Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/eEU3n6TnMbJK4m_cpI79DREXXss.roa
File: eEU3n6TnMbJK4m_cpI79DREXXss.roa (raw, json)
Hash identifier: /Y4u8pK/zpaeGgWa+MttJ6f/RKbBe0vkUpCyQaR261k=
Subject key identifier: 78:45:37:9F:A4:E7:31:B2:4A:E2:6F:DC:A4:8E:FD:0D:11:17:5E:CB
Certificate issuer: /CN=ee720dfe6719724e230102e3425c6c2df247d879
Certificate serial: 0194228DA59FA53F4C1DD1A103F08EA5CE9C
Authority key identifier: EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/eEU3n6TnMbJK4m_cpI79DREXXss.roa
Signing time: Wed 01 Jan 2025 15:48:15 +0000
ROA not before: Wed 01 Jan 2025 15:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201214
IP address blocks: 185.82.4.0/22 maxlen: 24
185.82.4.0/24 maxlen: 24
185.82.5.0/24 maxlen: 24
2a03:66a0::/32 maxlen: 48
2a03:66a0:1000::/48 maxlen: 48
2a03:66a0:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a5:9f:a5:3f:4c:1d:d1:a1:03:f0:8e:a5:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee720dfe6719724e230102e3425c6c2df247d879
Validity
Not Before: Jan 1 15:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7845379fa4e731b24ae26fdca48efd0d11175ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:cd:8a:e1:b3:f9:25:a2:6c:28:1f:a3:90:
75:30:53:2f:60:00:5f:c1:e8:b9:9d:c5:48:4e:a0:
1d:d8:99:d8:04:cd:6b:0b:ac:57:94:c1:b8:2a:60:
97:9c:ca:c1:b3:5d:2d:4b:57:fb:00:db:77:62:77:
fb:e7:d3:20:af:06:e9:c4:0a:29:53:f6:df:1a:2b:
77:5e:c8:ab:f5:20:cb:d2:07:ec:b3:6d:51:60:66:
12:45:b8:92:5c:db:5a:93:6a:db:01:cd:30:ba:e4:
7b:d4:6e:f0:46:b6:4e:78:f1:46:27:f1:a7:9e:4a:
86:81:4a:d8:6c:91:64:4c:07:f4:53:2a:d8:12:fb:
e7:67:d6:f5:4d:67:f8:40:9c:d2:3f:27:6e:7b:ac:
77:4e:6d:8c:1d:c3:4f:53:e7:7f:8a:67:59:ca:f8:
bc:e3:3e:8d:d6:45:52:18:93:26:2e:ad:52:94:60:
4f:c4:e7:15:c7:4c:3a:67:59:f9:f9:db:b1:ad:f2:
17:02:88:e9:9b:89:cd:a2:c3:d3:e0:12:4e:85:1d:
16:6b:f1:25:94:a3:65:90:06:dc:24:d8:06:1b:3c:
af:81:c6:08:a4:b1:1d:31:14:5a:8c:e2:e7:35:e8:
aa:e2:3f:17:05:55:00:6b:10:f2:b8:93:09:82:2a:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:37:9F:A4:E7:31:B2:4A:E2:6F:DC:A4:8E:FD:0D:11:17:5E:CB
X509v3 Authority Key Identifier:
keyid:EE:72:0D:FE:67:19:72:4E:23:01:02:E3:42:5C:6C:2D:F2:47:D8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nIN_mcZck4jAQLjQlxsLfJH2Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/eEU3n6TnMbJK4m_cpI79DREXXss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7c61b2-8fbc-4b2d-834a-249f0a313bbc/1/7nIN_mcZck4jAQLjQlxsLfJH2Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.4.0/22
IPv6:
2a03:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
