Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EzN1TdNi38i-9-Ce4fNPUeEMdQU.roa
File: EzN1TdNi38i-9-Ce4fNPUeEMdQU.roa (raw, json)
Hash identifier: 74tlsBVtr2o6tt7zrByD7q7aZm5rezgXwOWegSY7MDY=
Subject key identifier: 13:33:75:4D:D3:62:DF:C8:BE:F7:E0:9E:E1:F3:4F:51:E1:0C:75:05
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D40A7658E4C15E356F91CAF123E8E
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EzN1TdNi38i-9-Ce4fNPUeEMdQU.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211323
IP address blocks: 2a0e:aa07:e01e::/48 maxlen: 48
2a0e:aa07:f080::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:40:a7:65:8e:4c:15:e3:56:f9:1c:af:12:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1333754dd362dfc8bef7e09ee1f34f51e10c7505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:04:69:58:13:04:90:b4:91:25:16:04:47:
59:a7:fa:e6:ff:36:ab:ce:36:5c:f6:9d:71:72:11:
80:f4:26:cb:b0:41:67:91:e9:b0:36:05:2f:bb:0f:
de:da:d1:29:a4:fc:d8:07:b1:db:7d:a0:a8:fb:41:
50:a8:fa:bb:e3:8a:fa:cc:27:60:42:96:bc:d1:15:
8a:93:20:cc:7d:45:4b:52:26:fe:57:a5:68:c9:a4:
12:8d:30:36:36:1f:d2:86:b8:ff:43:52:53:b0:a2:
2c:a0:a5:71:ca:1b:da:d3:35:75:2b:38:49:c3:05:
f1:bf:d2:e8:32:aa:86:04:a0:b2:1f:74:a0:43:62:
d6:24:6b:14:c7:7a:14:0e:49:d0:cd:e9:ab:58:ec:
79:32:97:19:a7:84:04:97:39:bf:1a:5e:33:aa:34:
21:ba:7d:f0:27:98:1a:3f:c2:94:23:48:ab:cf:e0:
a8:08:84:c0:11:d4:22:3e:5d:9a:59:d1:cd:0c:22:
67:c3:38:9f:96:06:77:1c:cb:b5:05:59:4a:12:cc:
6a:47:80:eb:62:00:0f:a5:85:44:9c:0f:08:9a:0b:
26:7d:f0:89:5a:64:72:f0:52:0e:cd:18:1f:be:73:
c9:18:09:16:c8:90:f8:84:fa:40:92:c7:06:a6:58:
a3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:75:4D:D3:62:DF:C8:BE:F7:E0:9E:E1:F3:4F:51:E1:0C:75:05
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/EzN1TdNi38i-9-Ce4fNPUeEMdQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01e::/48
2a0e:aa07:f080::/44
Signature Algorithm: sha256WithRSAEncryption
31:86:7c:a5:01:08:78:a5:68:40:66:50:82:38:b2:95:22:fd:
a5:d5:11:0e:77:81:e2:84:2b:3e:35:65:9b:29:e0:de:18:f9:
7e:be:1a:d1:33:80:4a:c3:24:97:03:82:68:fe:52:16:13:71:
36:4a:13:f5:19:6f:9e:4c:82:a3:0b:1d:e6:b5:a4:39:c1:ef:
2f:03:ae:71:42:69:89:3a:4a:27:e6:be:74:50:f1:2e:38:7f:
e0:8c:93:b0:8d:07:50:73:bb:8b:fc:7f:29:78:21:31:71:f9:
44:d4:2a:69:3d:5f:99:41:92:21:49:9c:7a:3f:4b:70:f5:20:
c5:c5:11:c2:5a:02:42:25:99:19:f9:e5:23:bf:7f:bb:f6:43:
33:34:8f:34:89:9c:da:7e:5e:b2:96:42:70:e2:14:40:e2:97:
52:a0:ce:ef:2d:ec:00:98:04:37:fd:39:17:9c:ba:71:8d:f9:
26:ad:37:8e:a0:e3:2b:c0:21:28:37:6f:d6:0b:46:7f:3d:0c:
f6:f6:ec:b5:8b:7d:96:04:26:5e:95:25:a4:03:7d:6e:a5:21:
6b:79:23:b4:80:9b:cd:a1:4e:90:73:74:61:90:91:72:70:72:
35:98:3b:76:26:eb:6e:90:fb:a4:9b:d9:ed:d0:7b:66:87:50:
2a:25:50:76
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzCbUCnZY5MFeNW+RyvEj6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzMzNzU0ZGQzNjJkZmM4YmVmN2UwOWVlMWYzNGY1MWUxMGM3NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSMEaVgTBJC0kSUWBEdZp/rm/zar
zjZc9p1xchGA9CbLsEFnkemwNgUvuw/e2tEppPzYB7HbfaCo+0FQqPq744r6zCdg
Qpa80RWKkyDMfUVLUib+V6VoyaQSjTA2Nh/Shrj/Q1JTsKIsoKVxyhva0zV1KzhJ
wwXxv9LoMqqGBKCyH3SgQ2LWJGsUx3oUDknQzemrWOx5MpcZp4QElzm/Gl4zqjQh
un3wJ5gaP8KUI0irz+CoCITAEdQiPl2aWdHNDCJnwziflgZ3HMu1BVlKEsxqR4Dr
YgAPpYVEnA8ImgsmffCJWmRy8FIOzRgfvnPJGAkWyJD4hPpAkscGplijUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBMzdU3TYt/IvvfgnuHzT1HhDHUFMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvRXpOMVRkTmkzOGktOS1DZTRmTlBVZUVNZFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg6qB+Ae
AwcEKg6qB/CAMA0GCSqGSIb3DQEBCwUAA4IBAQAxhnylAQh4pWhAZlCCOLKVIv2l
1REOd4HihCs+NWWbKeDeGPl+vhrRM4BKwySXA4Jo/lIWE3E2ShP1GW+eTIKjCx3m
taQ5we8vA65xQmmJOkon5r50UPEuOH/gjJOwjQdQc7uL/H8peCExcflE1CppPV+Z
QZIhSZx6P0tw9SDFxRHCWgJCJZkZ+eUjv3+79kMzNI80iZzafl6ylkJw4hRA4pdS
oM7vLewAmAQ3/TkXnLpxjfkmrTeOoOMrwCEoN2/WC0Z/PQz29uy1i32WBCZelSWk
A31upSFreSO0gJvNoU6Qc3RhkJFycHI1mDt2JutukPukm9nt0Htmh1AqJVB2
-----END CERTIFICATE-----
Generated at Fri May 3 15:54:57 2024 by rpki-client on console-fra.rpki-client.org