT6rqc
sNZW6UI7X9a6HVcMEbWlpFwgIosE+mBaXuUSxLM/cb1VJ55G5cEtfvu5UpacJ566
NkZEhW7rwNXjOebmYesd2+CQDZUQbT3sVkjK2sKXe77zSJTvxMKihIKHor4HHAAC
80QK8WCv7qYkPzFCt79eWKGfmGzxKETKnvusFXVMDO0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:16 2025 by rpki-client