82:7a:be:9f:84:72:3c:89:56:d6:13:8a:e4:a5:62:9d:3d:2e:
7a:0b:6e:11:30:86:f6:27:14:10:54:26:69:05:ca:90:71:84:
a3:b7:14:5e:f5:6d:f5:5d:56:57:3a:94:72:9b:39:6b:1f:65:
c4:a1:68:fe:63:68:0c:2b:89:5a:8d:ba:96:87:b9:89:54:ec:
8c:67:fe:9d:ea:f2:33:9f:4e:d3:a9:4f:9c:13:93:28:34:a9:
3d:b0:fb:fb:62:21:ed:8f:58:34:92:71:fc:86:a7:91:c3:f1:
bb:c5:1d:da:5b:8e:2e:90:16:ea:12:0b:28:25:2f:5a:a9:5f:
27:36:45:df:e0:69:99:43:7c:23:12:76:75:b0:db:0d:8d:bb:
41:4c:de:9b:3e:eb:06:b0:36:6b:e5:42:b1:6f:01:3d:e6:b7:
45:e6:e6:d6:b9:f4:27:f2:1d:4e:55:de:42:77:0d:4e:85:c0:
95:f3:eb:87:c3:40:38:56:a0:f5:25:5a:26:cb:43:b0:a1:ae:
01:32:b4:97:44:09:11:35:33:c7:66:68:39:da:07:5f:86:37:
5b:ed:55:ee:f2:80:52:97:82:3c:b7:a6:c1:d6:04:ca:c4:17:
c9:73:d1:6c:f2:c3:77:08:61:7b:a3:a5:b5:73:33:a5:cd:b8:
c7:ea:ab:a7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijaWfpT9MHdGhA/COpc6cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNzIwZGZlNjcxOTcyNGUyMzAxMDJlMzQyNWM2YzJkZjI0
N2Q4NzkwHhcNMjUwMTAxMTU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODQ1Mzc5ZmE0ZTczMWIyNGFlMjZmZGNhNDhlZmQwZDExMTc1ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDLNiuGz+SWibCgfo5B1MFMvYABf
wei5ncVITqAd2JnYBM1rC6xXlMG4KmCXnMrBs10tS1f7ANt3Ynf759MgrwbpxAop
U/bfGit3Xsir9SDL0gfss21RYGYSRbiSXNtak2rbAc0wuuR71G7wRrZOePFGJ/Gn
nkqGgUrYbJFkTAf0UyrYEvvnZ9b1TWf4QJzSPydue6x3Tm2MHcNPU+d/imdZyvi8
4z6N1kVSGJMmLq1SlGBPxOcVx0w6Z1n5+duxrfIXAojpm4nNosPT4BJOhR0Wa/El
lKNlkAbcJNgGGzyvgcYIpLEdMRRajOLnNeiq4j8XBVUAaxDyuJMJgioluwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHhFN5+k5zGySuJv3KSO/Q0RF17LMB8GA1UdIwQY
MBaAFO5yDf5nGXJOIwEC40JcbC3yR9h5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN25JTl9tY1pjazRqQVFMalFseHNMZkpIMkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS83YzYxYjItOGZiYy00YjJkLTgzNGEt
MjQ5ZjBhMzEzYmJjLzEvZUVVM242VG5NYkpLNG1fY3BJNzlEUkVYWHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS83YzYxYjItOGZiYy00YjJkLTgzNGEtMjQ5ZjBhMzEzYmJj
LzEvN25JTl9tY1pjazRqQVFMalFseHNMZkpIMkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVIEMA0E
AgACMAcDBQAqA2agMA0GCSqGSIb3DQEBCwUAA4IBAQCCer6fhHI8iVbWE4rkpWKd
PS56C24RMIb2JxQQVCZpBcqQcYSjtxRe9W31XVZXOpRymzlrH2XEoWj+Y2gMK4la
jbqWh7mJVOyMZ/6d6vIzn07TqU+cE5MoNKk9sPv7YiHtj1g0knH8hqeRw/G7xR3a
W44ukBbqEgsoJS9aqV8nNkXf4GmZQ3wjEnZ1sNsNjbtBTN6bPusGsDZr5UKxbwE9
5rdF5ubWufQn8h1OVd5Cdw1OhcCV8+uHw0A4VqD1JVomy0Owoa4BMrSXRAkRNTPH
Zmg52gdfhjdb7VXu8oBSl4I8t6bB1gTKxBfJc9Fs8sN3CGF7o6W1czOlzbjH6qun
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:55 2025 by rpki-client