Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/edRcT7FMgGsyYd3xzwlL4K5C_DM.roa
File: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (raw, json)
Hash identifier: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=
Subject key identifier: 79:D4:5C:4F:B1:4C:80:6B:32:61:DD:F1:CF:09:4B:E0:AE:42:FC:33
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 019427479F9DFAD1D2F02C013BB82DEFB91A
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/edRcT7FMgGsyYd3xzwlL4K5C_DM.roa
Signing time: Thu 02 Jan 2025 13:49:52 +0000
ROA not before: Thu 02 Jan 2025 13:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203536
IP address blocks: 185.63.8.0/22 maxlen: 22
188.116.42.0/23 maxlen: 23
2a03:920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:9f:9d:fa:d1:d2:f0:2c:01:3b:b8:2d:ef:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Jan 2 13:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79d45c4fb14c806b3261ddf1cf094be0ae42fc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:2d:9d:03:7e:8d:6f:43:1c:ff:9f:f9:19:
03:9d:8a:cd:9e:2f:8d:63:b9:3f:94:68:f9:93:2b:
6b:66:35:5a:b1:84:62:5e:b1:74:f5:ba:42:47:e5:
e6:15:0c:2d:3a:37:04:5a:51:cd:62:b6:a5:97:61:
b9:df:71:3f:26:b7:87:11:05:83:b3:fe:27:81:bb:
9b:ff:7b:33:1b:16:46:c3:16:3c:a9:8a:a7:cc:d0:
bd:4e:b9:d4:32:c6:ad:d5:21:35:e3:7e:bf:6d:e3:
c4:a7:d8:46:a7:0c:00:5f:a9:37:ad:b6:4d:6d:8c:
89:f5:65:1b:d6:2e:ff:aa:90:1e:87:66:48:1a:cc:
55:6c:65:30:41:94:26:31:66:10:d0:78:86:60:b1:
2c:e0:f4:73:6c:0b:57:d7:2f:ec:7a:1f:4d:52:63:
68:c2:3e:1b:64:af:37:56:10:79:66:1b:df:7f:6b:
fb:d7:4a:a8:79:2d:86:a1:65:13:cd:1f:81:28:6c:
05:5a:2d:04:be:79:2a:72:6f:71:40:ca:ae:6d:d8:
2d:ed:6b:51:d8:d9:99:e2:bb:50:7c:08:ad:ac:86:
d7:b9:46:42:96:61:3e:9a:a9:ea:79:4d:5b:00:37:
e3:7e:fe:d9:e0:4d:1b:ff:c8:13:03:d3:f4:af:5d:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D4:5C:4F:B1:4C:80:6B:32:61:DD:F1:CF:09:4B:E0:AE:42:FC:33
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/edRcT7FMgGsyYd3xzwlL4K5C_DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.8.0/22
188.116.42.0/23
IPv6:
2a03:920::/32
Signature Algorithm: sha256WithRSAEncryption
2a:e5:85:b8:bb:dd:ba:df:f5:e0:55:0f:cf:ce:62:4e:81:0a:
e3:96:fe:d6:5e:de:70:c2:13:3a:b1:c7:42:c6:88:67:f6:ff:
22:fc:ae:d2:de:e0:ce:f6:ad:21:a8:c6:fc:83:e1:f3:93:2b:
0d:bc:e1:4b:f7:b4:8a:7a:2f:f7:a8:fb:ef:f3:d7:2f:c1:81:
fa:f9:ba:44:4b:25:79:3a:f2:f9:5e:82:38:27:c4:42:e2:f6:
be:e5:84:18:24:8f:68:d9:96:01:f3:57:7d:13:64:1e:d5:ce:
67:9c:3a:44:e0:9f:fa:0a:01:b6:33:45:68:2d:28:f9:c7:f5:
f4:97:7f:35:6b:68:0b:b9:8e:cc:20:ab:f8:2e:ee:f0:64:1d:
2b:03:33:6a:b6:00:3f:4e:b3:ca:03:21:26:df:6c:7c:3e:9a:
8c:b6:5a:28:fb:9f:51:91:94:f8:49:d2:5d:e2:8c:03:27:af:
1e:c9:51:20:c2:08:1a:a0:5c:61:a8:f0:c3:c2:d1:12:b1:14:
c5:dd:4c:45:96:a4:ba:c2:1e:75:59:56:37:7a:02:fc:8c:87:
c7:ad:63:52:07:ef:ff:7f:e2:b9:2c:dd:86:2c:ff:69:6f:f1:
9b:20:e4:62:53:96:6a:f2:7b:d3:eb:a1:2b:fc:ea:17:fd:39:
92:ec:5a:81
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQnR5+d+tHS8CwBO7gt77kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjUwMTAyMTM0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ0NWM0ZmIxNGM4MDZiMzI2MWRkZjFjZjA5NGJlMGFlNDJmYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RktnQN+jW9DHP+f+RkDnYrNni+N
Y7k/lGj5kytrZjVasYRiXrF09bpCR+XmFQwtOjcEWlHNYrall2G533E/JreHEQWD
s/4ngbub/3szGxZGwxY8qYqnzNC9TrnUMsat1SE1436/bePEp9hGpwwAX6k3rbZN
bYyJ9WUb1i7/qpAeh2ZIGsxVbGUwQZQmMWYQ0HiGYLEs4PRzbAtX1y/seh9NUmNo
wj4bZK83VhB5Zhvff2v710qoeS2GoWUTzR+BKGwFWi0Evnkqcm9xQMqubdgt7WtR
2NmZ4rtQfAitrIbXuUZClmE+mqnqeU1bADfjfv7Z4E0b/8gTA9P0r13bwQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHnUXE+xTIBrMmHd8c8JS+CuQvwzMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvZWRSY1Q3Rk1nR3N5WWQzeHp3bEw0SzVDX0RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuT8IAwQB
vHQqMA0EAgACMAcDBQAqAwkgMA0GCSqGSIb3DQEBCwUAA4IBAQAq5YW4u9263/Xg
VQ/PzmJOgQrjlv7WXt5wwhM6scdCxohn9v8i/K7S3uDO9q0hqMb8g+HzkysNvOFL
97SKei/3qPvv89cvwYH6+bpESyV5OvL5XoI4J8RC4va+5YQYJI9o2ZYB81d9E2Qe
1c5nnDpE4J/6CgG2M0VoLSj5x/X0l381a2gLuY7MIKv4Lu7wZB0rAzNqtgA/TrPK
AyEm32x8PpqMtloo+59RkZT4SdJd4owDJ68eyVEgwggaoFxhqPDDwtESsRTF3UxF
lqS6wh51WVY3egL8jIfHrWNSB+//f+K5LN2GLP9pb/GbIORiU5Zq8nvT66Er/OoX
/TmS7FqB
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:56:03 2025 by rpki-client