Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa
File: eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa (raw, json)
Hash identifier: i9IHtchSCoTvu2jWZ+d1LDgXIzrS7PbiIZtxvaQvRRk=
Subject key identifier: 78:6A:15:0C:50:80:29:18:0C:53:BC:85:0A:05:32:8F:59:47:39:89
Certificate issuer: /CN=b215270e3b5976b44f3adece57047d1e0787ba75
Certificate serial: 019427B59E1144AE9C3A9FF8BEF5BAC8EA1D
Authority key identifier: B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210230
IP address blocks: 193.38.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9e:11:44:ae:9c:3a:9f:f8:be:f5:ba:c8:ea:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b215270e3b5976b44f3adece57047d1e0787ba75
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=786a150c508029180c53bc850a05328f59473989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:c7:ab:a8:7c:3c:1b:a9:ee:e8:0b:64:c3:
01:e7:c3:5c:cd:db:bf:47:53:03:b9:52:d4:92:81:
ed:67:4d:0e:fe:d9:34:60:3e:72:49:c6:6c:37:f3:
bf:33:74:8a:ac:b0:7e:af:f5:a2:2b:d7:96:30:6f:
1c:2a:74:05:6b:cd:23:2d:7b:15:d5:ab:9c:61:3b:
90:93:f3:89:29:17:2d:12:86:3e:be:a4:0a:d9:2e:
a0:bd:03:54:d8:b2:97:36:0d:71:aa:a7:78:12:44:
17:32:62:ee:89:da:51:b0:c8:d4:2d:f3:e7:4d:34:
03:2b:8e:d6:27:98:f6:5a:bd:2c:a6:e4:52:1f:21:
5a:80:65:5d:e0:2e:f4:9d:e7:8b:0a:0a:ef:51:22:
2a:6b:eb:77:ad:df:f2:07:4b:03:ee:de:11:ae:e7:
b3:9d:98:3c:11:87:ea:3d:fc:dd:d3:71:04:ab:d6:
41:72:f4:42:0e:6d:93:4f:74:df:31:a9:98:d0:b6:
88:ea:e3:c4:5e:5d:b0:e5:ae:51:81:d2:4b:01:94:
a6:75:d3:72:12:73:6f:ad:7a:1d:00:79:29:05:54:
f0:17:14:d1:88:28:04:39:56:3d:4f:cf:92:9a:c9:
b6:be:f7:ff:a1:ef:6a:26:2b:78:58:f3:7d:49:5d:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:15:0C:50:80:29:18:0C:53:BC:85:0A:05:32:8F:59:47:39:89
X509v3 Authority Key Identifier:
keyid:B2:15:27:0E:3B:59:76:B4:4F:3A:DE:CE:57:04:7D:1E:07:87:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shUnDjtZdrRPOt7OVwR9HgeHunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/eGoVDFCAKRgMU7yFCgUyj1lHOYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bd59ae-5b7d-4c26-8e14-24b9e8211885/1/shUnDjtZdrRPOt7OVwR9HgeHunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b7:72:73:2c:55:13:bc:88:d8:44:ec:ed:7d:c2:58:c3:df:
d1:e9:e6:7f:64:f8:0d:0a:17:89:29:f1:a0:2a:c6:cc:d1:fc:
37:16:09:ff:5a:07:d1:31:f4:83:2b:c5:f1:8e:3a:84:7d:5b:
1d:71:1f:f3:7a:98:e3:e5:94:cb:de:20:04:a3:c2:4a:89:81:
b8:90:ac:b0:a3:06:aa:3d:97:4d:98:29:47:48:e2:1c:85:0e:
74:bf:81:4c:2f:75:75:e6:34:ec:f5:45:cb:ca:b4:ca:20:a2:
bf:e2:45:b8:24:23:f1:31:76:78:4d:c4:b7:ee:c8:ff:8c:9e:
04:06:89:c9:8e:17:33:60:6d:1e:81:33:45:cb:c5:e9:0c:36:
bc:da:8e:c2:4c:05:15:3d:7b:71:13:b8:a5:ec:bc:c3:17:8a:
c4:a3:4d:21:64:44:d3:f7:4e:40:23:6d:18:6f:42:4c:ac:0c:
18:08:bb:5b:ac:8c:bc:9a:91:e0:67:84:01:a5:65:6a:0e:bf:
fc:15:28:b4:9f:17:04:f9:c3:4b:a3:0b:e8:5e:6e:d2:ca:32:
63:96:46:fe:40:77:ea:c2:77:29:d8:eb:6a:b1:e0:c0:07:a4:
43:a3:f5:f1:3b:d2:76:5a:56:28:6a:9e:81:5b:13:22:ba:3c:
69:c9:99:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntZ4RRK6cOp/4vvW6yOodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMTUyNzBlM2I1OTc2YjQ0ZjNhZGVjZTU3MDQ3ZDFlMDc4
N2JhNzUwHhcNMjUwMTAyMTU1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZhMTUwYzUwODAyOTE4MGM1M2JjODUwYTA1MzI4ZjU5NDczOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/jHq6h8PBup7ugLZMMB58Nczdu/
R1MDuVLUkoHtZ00O/tk0YD5yScZsN/O/M3SKrLB+r/WiK9eWMG8cKnQFa80jLXsV
1aucYTuQk/OJKRctEoY+vqQK2S6gvQNU2LKXNg1xqqd4EkQXMmLuidpRsMjULfPn
TTQDK47WJ5j2Wr0spuRSHyFagGVd4C70neeLCgrvUSIqa+t3rd/yB0sD7t4Rruez
nZg8EYfqPfzd03EEq9ZBcvRCDm2TT3TfMamY0LaI6uPEXl2w5a5RgdJLAZSmddNy
EnNvrXodAHkpBVTwFxTRiCgEOVY9T8+Smsm2vvf/oe9qJit4WPN9SV1UNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhqFQxQgCkYDFO8hQoFMo9ZRzmJMB8GA1UdIwQY
MBaAFLIVJw47WXa0TzrezlcEfR4Hh7p1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQt
MjRiOWU4MjExODg1LzEvZUdvVkRGQ0FLUmdNVTd5RkNnVXlqMWxIT1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iZDU5YWUtNWI3ZC00YzI2LThlMTQtMjRiOWU4MjExODg1
LzEvc2hVbkRqdFpkclJQT3Q3T1Z3UjlIZ2VIdW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSaSMA0G
CSqGSIb3DQEBCwUAA4IBAQA6t3JzLFUTvIjYROztfcJYw9/R6eZ/ZPgNCheJKfGg
KsbM0fw3Fgn/WgfRMfSDK8XxjjqEfVsdcR/zepjj5ZTL3iAEo8JKiYG4kKywowaq
PZdNmClHSOIchQ50v4FML3V15jTs9UXLyrTKIKK/4kW4JCPxMXZ4TcS37sj/jJ4E
BonJjhczYG0egTNFy8XpDDa82o7CTAUVPXtxE7il7LzDF4rEo00hZETT905AI20Y
b0JMrAwYCLtbrIy8mpHgZ4QBpWVqDr/8FSi0nxcE+cNLowvoXm7SyjJjlkb+QHfq
wncp2OtqseDAB6RDo/XxO9J2WlYoap6BWxMiujxpyZkj
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:14 2025 by rpki-client