Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yEGjjCThA-nNxx4PZ60ICcl9PFw.roa
File: yEGjjCThA-nNxx4PZ60ICcl9PFw.roa (raw, json)
Hash identifier: ghQGMJXOUXOKpH6y81Vy+6gpKG1/9kRxi+ojEhcPWsA=
Subject key identifier: C8:41:A3:8C:24:E1:03:E9:CD:C7:1E:0F:67:AD:08:09:C9:7D:3C:5C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369DCCC69FFC8EE8F3EA67D385818F4
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yEGjjCThA-nNxx4PZ60ICcl9PFw.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214348
IP address blocks: 213.226.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:dc:cc:69:ff:c8:ee:8f:3e:a6:7d:38:58:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c841a38c24e103e9cdc71e0f67ad0809c97d3c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:d6:5c:46:ac:77:7f:5b:09:d3:2a:14:d1:
3e:3e:55:6e:eb:de:b7:3f:84:01:ad:a9:6e:78:cc:
b2:dd:84:53:09:28:89:ea:cb:88:e9:d6:0b:92:7c:
d7:54:bf:da:b6:4d:2c:a3:f1:67:7d:79:f2:83:7a:
36:42:49:8d:a3:45:0d:da:f6:92:81:58:7c:68:37:
bb:c4:02:cc:a2:e0:d7:12:a4:bb:40:00:c7:27:d3:
31:48:bd:f8:cd:b5:6d:82:25:dc:7e:e3:95:40:e1:
23:ae:f2:53:c3:75:b6:52:f1:e4:c7:9a:2f:51:f0:
ed:7c:a5:f7:06:3d:fc:db:21:1c:cc:fa:1a:34:50:
94:b5:62:9a:79:59:97:8f:dc:e5:78:43:36:b2:27:
90:f2:c8:b6:f9:54:d1:f3:1a:74:a3:bc:f9:45:e7:
01:8b:90:96:e7:cc:59:b1:99:fe:1a:ec:b1:f3:07:
2c:4a:6d:d1:85:99:e3:b4:35:2f:f2:94:e0:2f:a6:
fc:c7:41:e2:78:09:e4:9d:e8:b8:29:12:95:be:5c:
26:72:ff:95:95:76:0b:c0:39:f9:d0:78:76:fd:5c:
27:82:b7:4d:42:47:84:1f:17:57:3b:97:1c:ab:48:
6a:9c:70:9f:18:9c:3c:75:08:93:56:b9:24:70:36:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:A3:8C:24:E1:03:E9:CD:C7:1E:0F:67:AD:08:09:C9:7D:3C:5C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/yEGjjCThA-nNxx4PZ60ICcl9PFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.226.123.0/24
Signature Algorithm: sha256WithRSAEncryption
35:82:bb:94:95:2f:ab:cb:81:e5:a8:e7:8a:81:06:69:8d:ce:
14:b0:b2:58:ee:cf:70:d8:33:b9:a2:e6:b3:92:85:23:32:e4:
3c:ba:e6:4f:79:70:1e:a4:98:d0:4d:25:6a:a1:54:3f:ab:a9:
a6:c0:99:6c:c3:53:05:cc:96:f7:2d:6c:06:68:3f:94:a2:b5:
e3:0a:65:80:82:b5:a8:ef:1a:5e:0a:8d:c6:a1:bd:29:13:9e:
fd:01:94:43:33:4e:0c:dc:9e:fd:12:c3:b7:2f:ea:8a:de:a4:
87:0d:97:1b:af:73:3a:61:27:2f:90:7b:7f:d1:74:70:76:8d:
1a:50:82:02:42:ca:94:33:f8:e0:80:df:d3:0e:53:49:21:e5:
62:9c:50:de:53:c6:87:9c:c5:9d:d9:ee:7e:9b:e6:54:eb:46:
a6:7a:66:17:2a:95:68:0a:ae:e4:b5:bc:f8:d3:1e:fb:5b:30:
8e:3f:19:42:b9:ab:30:66:24:b6:0c:11:00:63:aa:35:8b:00:
92:5d:e0:6c:be:7e:93:93:bb:99:40:85:d5:a4:54:3f:78:4f:
e2:36:cc:44:eb:9e:4f:6b:9c:4a:ff:7e:0a:0b:26:57:fd:0c:
4f:7a:7d:35:40:4e:e6:8a:08:2f:82:cb:51:f4:b6:89:10:4e:
47:90:a7:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadzMaf/I7o8+pn04WBj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQxYTM4YzI0ZTEwM2U5Y2RjNzFlMGY2N2FkMDgwOWM5N2QzYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTjWXEasd39bCdMqFNE+PlVu6963
P4QBralueMyy3YRTCSiJ6suI6dYLknzXVL/atk0so/FnfXnyg3o2QkmNo0UN2vaS
gVh8aDe7xALMouDXEqS7QADHJ9MxSL34zbVtgiXcfuOVQOEjrvJTw3W2UvHkx5ov
UfDtfKX3Bj382yEczPoaNFCUtWKaeVmXj9zleEM2sieQ8si2+VTR8xp0o7z5RecB
i5CW58xZsZn+Guyx8wcsSm3RhZnjtDUv8pTgL6b8x0HieAnknei4KRKVvlwmcv+V
lXYLwDn50Hh2/VwngrdNQkeEHxdXO5ccq0hqnHCfGJw8dQiTVrkkcDZ8awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhBo4wk4QPpzcceD2etCAnJfTxcMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEveUVHampDVGhBLW5OeHg0UFo2MElDY2w5UEZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1eJ7MA0G
CSqGSIb3DQEBCwUAA4IBAQA1gruUlS+ry4HlqOeKgQZpjc4UsLJY7s9w2DO5ouaz
koUjMuQ8uuZPeXAepJjQTSVqoVQ/q6mmwJlsw1MFzJb3LWwGaD+UorXjCmWAgrWo
7xpeCo3Gob0pE579AZRDM04M3J79EsO3L+qK3qSHDZcbr3M6YScvkHt/0XRwdo0a
UIICQsqUM/jggN/TDlNJIeVinFDeU8aHnMWd2e5+m+ZU60amemYXKpVoCq7ktbz4
0x77WzCOPxlCuaswZiS2DBEAY6o1iwCSXeBsvn6Tk7uZQIXVpFQ/eE/iNsxE655P
a5xK/34KCyZX/QxPen01QE7miggvgstR9LaJEE5HkKe4
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:24 2025 by rpki-client