Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/euovkC8FzqkWizkBlJiIPuOidbU.roa
File: euovkC8FzqkWizkBlJiIPuOidbU.roa (raw, json)
Hash identifier: NVQ3tcOFWDZctMMGjmKl2U9mGUa0NK9LjFLKrJC2iHM=
Subject key identifier: 7A:EA:2F:90:2F:05:CE:A9:16:8B:39:01:94:98:88:3E:E3:A2:75:B5
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019425FC3F69F9FF7D715970650A6F4920CF
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/euovkC8FzqkWizkBlJiIPuOidbU.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204004
IP address blocks: 77.241.58.0/24 maxlen: 24
176.222.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3f:69:f9:ff:7d:71:59:70:65:0a:6f:49:20:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aea2f902f05cea9168b39019498883ee3a275b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:f8:0d:26:b4:aa:2d:d7:03:d9:b5:7f:df:
8b:b0:b6:0f:65:f2:0a:17:fe:9f:49:f8:80:a7:05:
2a:fd:19:a9:ce:47:83:c7:c2:8b:5a:58:44:3c:e8:
6d:0d:82:63:3a:fe:cc:73:10:e9:6c:af:75:2f:5d:
7f:c0:74:3d:05:43:13:c5:17:b2:46:cc:04:0b:07:
3b:b1:85:0a:4c:38:13:1d:fa:8f:d8:39:aa:be:27:
3a:fe:48:e4:5d:1e:53:c8:de:1d:ee:c4:26:4e:96:
30:01:45:e2:f6:0e:ef:14:fd:0e:5a:e6:a4:d2:31:
61:0a:57:34:d7:95:d0:46:19:f0:c3:36:b6:7e:ab:
8f:ac:fb:67:a4:7f:bd:9a:b4:88:83:c9:b8:9b:3b:
48:9c:37:80:6b:b4:6b:76:1c:9d:ac:91:7d:6a:55:
d9:31:80:c3:7d:e6:06:ac:6b:e9:07:f0:63:42:b0:
52:1f:ac:05:c2:3d:20:83:c6:f4:3d:40:0c:e3:08:
4a:5e:88:fd:f5:34:b3:d6:1c:cf:75:07:45:08:be:
a6:00:f4:af:75:0d:8d:36:d4:76:a4:de:5c:c8:37:
10:d1:29:6f:fc:55:14:2e:05:77:68:4f:dc:3c:01:
cd:7e:b0:93:e7:c9:93:fc:ea:b8:ac:73:2a:9d:e5:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EA:2F:90:2F:05:CE:A9:16:8B:39:01:94:98:88:3E:E3:A2:75:B5
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/euovkC8FzqkWizkBlJiIPuOidbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.58.0/24
176.222.69.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f8:36:35:84:b9:68:d3:15:0b:30:66:12:12:e0:7b:07:55:
fc:94:4e:09:b1:fd:e3:40:fb:13:a9:41:f0:d8:99:e8:bb:ca:
5a:7e:0f:54:86:65:1f:a9:a5:e7:9a:c1:28:3f:24:04:42:eb:
5f:c1:2d:d6:80:95:90:aa:59:a1:72:a0:27:d7:68:cd:e2:62:
73:1e:19:64:e6:14:fa:e2:77:75:07:8e:ed:e9:de:a6:ce:bb:
35:cc:6c:2b:5f:37:af:c7:17:9f:a9:9e:41:60:80:d9:9d:bf:
57:b2:fb:9f:50:46:ba:f5:27:e4:06:bf:83:3a:42:0b:a0:e5:
4d:bb:fc:c3:88:d5:6a:57:c1:0d:7b:e1:bd:36:b4:c2:a4:9b:
17:56:87:36:2d:94:9e:4d:3e:20:8a:13:6d:8b:3b:d4:c1:c2:
47:eb:0a:8a:1f:22:e2:49:aa:f5:fe:0e:b8:a8:d5:7c:af:f3:
30:25:6d:dd:bd:50:d1:8a:14:6b:e4:d7:14:77:6c:bb:b0:23:
72:cc:9d:c4:5f:78:f0:40:c6:ae:a6:97:12:f7:6e:b8:06:8d:
cb:d7:a0:dd:66:cb:98:4a:c8:1c:02:a7:49:4e:2e:d6:8a:49:
6e:49:1b:46:5a:4b:56:e8:0f:c9:eb:ef:c3:32:88:8a:14:72:
6d:0c:42:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/D9p+f99cVlwZQpvSSDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi
MmUyY2QwHhcNMjUwMTAyMDc0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWVhMmY5MDJmMDVjZWE5MTY4YjM5MDE5NDk4ODgzZWUzYTI3NWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOj4DSa0qi3XA9m1f9+LsLYPZfIK
F/6fSfiApwUq/RmpzkeDx8KLWlhEPOhtDYJjOv7McxDpbK91L11/wHQ9BUMTxRey
RswECwc7sYUKTDgTHfqP2Dmqvic6/kjkXR5TyN4d7sQmTpYwAUXi9g7vFP0OWuak
0jFhClc015XQRhnwwza2fquPrPtnpH+9mrSIg8m4mztInDeAa7RrdhydrJF9alXZ
MYDDfeYGrGvpB/BjQrBSH6wFwj0gg8b0PUAM4whKXoj99TSz1hzPdQdFCL6mAPSv
dQ2NNtR2pN5cyDcQ0Slv/FUULgV3aE/cPAHNfrCT58mT/Oq4rHMqneW19wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHrqL5AvBc6pFos5AZSYiD7jonW1MB8GA1UdIwQY
MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt
ZjEyODM1ZjAyNDdiLzEvZXVvdmtDOEZ6cWtXaXprQmxKaUlQdU9pZGJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi
LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfE6AwQA
sN5FMA0GCSqGSIb3DQEBCwUAA4IBAQAr+DY1hLlo0xULMGYSEuB7B1X8lE4Jsf3j
QPsTqUHw2Jnou8pafg9UhmUfqaXnmsEoPyQEQutfwS3WgJWQqlmhcqAn12jN4mJz
Hhlk5hT64nd1B47t6d6mzrs1zGwrXzevxxefqZ5BYIDZnb9XsvufUEa69SfkBr+D
OkILoOVNu/zDiNVqV8ENe+G9NrTCpJsXVoc2LZSeTT4gihNtizvUwcJH6wqKHyLi
Sar1/g64qNV8r/MwJW3dvVDRihRr5NcUd2y7sCNyzJ3EX3jwQMauppcS9264Bo3L
16DdZsuYSsgcAqdJTi7WikluSRtGWktW6A/J6+/DMoiKFHJtDEK5
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:53 2025 by rpki-client