Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/eLxT2po5eGPChIMxVAix9dVpqpQ.roa
File: eLxT2po5eGPChIMxVAix9dVpqpQ.roa (raw, json)
Hash identifier: 14Qj0x8EmPtQ0Mh4TujmQH1/xIMT4aZ2EIL73Ur98dQ=
Subject key identifier: 78:BC:53:DA:9A:39:78:63:C2:84:83:31:54:08:B1:F5:D5:69:AA:94
Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Certificate serial: 019425FCAC20AF82913B8EBDB73103EDC40A
Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/eLxT2po5eGPChIMxVAix9dVpqpQ.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201211
IP address blocks: 185.73.16.0/22 maxlen: 22
185.82.24.0/22 maxlen: 22
193.178.118.0/24 maxlen: 24
2a05:3e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ac:20:af:82:91:3b:8e:bd:b7:31:03:ed:c4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78bc53da9a397863c28483315408b1f5d569aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:49:be:4c:32:53:c3:0f:ba:67:95:a7:61:
13:94:3d:18:dd:68:88:ee:0a:84:14:38:fc:3a:32:
79:57:0c:6b:b3:26:50:3d:de:c0:6b:80:8d:a1:c4:
38:2a:9d:99:0a:76:53:73:d8:72:b6:c2:7d:2a:85:
d9:ac:63:29:08:61:fe:76:e4:f4:7a:e6:23:95:0b:
0c:88:a0:29:01:cf:8f:f1:c2:ba:0b:aa:6d:1c:da:
7c:81:f2:a0:11:a3:c1:3f:7b:2b:47:64:57:15:43:
00:62:a0:0e:56:5a:f4:4b:7f:ed:2a:51:ed:93:0b:
de:09:ad:03:13:92:a3:3e:10:3a:35:8c:6a:f7:42:
79:b3:1c:09:72:e0:59:c2:2c:96:0b:a8:7f:95:a9:
60:0a:62:9e:85:a9:3a:31:8d:7e:6d:f8:ad:23:90:
79:87:55:e6:9b:47:94:16:8d:3d:0b:80:ff:25:a7:
b6:c2:7e:cd:1e:4a:06:05:cf:b4:ba:bb:9f:c0:de:
1d:a6:ca:9a:b9:fb:fe:10:b7:d5:d2:ad:f7:b2:ab:
b0:8d:6d:48:bd:95:85:53:ef:f2:50:00:41:ea:63:
19:4d:f4:8f:83:39:08:1f:f4:09:5b:0b:ba:e8:87:
77:70:47:2c:a9:6e:a5:eb:62:cd:4b:86:5a:ec:62:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:53:DA:9A:39:78:63:C2:84:83:31:54:08:B1:F5:D5:69:AA:94
X509v3 Authority Key Identifier:
keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/eLxT2po5eGPChIMxVAix9dVpqpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.16.0/22
185.82.24.0/22
193.178.118.0/24
IPv6:
2a05:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
64:48:09:87:17:60:38:3b:c6:f3:d1:b7:11:bc:27:73:8c:d1:
e8:84:4f:d2:9c:80:5b:24:f9:0b:60:0c:e5:fd:4f:8f:e1:4e:
2c:37:18:5c:ce:66:be:3a:a3:e1:e7:cc:bf:00:63:ba:e0:7f:
0e:51:4e:a9:f7:6c:e6:02:43:19:cd:f2:ee:81:40:c8:db:41:
0d:60:0c:42:86:11:ff:22:7f:0a:b3:93:b4:c2:fa:15:f5:4f:
b4:9b:f5:00:19:1e:46:7f:fd:bc:bc:23:4d:48:39:d0:f4:51:
40:78:f4:0f:14:db:8b:77:42:47:59:c5:7c:c0:b7:11:c0:7e:
ab:0f:8f:65:74:00:c2:ef:ea:c0:55:58:2f:ed:36:35:4f:4a:
21:01:25:d7:d8:e4:3d:45:1b:be:c4:24:17:a4:44:86:f2:ff:
45:5f:45:60:bc:68:5b:6e:41:99:1d:40:c3:07:19:bc:06:5c:
2e:7b:a0:d3:32:6e:7a:f5:26:c0:be:ad:76:85:b9:35:f9:08:
a6:3d:a0:8c:fa:61:16:10:77:6e:15:1c:64:a1:ae:a8:6e:20:
63:cc:fb:2d:48:77:f3:e4:a4:92:e0:48:3a:47:5d:23:0d:84:
cf:f9:e9:ec:4c:81:50:f3:6e:38:00:17:74:41:ed:ee:45:b8:
c7:18:5e:f7
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQl/Kwgr4KRO469tzED7cQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0
YjgwZjcwHhcNMjUwMTAyMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGJjNTNkYTlhMzk3ODYzYzI4NDgzMzE1NDA4YjFmNWQ1NjlhYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllhJvkwyU8MPumeVp2ETlD0Y3WiI
7gqEFDj8OjJ5VwxrsyZQPd7Aa4CNocQ4Kp2ZCnZTc9hytsJ9KoXZrGMpCGH+duT0
euYjlQsMiKApAc+P8cK6C6ptHNp8gfKgEaPBP3srR2RXFUMAYqAOVlr0S3/tKlHt
kwveCa0DE5KjPhA6NYxq90J5sxwJcuBZwiyWC6h/lalgCmKehak6MY1+bfitI5B5
h1Xmm0eUFo09C4D/Jae2wn7NHkoGBc+0urufwN4dpsqaufv+ELfV0q33squwjW1I
vZWFU+/yUABB6mMZTfSPgzkIH/QJWwu66Id3cEcsqW6l62LNS4Za7GKyPQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHi8U9qaOXhjwoSDMVQIsfXVaaqUMB8GA1UdIwQY
MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt
YjFjNGRlODRlNzBlLzEvZUx4VDJwbzVlR1BDaElNeFZBaXg5ZFZwcXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl
LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUkQAwQC
uVIYAwQAwbJ2MA0EAgACMAcDBQMqBT6AMA0GCSqGSIb3DQEBCwUAA4IBAQBkSAmH
F2A4O8bz0bcRvCdzjNHohE/SnIBbJPkLYAzl/U+P4U4sNxhczma+OqPh58y/AGO6
4H8OUU6p92zmAkMZzfLugUDI20ENYAxChhH/In8Ks5O0wvoV9U+0m/UAGR5Gf/28
vCNNSDnQ9FFAePQPFNuLd0JHWcV8wLcRwH6rD49ldADC7+rAVVgv7TY1T0ohASXX
2OQ9RRu+xCQXpESG8v9FX0VgvGhbbkGZHUDDBxm8Blwue6DTMm569SbAvq12hbk1
+QimPaCM+mEWEHduFRxkoa6obiBjzPstSHfz5KSS4Eg6R10jDYTP+ensTIFQ8244
ABd0Qe3uRbjHGF73
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:11:46 2025 by rpki-client