Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ePEY-OvNb5lRfmn8bdNkVwoufIc.roa
File: ePEY-OvNb5lRfmn8bdNkVwoufIc.roa (raw, json)
Hash identifier: waMVDfU557kvvA8oYsX2Z8+jr8xTt0T1pl/hE8kaxzI=
Subject key identifier: 78:F1:18:F8:EB:CD:6F:99:51:7E:69:FC:6D:D3:64:57:0A:2E:7C:87
Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial: 019424B280A79F5D0D2B4134D8B766289E14
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ePEY-OvNb5lRfmn8bdNkVwoufIc.roa
Signing time: Thu 02 Jan 2025 01:47:45 +0000
ROA not before: Thu 02 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35663
IP address blocks: 2001:1620:2015::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:80:a7:9f:5d:0d:2b:41:34:d8:b7:66:28:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f118f8ebcd6f99517e69fc6dd364570a2e7c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:fd:04:13:d1:8e:a7:6c:60:40:6c:52:8a:
ef:37:da:d4:0f:8d:70:47:bc:2a:64:78:ef:36:f1:
e0:c9:37:0b:9d:55:96:e0:1a:54:70:79:33:0e:4a:
a0:e2:02:91:f9:a3:31:2c:3c:ec:7e:a4:c5:57:25:
3d:98:af:b0:88:02:cc:97:23:dc:20:2c:29:38:32:
05:f9:46:c4:b3:f9:12:58:6f:29:89:75:d7:5b:2f:
42:08:82:24:eb:43:43:8a:22:28:ba:c0:ba:e0:6b:
f7:7f:f8:ea:6c:28:01:7f:1b:6b:6c:52:74:22:8a:
93:f6:bc:2a:ff:ca:e7:3f:57:c0:44:62:eb:c3:27:
e2:11:6f:42:a5:0d:ba:d2:38:2e:83:e9:7c:10:67:
8f:00:a2:87:65:dd:d9:22:d4:11:fc:ac:94:45:f7:
1a:7e:de:bd:e7:ec:ec:64:70:37:fa:af:b5:28:a0:
77:c5:eb:e4:06:12:4c:50:02:11:7a:f3:ca:45:de:
34:7d:51:85:58:cb:f8:00:bc:11:21:34:c9:82:25:
74:50:a6:5c:3d:cb:c8:fb:c5:69:8c:3f:73:26:19:
76:12:31:c5:2a:7c:4b:e2:d1:67:bf:7a:ab:0c:0d:
05:fe:ac:62:55:8d:ec:e3:5c:74:ce:97:f0:7e:c3:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F1:18:F8:EB:CD:6F:99:51:7E:69:FC:6D:D3:64:57:0A:2E:7C:87
X509v3 Authority Key Identifier:
keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/ePEY-OvNb5lRfmn8bdNkVwoufIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1620:2015::/48
Signature Algorithm: sha256WithRSAEncryption
41:5f:9d:2b:d5:97:c9:69:fd:4c:4c:9f:5a:6f:c4:b0:53:22:
18:50:8f:69:96:f5:4a:9d:04:68:f5:8f:55:53:f8:9a:25:cb:
17:fe:f6:3c:e5:46:e2:39:5e:a8:00:be:8d:31:48:0c:ae:fb:
dd:b1:d9:a5:6e:2e:35:e8:79:5b:19:37:90:dd:53:3c:87:e0:
47:ce:07:b1:29:11:7a:b0:45:bf:97:62:a9:ca:da:cf:bd:70:
b7:fa:32:05:75:42:c6:d4:bf:9e:25:8d:df:2b:ac:d9:8a:ef:
93:a3:38:21:be:18:3c:0e:a7:e1:9a:80:70:ce:3a:ea:75:de:
d3:f4:46:80:d1:6a:9e:2d:fd:61:63:17:eb:67:6e:93:c9:e1:
08:34:7c:d1:ff:3b:ec:95:0f:c1:a9:dc:15:2c:44:d8:bd:a8:
28:31:94:62:48:88:21:c0:38:17:1c:d9:69:42:f4:f9:4b:e8:
11:ac:0b:30:2c:25:c1:87:a5:d0:83:0d:1e:ab:98:a1:12:a1:
c2:cc:0c:1d:01:cc:4a:70:4f:74:00:a7:3e:ac:7b:a9:f8:6b:
2d:8e:3a:3e:7c:bf:aa:48:73:61:65:07:0b:29:8a:1a:3c:97:
5e:d3:84:cb:3f:a3:67:85:6a:5f:f6:93:e9:5a:b8:68:d8:8b:
5f:11:c3:f2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQksoCnn10NK0E02LdmKJ4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDc5NTE0OTU5Mzk3YzVlM2ZhNzZlMWVhNDk1ZThlMWY2
YzMxOWIwHhcNMjUwMTAyMDE0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGYxMThmOGViY2Q2Zjk5NTE3ZTY5ZmM2ZGQzNjQ1NzBhMmU3Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRL9BBPRjqdsYEBsUorvN9rUD41w
R7wqZHjvNvHgyTcLnVWW4BpUcHkzDkqg4gKR+aMxLDzsfqTFVyU9mK+wiALMlyPc
ICwpODIF+UbEs/kSWG8piXXXWy9CCIIk60NDiiIousC64Gv3f/jqbCgBfxtrbFJ0
IoqT9rwq/8rnP1fARGLrwyfiEW9CpQ260jgug+l8EGePAKKHZd3ZItQR/KyURfca
ft695+zsZHA3+q+1KKB3xevkBhJMUAIRevPKRd40fVGFWMv4ALwRITTJgiV0UKZc
PcvI+8VpjD9zJhl2EjHFKnxL4tFnv3qrDA0F/qxiVY3s41x0zpfwfsMDpwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHjxGPjrzW+ZUX5p/G3TZFcKLnyHMB8GA1UdIwQY
MBaAFINHlRSVk5fF4/p24epJXo4fbDGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUt
MWU1ZTQzMGRkNzExLzEvZVBFWS1Pdk5iNWxSZm1uOGJkTmtWd291ZkljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUtMWU1ZTQzMGRkNzEx
LzEvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEWICAV
MA0GCSqGSIb3DQEBCwUAA4IBAQBBX50r1ZfJaf1MTJ9ab8SwUyIYUI9plvVKnQRo
9Y9VU/iaJcsX/vY85UbiOV6oAL6NMUgMrvvdsdmlbi416HlbGTeQ3VM8h+BHzgex
KRF6sEW/l2KpytrPvXC3+jIFdULG1L+eJY3fK6zZiu+Tozghvhg8DqfhmoBwzjrq
dd7T9EaA0WqeLf1hYxfrZ26TyeEINHzR/zvslQ/BqdwVLETYvagoMZRiSIghwDgX
HNlpQvT5S+gRrAswLCXBh6XQgw0eq5ihEqHCzAwdAcxKcE90AKc+rHup+Gstjjo+
fL+qSHNhZQcLKYoaPJde04TLP6NnhWpf9pPpWrho2ItfEcPy
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:54 2025 by rpki-client