Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/EWV-qrSg63sJjpVDHsPLy9qN1Rk.roa
File: EWV-qrSg63sJjpVDHsPLy9qN1Rk.roa (raw, json)
Hash identifier: jvUW71q3Vs2gaH68Qr+/h0tnM5kM6Ff9K50Q1dQNnds=
Subject key identifier: 11:65:7E:AA:B4:A0:EB:7B:09:8E:95:43:1E:C3:CB:CB:DA:8D:D5:19
Certificate issuer: /CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Certificate serial: 01941F8C11E9FECFEE59411F2DACE1758F97
Authority key identifier: B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/EWV-qrSg63sJjpVDHsPLy9qN1Rk.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212215
IP address blocks: 212.8.192.0/19 maxlen: 24
212.15.192.0/19 maxlen: 24
2001:ae0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:11:e9:fe:cf:ee:59:41:1f:2d:ac:e1:75:8f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc95fc42f3d81920f464b0f20c8a5203f21e30
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11657eaab4a0eb7b098e95431ec3cbcbda8dd519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:a0:d6:97:f0:92:61:3b:82:53:31:40:c7:
47:ed:bd:1e:21:ad:ab:8b:e6:42:66:58:de:59:74:
7e:53:8f:ca:88:c2:72:b6:dd:46:53:b4:9f:45:bd:
1c:52:2f:9e:79:7d:8f:f1:a2:21:fc:86:d0:c8:e8:
83:4b:fc:1b:5c:72:bf:2a:76:66:0e:7f:01:48:99:
50:c4:fe:1b:91:59:ca:81:d4:2a:6c:ae:d5:da:3f:
43:db:7e:b6:79:b7:9a:7b:a2:72:40:87:31:d5:e3:
98:49:2d:dd:ba:ea:5a:df:ee:30:4b:94:1b:c4:bc:
39:34:55:59:52:37:32:a0:41:d8:9d:13:02:a3:48:
9f:23:56:0d:c8:9a:fa:d3:b4:26:25:a2:85:b8:d3:
d2:f5:a7:cd:d1:bf:25:17:02:f4:76:a0:83:b8:23:
57:4d:00:bc:bb:af:f7:52:ae:7d:0f:ad:d3:85:d3:
5c:25:87:4c:3b:88:9d:92:2c:39:3c:9f:c5:d5:6a:
56:d2:69:4b:f5:59:1b:ae:a1:09:03:39:90:2f:b2:
42:0e:46:00:3f:98:81:c7:58:32:65:46:af:06:a8:
ff:8d:af:cd:ae:48:e1:41:a9:78:56:1b:99:bf:b7:
a5:80:ec:bf:8e:d3:1b:66:1b:88:e8:ae:10:d9:38:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:65:7E:AA:B4:A0:EB:7B:09:8E:95:43:1E:C3:CB:CB:DA:8D:D5:19
X509v3 Authority Key Identifier:
keyid:B0:CC:95:FC:42:F3:D8:19:20:F4:64:B0:F2:0C:8A:52:03:F2:1E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/EWV-qrSg63sJjpVDHsPLy9qN1Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e96877-1133-4b29-a6ba-8453c0f135d6/1/sMyV_ELz2Bkg9GSw8gyKUgPyHjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.192.0/19
212.15.192.0/19
IPv6:
2001:ae0::/30
Signature Algorithm: sha256WithRSAEncryption
a1:43:eb:78:2e:c3:75:53:28:fb:19:a7:f2:7f:09:32:6b:18:
9a:42:cc:8c:9c:0e:60:d0:00:db:9e:8e:aa:3a:82:cf:d7:4f:
28:e4:40:2c:60:9b:d0:f6:94:0f:4f:1f:85:83:54:22:ae:14:
64:b8:6e:90:5c:63:78:9c:03:4d:55:eb:08:05:99:1b:b8:85:
07:7c:a6:66:c4:88:4d:55:ed:a7:6b:b6:92:2f:6e:31:d3:e4:
dc:f8:8e:fe:a5:74:58:2c:f3:dd:73:fe:e7:a2:59:e5:7c:ab:
39:2b:9f:70:51:9d:70:35:74:88:f4:ef:e9:5c:0f:b1:a7:5a:
36:c1:57:20:04:99:6c:b3:30:af:05:0a:d9:2f:03:1c:d8:b0:
cf:3c:7c:f8:b6:f0:3c:9c:9b:12:4e:f4:fb:2c:b8:9d:fa:3c:
d3:9f:71:b3:81:f3:ef:af:a7:72:d4:bd:6f:71:30:57:38:6b:
28:8b:34:12:7e:15:b4:29:65:c6:5c:ce:ee:99:ce:e5:c9:8b:
8b:5a:52:11:1e:84:5b:2f:3f:71:f3:e8:59:0d:91:5a:d1:f6:
05:29:d0:03:bc:f7:f5:6e:f8:74:78:87:20:75:5e:ac:b2:70:
d6:3a:49:33:78:48:df:c9:d6:e4:d1:07:00:ea:e1:6d:3c:f8:
4b:4c:b5:10
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQfjBHp/s/uWUEfLazhdY+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwY2M5NWZjNDJmM2Q4MTkyMGY0NjRiMGYyMGM4YTUyMDNm
MjFlMzAwHhcNMjUwMTAxMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTY1N2VhYWI0YTBlYjdiMDk4ZTk1NDMxZWMzY2JjYmRhOGRkNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4qg1pfwkmE7glMxQMdH7b0eIa2r
i+ZCZljeWXR+U4/KiMJytt1GU7SfRb0cUi+eeX2P8aIh/IbQyOiDS/wbXHK/KnZm
Dn8BSJlQxP4bkVnKgdQqbK7V2j9D2362ebeae6JyQIcx1eOYSS3duupa3+4wS5Qb
xLw5NFVZUjcyoEHYnRMCo0ifI1YNyJr607QmJaKFuNPS9afN0b8lFwL0dqCDuCNX
TQC8u6/3Uq59D63ThdNcJYdMO4idkiw5PJ/F1WpW0mlL9VkbrqEJAzmQL7JCDkYA
P5iBx1gyZUavBqj/ja/NrkjhQal4VhuZv7elgOy/jtMbZhuI6K4Q2ThhtwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBFlfqq0oOt7CY6VQx7Dy8vajdUZMB8GA1UdIwQY
MBaAFLDMlfxC89gZIPRksPIMilID8h4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc015Vl9FTHoyQmtnOUdTdzhneUtVZ1B5SGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lOTY4NzctMTEzMy00YjI5LWE2YmEt
ODQ1M2MwZjEzNWQ2LzEvRVdWLXFyU2c2M3NKanBWREhzUEx5OXFOMVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lOTY4NzctMTEzMy00YjI5LWE2YmEtODQ1M2MwZjEzNWQ2
LzEvc015Vl9FTHoyQmtnOUdTdzhneUtVZ1B5SGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQF1AjAAwQF
1A/AMA0EAgACMAcDBQIgAQrgMA0GCSqGSIb3DQEBCwUAA4IBAQChQ+t4LsN1Uyj7
GafyfwkyaxiaQsyMnA5g0ADbno6qOoLP108o5EAsYJvQ9pQPTx+Fg1QirhRkuG6Q
XGN4nANNVesIBZkbuIUHfKZmxIhNVe2na7aSL24x0+Tc+I7+pXRYLPPdc/7nolnl
fKs5K59wUZ1wNXSI9O/pXA+xp1o2wVcgBJlsszCvBQrZLwMc2LDPPHz4tvA8nJsS
TvT7LLid+jzTn3GzgfPvr6dy1L1vcTBXOGsoizQSfhW0KWXGXM7umc7lyYuLWlIR
HoRbLz9x8+hZDZFa0fYFKdADvPf1bvh0eIcgdV6ssnDWOkkzeEjfydbk0QcA6uFt
PPhLTLUQ
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:34:03 2025 by rpki-client