Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa
File: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (raw, json)
Hash identifier: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=
Subject key identifier: 11:5F:48:EB:4E:DB:93:BC:8A:4F:6F:D9:18:63:F3:A4:AF:D3:DC:AC
Certificate issuer: /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial: 01942444D62A8A524D3B198F61CD19DF3BC2
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa
Signing time: Wed 01 Jan 2025 23:47:58 +0000
ROA not before: Wed 01 Jan 2025 23:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209123
IP address blocks: 2.58.88.0/22 maxlen: 24
2a09:e340::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d6:2a:8a:52:4d:3b:19:8f:61:cd:19:df:3b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115f48eb4edb93bc8a4f6fd91863f3a4afd3dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b2:d7:b9:0a:e4:b8:c1:7b:ac:bf:d9:db:be:
ac:e3:d9:ed:11:88:1e:af:ca:8c:b3:a9:31:e9:d7:
2c:61:9d:1d:9d:79:ae:8a:3d:c5:43:f0:fb:6b:b3:
69:16:80:4c:e4:65:1d:08:a9:cc:6a:88:f5:ea:cd:
a6:b5:8a:e1:f0:ca:55:23:bb:a9:70:fc:f1:1e:25:
e6:f2:4b:8c:2f:a6:cd:f4:80:22:b9:e3:78:7f:d4:
7f:c4:b1:a8:0e:ed:81:32:bc:30:fb:06:ac:7b:62:
69:59:8e:f6:45:8b:5c:57:9e:7e:a1:82:04:af:9f:
57:18:e5:6c:9a:d7:33:5b:4d:50:b1:fd:7b:9b:e1:
45:27:5c:27:9f:80:57:45:7c:8c:9d:2a:6d:2d:c3:
f4:b4:10:1f:82:e7:53:ca:dd:cc:04:e8:e3:39:f3:
c5:0a:6a:5b:d8:57:c9:ec:bd:12:5a:e9:e3:82:e0:
4e:64:87:3a:ef:79:92:84:9f:c5:35:3c:e1:c6:ec:
67:4e:3f:bb:5b:4d:f3:94:f5:69:3f:60:60:32:c0:
d9:a2:bf:8f:34:03:b7:19:ee:88:c9:6b:b9:a8:1d:
f2:6d:6d:c5:dd:07:5a:15:1d:d7:84:2c:15:52:07:
a1:25:b2:ea:9c:45:00:bd:00:61:8c:aa:11:75:a8:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:48:EB:4E:DB:93:BC:8A:4F:6F:D9:18:63:F3:A4:AF:D3:DC:AC
X509v3 Authority Key Identifier:
keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.88.0/22
IPv6:
2a09:e340::/29
Signature Algorithm: sha256WithRSAEncryption
a7:74:ed:f1:7e:06:c2:df:58:b0:f0:56:4b:6f:ff:92:c8:79:
7b:d4:ee:28:5d:4b:d8:19:78:e0:a7:af:c1:ed:34:7f:ed:11:
30:68:3c:8e:34:fc:56:85:97:ba:5b:e6:f3:69:01:85:93:f5:
f9:6a:0e:a0:96:d1:20:63:e6:9c:7b:66:af:b7:5d:9f:6a:11:
2a:c2:be:a4:ce:2f:41:2d:22:0c:e2:19:2f:4d:36:5c:33:7a:
e6:85:38:20:a6:0a:ce:45:bc:66:85:d2:41:1f:5b:4e:8e:76:
b6:01:42:d9:fe:cd:5d:47:2f:a2:9f:28:a6:89:8d:77:5b:3c:
82:3d:a4:39:bd:05:b1:df:fb:41:6d:0f:3b:7b:5c:eb:9d:fd:
39:de:bd:f9:2a:e7:01:98:2d:52:05:67:ee:c9:b7:13:e8:fe:
43:48:e0:e2:92:ef:14:47:b8:a6:7f:77:46:02:44:61:a3:11:
d1:ee:32:1c:56:ae:37:00:c0:61:86:c7:75:fb:a9:52:5a:43:
d3:e1:45:0d:4c:8b:a8:16:e8:ca:d7:bc:33:e0:9e:d1:90:bf:
d8:68:b5:83:51:f5:2e:c1:ab:f5:80:ff:f3:c4:82:f1:f3:1c:
4b:2c:dc:2d:4f:89:e7:66:9e:18:1b:f6:27:01:4b:05:7b:af:
1b:be:e8:06
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRNYqilJNOxmPYc0Z3zvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYTMzM2QxM2RjOTE1ZjRmYmZiNjFiMjVhNDg3N2U5MTM4
ZTdmMWQwHhcNMjUwMTAxMjM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTVmNDhlYjRlZGI5M2JjOGE0ZjZmZDkxODYzZjNhNGFmZDNkY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrLXuQrkuMF7rL/Z276s49ntEYge
r8qMs6kx6dcsYZ0dnXmuij3FQ/D7a7NpFoBM5GUdCKnMaoj16s2mtYrh8MpVI7up
cPzxHiXm8kuML6bN9IAiueN4f9R/xLGoDu2BMrww+wase2JpWY72RYtcV55+oYIE
r59XGOVsmtczW01Qsf17m+FFJ1wnn4BXRXyMnSptLcP0tBAfgudTyt3MBOjjOfPF
Cmpb2FfJ7L0SWunjguBOZIc673mShJ/FNTzhxuxnTj+7W03zlPVpP2BgMsDZor+P
NAO3Ge6IyWu5qB3ybW3F3QdaFR3XhCwVUgehJbLqnEUAvQBhjKoRdah/VwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBFfSOtO25O8ik9v2Rhj86Sv09ysMB8GA1UdIwQY
MBaAFICjM9E9yRX0+/thslpId+kTjn8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2Ut
NGNhMzU0MzBkY2EzLzEvRVY5STYwN2JrN3lLVDJfWkdHUHpwS19UM0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xMzliMzgtNWIyNC00MDdkLWIxN2UtNGNhMzU0MzBkY2Ez
LzEvZ0tNejBUM0pGZlQ3LTJHeVdraDM2Uk9PZngwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCAjpYMA0E
AgACMAcDBQMqCeNAMA0GCSqGSIb3DQEBCwUAA4IBAQCndO3xfgbC31iw8FZLb/+S
yHl71O4oXUvYGXjgp6/B7TR/7REwaDyONPxWhZe6W+bzaQGFk/X5ag6gltEgY+ac
e2avt12fahEqwr6kzi9BLSIM4hkvTTZcM3rmhTggpgrORbxmhdJBH1tOjna2AULZ
/s1dRy+inyimiY13WzyCPaQ5vQWx3/tBbQ87e1zrnf053r35KucBmC1SBWfuybcT
6P5DSODiku8UR7imf3dGAkRhoxHR7jIcVq43AMBhhsd1+6lSWkPT4UUNTIuoFujK
17wz4J7RkL/YaLWDUfUuwav1gP/zxILx8xxLLNwtT4nnZp4YG/YnAUsFe68bvugG
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:38 2025 by rpki-client