Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/eG7qPRRyMuGDnTaL5wdOylUl9yc.roa
File: eG7qPRRyMuGDnTaL5wdOylUl9yc.roa (raw, json)
Hash identifier: wEVy8BCY3//obLJ2YEaxXlAcf2i+3jpwZETui93UpjU=
Subject key identifier: 78:6E:EA:3D:14:72:32:E1:83:9D:36:8B:E7:07:4E:CA:55:25:F7:27
Certificate issuer: /CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Certificate serial: 01941F8C3EA4C9760CD03826F0C2D88A12AB
Authority key identifier: B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/eG7qPRRyMuGDnTaL5wdOylUl9yc.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 185.242.137.0/24 maxlen: 24
185.242.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:a4:c9:76:0c:d0:38:26:f0:c2:d8:8a:12:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b799ac989c44b2e1cdabc258e96ca93caad4bd64
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786eea3d147232e1839d368be7074eca5525f727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:a3:a2:23:86:90:04:c4:56:42:73:bf:ac:
8f:15:d0:10:4b:18:c6:b0:d4:29:65:25:36:da:2b:
72:17:e8:93:10:11:a5:66:fd:7a:99:5b:52:f0:a6:
65:23:c0:db:0a:06:05:33:a3:77:c0:8b:c8:e1:7a:
15:40:68:f4:46:d7:c5:ae:48:46:0c:9f:c1:ff:90:
a4:a7:d2:f1:9c:2b:ed:d4:91:60:a1:79:2b:ba:bc:
66:4e:dc:f1:74:4d:eb:5e:8b:9f:af:7d:22:c7:42:
19:9a:a7:ff:c4:71:72:3e:2c:e3:88:4b:dd:0f:a3:
50:e4:62:68:39:2c:51:e4:4a:7d:52:80:ae:40:24:
b4:18:da:62:16:34:6a:57:ec:8d:89:e9:77:15:07:
9e:58:56:3d:79:49:9d:fa:9b:9c:27:12:74:55:69:
21:b9:f0:9c:9f:f0:b1:00:73:ff:61:c6:20:50:bf:
0f:f3:82:81:d1:54:56:d4:43:fe:3b:d4:1c:05:ca:
1d:5a:02:4f:3e:ab:6d:e6:90:33:95:9e:7f:a3:a3:
6f:7a:9f:3b:25:e6:75:cb:56:bf:59:53:cc:fc:6c:
c9:c3:aa:6e:8e:3a:4e:cf:f8:0e:ed:97:32:7a:37:
2f:92:c3:bf:2d:7c:91:09:64:e1:e8:66:e2:7a:2d:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:EA:3D:14:72:32:E1:83:9D:36:8B:E7:07:4E:CA:55:25:F7:27
X509v3 Authority Key Identifier:
keyid:B7:99:AC:98:9C:44:B2:E1:CD:AB:C2:58:E9:6C:A9:3C:AA:D4:BD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5msmJxEsuHNq8JY6WypPKrUvWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/eG7qPRRyMuGDnTaL5wdOylUl9yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e5c49-0d74-487a-a81c-9174df4ddb9a/1/t5msmJxEsuHNq8JY6WypPKrUvWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.137.0/24
185.242.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:db:df:d6:c6:f8:ce:23:ab:f7:71:d1:41:bd:92:2c:bd:6a:
f7:de:2a:36:22:d4:03:09:71:0d:58:50:db:30:0c:9e:42:0c:
37:cf:b7:b5:d3:a7:4e:a6:12:e3:56:cc:74:b2:c8:ca:ac:57:
2b:74:2d:8f:98:68:c6:58:ba:d1:6f:ce:c9:c3:d1:a4:9f:50:
74:e6:e9:57:84:2c:0f:6a:37:ff:1d:fe:c6:2a:ac:f4:23:d3:
16:a1:55:49:5b:c7:4e:6a:fb:64:ca:c6:4c:48:fb:be:c6:a1:
d2:8e:0e:f9:a0:39:7f:e3:e4:24:ed:df:81:05:7c:2f:37:39:
8c:54:67:dc:e9:63:0d:a2:5f:f1:f6:37:49:a1:90:44:9e:98:
8b:d4:29:0c:c2:49:01:f9:f0:bb:98:95:5d:9f:5c:5c:8a:fe:
27:9b:07:20:d5:4d:1b:d1:93:90:98:07:5f:fc:a9:52:cf:c4:
21:14:05:be:9d:90:b3:fd:29:c2:ba:24:79:03:78:d4:c8:8f:
5a:a6:47:a0:08:f2:7a:9e:53:e0:47:60:85:06:d3:5c:cd:8e:
6c:79:56:6c:37:65:85:c2:09:cf:d7:05:83:ca:3c:b9:f0:ba:
df:81:5b:20:ea:87:5e:4e:ef:0e:33:69:08:a7:1a:e7:68:54:
ce:25:a5:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjD6kyXYM0Dgm8MLYihKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTlhYzk4OWM0NGIyZTFjZGFiYzI1OGU5NmNhOTNjYWFk
NGJkNjQwHhcNMjUwMTAxMDE0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZlZWEzZDE0NzIzMmUxODM5ZDM2OGJlNzA3NGVjYTU1MjVmNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ejoiOGkATEVkJzv6yPFdAQSxjG
sNQpZSU22ityF+iTEBGlZv16mVtS8KZlI8DbCgYFM6N3wIvI4XoVQGj0RtfFrkhG
DJ/B/5Ckp9LxnCvt1JFgoXkrurxmTtzxdE3rXoufr30ix0IZmqf/xHFyPizjiEvd
D6NQ5GJoOSxR5Ep9UoCuQCS0GNpiFjRqV+yNiel3FQeeWFY9eUmd+pucJxJ0VWkh
ufCcn/CxAHP/YcYgUL8P84KB0VRW1EP+O9QcBcodWgJPPqtt5pAzlZ5/o6Nvep87
JeZ1y1a/WVPM/GzJw6pujjpOz/gO7ZcyejcvksO/LXyRCWTh6Gbiei3kpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhu6j0UcjLhg502i+cHTspVJfcnMB8GA1UdIwQY
MBaAFLeZrJicRLLhzavCWOlsqTyq1L1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMt
OTE3NGRmNGRkYjlhLzEvZUc3cVBSUnlNdUdEblRhTDV3ZE95bFVsOXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yZTVjNDktMGQ3NC00ODdhLWE4MWMtOTE3NGRmNGRkYjlh
LzEvdDVtc21KeEVzdUhOcThKWTZXeXBQS3JVdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAufKJAwQA
ufKLMA0GCSqGSIb3DQEBCwUAA4IBAQCj29/WxvjOI6v3cdFBvZIsvWr33io2ItQD
CXENWFDbMAyeQgw3z7e106dOphLjVsx0ssjKrFcrdC2PmGjGWLrRb87Jw9Gkn1B0
5ulXhCwPajf/Hf7GKqz0I9MWoVVJW8dOavtkysZMSPu+xqHSjg75oDl/4+Qk7d+B
BXwvNzmMVGfc6WMNol/x9jdJoZBEnpiL1CkMwkkB+fC7mJVdn1xciv4nmwcg1U0b
0ZOQmAdf/KlSz8QhFAW+nZCz/SnCuiR5A3jUyI9apkegCPJ6nlPgR2CFBtNczY5s
eVZsN2WFwgnP1wWDyjy58LrfgVsg6odeTu8OM2kIpxrnaFTOJaXE
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:43 2025 by rpki-client