Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/eC0FosjTUlbZcnWZVWIH359Lcd8.roa
File: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (raw, json)
Hash identifier: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=
Subject key identifier: 78:2D:05:A2:C8:D3:52:56:D9:72:75:99:55:62:07:DF:9F:4B:71:DF
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 019424B28589046CFBB439E2217355AA02DF
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/eC0FosjTUlbZcnWZVWIH359Lcd8.roa
Signing time: Thu 02 Jan 2025 01:47:46 +0000
ROA not before: Thu 02 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58282
IP address blocks: 192.66.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:85:89:04:6c:fb:b4:39:e2:21:73:55:aa:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=782d05a2c8d35256d9727599556207df9f4b71df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:c1:f0:71:7f:f2:14:3e:d5:d6:89:ff:75:
b2:5c:91:aa:80:d5:b1:c8:e9:89:2e:7f:74:9d:ba:
75:57:ce:5e:f7:87:46:a6:fc:b7:84:a5:70:47:8e:
75:68:b9:76:34:ce:9e:0c:bb:08:7a:85:5d:19:76:
4a:a8:86:e0:be:db:1a:7e:07:18:c4:9b:2c:1f:c8:
b3:eb:be:9b:b0:8e:ee:c9:11:23:63:95:c2:fc:5f:
5d:60:f9:a3:cc:5d:17:15:75:3d:d9:51:8b:ef:b8:
c7:65:fb:3d:6a:b8:09:22:f1:75:e7:26:ee:2b:3f:
e8:60:8e:6d:ee:91:4e:e4:8f:f9:eb:5b:b0:b4:d7:
27:61:e3:eb:90:cb:f3:5e:80:58:88:21:42:92:f8:
c7:55:cd:ce:75:75:4f:dd:69:e8:3a:b6:05:ae:19:
64:07:15:d0:62:7b:e6:ab:83:3e:7b:5a:0a:92:22:
c3:2e:c8:de:bd:33:02:e1:b5:f5:dd:f4:bb:d4:d8:
8c:bc:77:ca:c8:96:f6:11:80:c3:08:bf:55:c0:52:
f6:7a:50:91:86:1c:1f:3f:e0:13:bc:ef:6a:7e:46:
de:3f:08:51:17:e8:f3:4f:36:c8:6c:ef:f1:70:c1:
ab:59:cf:c0:52:7e:e2:85:c8:73:19:d8:e5:c3:07:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:05:A2:C8:D3:52:56:D9:72:75:99:55:62:07:DF:9F:4B:71:DF
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/eC0FosjTUlbZcnWZVWIH359Lcd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.66.62.0/24
Signature Algorithm: sha256WithRSAEncryption
44:68:af:8f:ba:a2:30:58:3a:1f:37:ce:da:fd:ac:a9:2c:97:
a3:c5:70:7b:61:be:fd:b7:2d:49:66:df:43:49:38:86:c7:89:
c4:37:d8:09:99:84:a2:1e:e7:20:70:e2:3e:6d:d0:90:ea:11:
80:83:61:bc:e9:a8:99:dd:ba:f7:64:79:d0:a8:d2:81:c8:d2:
63:64:07:59:2c:99:1e:89:6f:b6:dc:61:89:b3:5b:b6:9a:01:
58:08:3e:f1:c1:c8:0c:10:aa:e1:56:00:a0:a0:1f:01:67:1d:
6a:fb:96:30:a8:65:50:ad:f0:bf:48:6f:c7:cf:e7:4b:30:cc:
75:01:fd:dc:1b:55:cf:b6:34:26:8d:75:d8:c1:13:79:46:df:
b5:c8:2f:4f:05:0a:50:2c:b0:d3:8a:04:db:ab:c8:ed:b1:ab:
b9:eb:91:6b:3e:9a:ba:17:33:7f:a0:06:bd:ef:b9:e5:1d:fb:
dc:cd:a6:b1:6e:71:92:ef:c5:31:92:c9:47:0b:97:e9:24:58:
c1:46:b9:5d:d6:c8:15:2b:12:83:f6:b6:fa:0e:a4:9c:1c:5a:
78:ca:da:1f:82:60:34:bd:38:9e:2b:5a:26:38:db:ff:83:fa:
11:81:4b:34:5b:30:57:c5:21:c4:c6:46:6f:b8:1c:69:8e:b6:
ca:9e:a4:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksoWJBGz7tDniIXNVqgLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTVjM2VmMDBjZmZlY2UyZjcxYjYxOTkxYzZjNmQzZGE0
OWMxMTAwHhcNMjUwMTAyMDE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODJkMDVhMmM4ZDM1MjU2ZDk3Mjc1OTk1NTYyMDdkZjlmNGI3MWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxrB8HF/8hQ+1daJ/3WyXJGqgNWx
yOmJLn90nbp1V85e94dGpvy3hKVwR451aLl2NM6eDLsIeoVdGXZKqIbgvtsafgcY
xJssH8iz676bsI7uyREjY5XC/F9dYPmjzF0XFXU92VGL77jHZfs9argJIvF15ybu
Kz/oYI5t7pFO5I/561uwtNcnYePrkMvzXoBYiCFCkvjHVc3OdXVP3WnoOrYFrhlk
BxXQYnvmq4M+e1oKkiLDLsjevTMC4bX13fS71NiMvHfKyJb2EYDDCL9VwFL2elCR
hhwfP+ATvO9qfkbePwhRF+jzTzbIbO/xcMGrWc/AUn7ihchzGdjlwwczVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgtBaLI01JW2XJ1mVViB9+fS3HfMB8GA1UdIwQY
MBaAFEKVw+8Az/7OL3G2GZHGxtPaScEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDIt
OTY5ZjJhMDBlZGUwLzEvZUMwRm9zalRVbGJaY25XWlZXSUgzNTlMY2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDItOTY5ZjJhMDBlZGUw
LzEvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEI+MA0G
CSqGSIb3DQEBCwUAA4IBAQBEaK+PuqIwWDofN87a/aypLJejxXB7Yb79ty1JZt9D
STiGx4nEN9gJmYSiHucgcOI+bdCQ6hGAg2G86aiZ3br3ZHnQqNKByNJjZAdZLJke
iW+23GGJs1u2mgFYCD7xwcgMEKrhVgCgoB8BZx1q+5YwqGVQrfC/SG/Hz+dLMMx1
Af3cG1XPtjQmjXXYwRN5Rt+1yC9PBQpQLLDTigTbq8jtsau565FrPpq6FzN/oAa9
77nlHfvczaaxbnGS78UxkslHC5fpJFjBRrld1sgVKxKD9rb6DqScHFp4ytofgmA0
vTieK1omONv/g/oRgUs0WzBXxSHExkZvuBxpjrbKnqTU
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:55 2025 by rpki-client