Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/EsKSgJ8EQmtQ4eatv1jfClm65kw.roa
File: EsKSgJ8EQmtQ4eatv1jfClm65kw.roa (raw, json)
Hash identifier: KfQqwkTsCtwKGnXEQFbFhy/ovkmWCSEcDlc1yTA8r8k=
Subject key identifier: 12:C2:92:80:9F:04:42:6B:50:E1:E6:AD:BF:58:DF:0A:59:BA:E6:4C
Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial: 019424B372F4E2779D3BC9DE8F82854A343A
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/EsKSgJ8EQmtQ4eatv1jfClm65kw.roa
Signing time: Thu 02 Jan 2025 01:48:47 +0000
ROA not before: Thu 02 Jan 2025 01:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205709
IP address blocks: 185.123.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:f4:e2:77:9d:3b:c9:de:8f:82:85:4a:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c292809f04426b50e1e6adbf58df0a59bae64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:dc:9d:ea:7a:0a:c2:e5:f0:25:3c:43:f5:
50:63:63:be:6a:6a:07:e1:ab:fa:98:9f:4a:2f:12:
6d:7c:36:0a:5b:43:82:4d:1d:ff:a6:75:4f:a6:37:
e4:b2:d3:f9:7e:72:89:e7:ee:27:bf:97:56:43:99:
1b:6b:c8:57:a9:39:93:ae:a0:0f:52:31:10:35:c0:
fe:bf:2c:1c:f3:01:ba:45:29:d1:1e:40:10:26:32:
5a:5b:26:b6:96:a6:41:68:83:1b:cf:7b:3a:78:d7:
f5:53:11:3b:64:48:e3:6e:19:99:15:f5:e2:ab:45:
50:9e:63:6e:27:ab:7f:30:38:4d:38:71:bd:84:7d:
41:ee:6d:3d:21:f1:19:ce:c4:3f:99:bb:28:09:39:
a8:68:de:13:2c:fe:87:e3:c3:d6:9f:eb:ec:8b:96:
8a:56:b6:a2:7c:bc:99:3b:e2:0a:63:6a:d9:3a:76:
8a:3b:99:e3:2b:b7:ca:ed:7e:1c:ed:8b:e3:23:11:
bd:89:6d:2c:a5:f8:32:2b:a6:4e:e2:06:b4:d8:e2:
2e:e8:a9:7c:db:31:10:c2:9a:a0:fe:44:86:81:d2:
82:8a:59:25:fe:44:28:85:64:b2:f1:eb:64:b4:09:
9f:a8:09:95:a9:53:14:50:81:de:c8:b0:5e:a8:00:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:92:80:9F:04:42:6B:50:E1:E6:AD:BF:58:DF:0A:59:BA:E6:4C
X509v3 Authority Key Identifier:
keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/EsKSgJ8EQmtQ4eatv1jfClm65kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.132.0/22
Signature Algorithm: sha256WithRSAEncryption
40:6a:28:ca:d1:bb:d2:e1:d2:e5:23:ea:ab:7b:3f:2b:58:6e:
18:d5:8d:05:0b:40:22:b7:db:a7:2f:1e:ba:18:fb:b3:f0:b8:
73:9e:e3:75:5a:f0:05:86:ec:2b:1a:0a:a4:75:90:89:46:3e:
5f:b6:97:6e:68:66:d2:fa:86:da:10:14:2a:7d:11:d6:39:8e:
d4:db:22:9d:94:eb:4f:09:f6:ae:12:48:77:f5:6a:5b:e1:e0:
83:86:1a:03:97:92:63:9b:75:81:9c:e3:d4:24:2d:16:e1:03:
7e:9d:5f:ab:a9:d9:e3:48:92:e8:bb:cc:f3:ec:b4:17:a0:14:
7d:7a:4c:1e:b2:02:3a:fa:5b:23:a1:3f:af:91:34:16:80:ab:
57:de:0d:f0:c8:47:25:44:6a:66:b1:86:b9:b9:0e:b2:68:49:
f6:de:39:4d:91:3c:a9:34:d3:3e:47:40:b4:f7:8c:c2:90:01:
e9:84:d1:79:13:84:a1:4e:46:37:32:f3:4d:19:67:fe:79:c0:
7a:a1:f3:12:cf:87:27:d9:ca:a1:d5:a1:13:7a:36:2d:6d:ee:
42:19:02:04:f1:09:82:b5:72:b2:47:2d:e6:7b:95:b2:7c:a2:
d3:59:87:c2:ab:27:ec:c1:8c:be:2b:d4:65:60:f4:15:53:f4:
ab:b9:1e:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks3L04nedO8nej4KFSjQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTc1NGU0ZDIwOGM2NDM1ZjFhYmVjOTM3Y2RlMjAwMDky
MDRkYzAwHhcNMjUwMTAyMDE0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmMyOTI4MDlmMDQ0MjZiNTBlMWU2YWRiZjU4ZGYwYTU5YmFlNjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhfcnep6CsLl8CU8Q/VQY2O+amoH
4av6mJ9KLxJtfDYKW0OCTR3/pnVPpjfkstP5fnKJ5+4nv5dWQ5kba8hXqTmTrqAP
UjEQNcD+vywc8wG6RSnRHkAQJjJaWya2lqZBaIMbz3s6eNf1UxE7ZEjjbhmZFfXi
q0VQnmNuJ6t/MDhNOHG9hH1B7m09IfEZzsQ/mbsoCTmoaN4TLP6H48PWn+vsi5aK
VraifLyZO+IKY2rZOnaKO5njK7fK7X4c7YvjIxG9iW0spfgyK6ZO4ga02OIu6Kl8
2zEQwpqg/kSGgdKCilkl/kQohWSy8etktAmfqAmVqVMUUIHeyLBeqABahwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLCkoCfBEJrUOHmrb9Y3wpZuuZMMB8GA1UdIwQY
MBaAFHtXVOTSCMZDXxq+yTfN4gAJIE3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTIt
ZmQ0OTNjNmE1Yzc2LzEvRXNLU2dKOEVRbXRRNGVhdHYxamZDbG02NWt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTItZmQ0OTNjNmE1Yzc2
LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXuEMA0G
CSqGSIb3DQEBCwUAA4IBAQBAaijK0bvS4dLlI+qrez8rWG4Y1Y0FC0Ait9unLx66
GPuz8LhznuN1WvAFhuwrGgqkdZCJRj5ftpduaGbS+obaEBQqfRHWOY7U2yKdlOtP
CfauEkh39Wpb4eCDhhoDl5Jjm3WBnOPUJC0W4QN+nV+rqdnjSJLou8zz7LQXoBR9
ekwesgI6+lsjoT+vkTQWgKtX3g3wyEclRGpmsYa5uQ6yaEn23jlNkTypNNM+R0C0
94zCkAHphNF5E4ShTkY3MvNNGWf+ecB6ofMSz4cn2cqh1aETejYtbe5CGQIE8QmC
tXKyRy3me5WyfKLTWYfCqyfswYy+K9RlYPQVU/SruR7r
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:22 2025 by rpki-client