Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/EMVnap43Y9UsFWtlCe55L5ZXNno.roa
File: EMVnap43Y9UsFWtlCe55L5ZXNno.roa (raw, json)
Hash identifier: 79QWn/jDXhxzY15VXil6olMuq2XcT6cSiSrWZxg+0Gg=
Subject key identifier: 10:C5:67:6A:9E:37:63:D5:2C:15:6B:65:09:EE:79:2F:96:57:36:7A
Certificate issuer: /CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Certificate serial: 019426D9D438894116FD15E9FB4783D28231
Authority key identifier: 1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/EMVnap43Y9UsFWtlCe55L5ZXNno.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42962
IP address blocks: 185.192.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d4:38:89:41:16:fd:15:e9:fb:47:83:d2:82:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dd11554247bd2bd301cea43ff5180372c38e4
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c5676a9e3763d52c156b6509ee792f9657367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:77:88:4f:c5:f6:7d:4e:bd:97:01:31:54:
d4:d9:4d:5c:de:75:48:4c:b9:7d:12:c6:fd:3a:ae:
0a:ce:0d:4e:a0:bb:66:2c:eb:de:d9:19:ab:df:fe:
0a:0d:e5:01:64:ad:1c:8b:43:dc:de:41:82:22:c5:
4c:76:c7:fa:e4:63:76:53:2f:7e:9f:96:ab:ba:f3:
72:62:8d:3c:92:82:59:91:37:3e:cd:cc:f8:3d:c2:
2d:02:17:bd:99:31:82:3a:9f:d0:89:00:47:1e:cf:
1d:37:d5:23:66:b3:2a:d3:be:57:68:2d:ad:9e:7c:
9d:3f:f4:14:fb:0c:20:35:c0:38:e0:bd:54:03:98:
58:64:10:8c:79:d2:f0:b8:5b:fb:60:ca:13:3e:d5:
9e:b6:30:c4:75:7d:5e:5c:33:9a:6d:ac:8e:58:77:
4c:59:c6:07:23:36:ad:51:bc:50:39:15:ad:76:3c:
b4:b6:4b:76:6b:75:75:30:51:fa:51:db:b3:88:ad:
0a:49:c2:ee:4e:6c:40:86:d0:85:5e:11:2a:f8:02:
93:87:bc:d0:2c:74:3a:86:99:9e:ee:c1:57:54:e4:
26:0e:22:35:83:d8:d1:4f:0d:5e:97:5f:a8:dd:fb:
1a:d8:1a:c6:0b:0a:5d:f0:4b:96:4c:9f:94:19:00:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C5:67:6A:9E:37:63:D5:2C:15:6B:65:09:EE:79:2F:96:57:36:7A
X509v3 Authority Key Identifier:
keyid:1A:4D:D1:15:54:24:7B:D2:BD:30:1C:EA:43:FF:51:80:37:2C:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/EMVnap43Y9UsFWtlCe55L5ZXNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/Gk3RFVQke9K9MBzqQ_9RgDcsOOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.56.0/22
Signature Algorithm: sha256WithRSAEncryption
66:87:a3:9c:94:8b:5e:bb:24:70:e3:f2:01:16:9d:99:d4:60:
e7:9f:cd:c7:d1:4d:ac:e4:25:f4:87:92:34:2a:e1:9d:ef:10:
b2:24:d6:37:8d:e4:93:23:26:7d:73:04:5c:27:c7:57:8d:ec:
31:5e:43:09:04:0f:52:7d:c1:16:dc:cc:20:24:e0:37:17:cc:
28:f4:62:a6:1c:b1:93:5d:dd:2a:16:49:15:59:1f:69:7a:a1:
5a:f9:4c:e6:59:c0:c4:76:0c:f0:fc:4f:95:04:61:da:2f:1a:
e5:14:f0:b6:89:72:d9:5b:e3:bb:0f:be:57:f6:ae:31:d4:9d:
cd:ff:9e:22:6e:b0:e9:8e:5c:d7:b9:75:8b:66:f7:87:4b:1a:
c2:fb:c0:6f:da:60:af:bd:ad:ac:08:e3:03:dd:54:b1:d2:6f:
15:2f:75:33:02:d1:09:21:d7:6b:d0:41:18:74:c6:22:a0:6c:
5d:96:f5:a2:66:22:96:ad:66:cf:8a:54:66:5d:1a:e4:9e:0b:
1c:52:f5:ed:96:cf:d9:14:92:43:4b:92:62:4b:62:f0:9a:f9:
4a:d3:33:de:9d:94:12:0c:a3:19:66:2d:99:20:30:f2:42:d4:
d6:b9:bb:75:fd:57:ab:99:a9:67:8c:2c:6e:3c:fe:8e:5b:e6:
87:24:cb:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2dQ4iUEW/RXp+0eD0oIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNGRkMTE1NTQyNDdiZDJiZDMwMWNlYTQzZmY1MTgwMzcy
YzM4ZTQwHhcNMjUwMTAyMTE0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM1Njc2YTllMzc2M2Q1MmMxNTZiNjUwOWVlNzkyZjk2NTczNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy593iE/F9n1OvZcBMVTU2U1c3nVI
TLl9Esb9Oq4Kzg1OoLtmLOve2Rmr3/4KDeUBZK0ci0Pc3kGCIsVMdsf65GN2Uy9+
n5aruvNyYo08koJZkTc+zcz4PcItAhe9mTGCOp/QiQBHHs8dN9UjZrMq075XaC2t
nnydP/QU+wwgNcA44L1UA5hYZBCMedLwuFv7YMoTPtWetjDEdX1eXDOabayOWHdM
WcYHIzatUbxQORWtdjy0tkt2a3V1MFH6UduziK0KScLuTmxAhtCFXhEq+AKTh7zQ
LHQ6hpme7sFXVOQmDiI1g9jRTw1el1+o3fsa2BrGCwpd8EuWTJ+UGQCbowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDFZ2qeN2PVLBVrZQnueS+WVzZ6MB8GA1UdIwQY
MBaAFBpN0RVUJHvSvTAc6kP/UYA3LDjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUt
M2JhNWYzMGNhYWJmLzEvRU1WbmFwNDNZOVVzRld0bENlNTVMNVpYTm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YmRkZGEtMGM2Yy00YTVlLWIxYzUtM2JhNWYzMGNhYWJm
LzEvR2szUkZWUWtlOUs5TUJ6cVFfOVJnRGNzT09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucA4MA0G
CSqGSIb3DQEBCwUAA4IBAQBmh6OclIteuyRw4/IBFp2Z1GDnn83H0U2s5CX0h5I0
KuGd7xCyJNY3jeSTIyZ9cwRcJ8dXjewxXkMJBA9SfcEW3MwgJOA3F8wo9GKmHLGT
Xd0qFkkVWR9peqFa+UzmWcDEdgzw/E+VBGHaLxrlFPC2iXLZW+O7D75X9q4x1J3N
/54ibrDpjlzXuXWLZveHSxrC+8Bv2mCvva2sCOMD3VSx0m8VL3UzAtEJIddr0EEY
dMYioGxdlvWiZiKWrWbPilRmXRrkngscUvXtls/ZFJJDS5JiS2LwmvlK0zPenZQS
DKMZZi2ZIDDyQtTWubt1/VermalnjCxuPP6OW+aHJMuC
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:06:57 2025 by rpki-client