Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aes13kq65f5E3oAWN53ap7G0ZhA.roa
File: aes13kq65f5E3oAWN53ap7G0ZhA.roa (raw, json)
Hash identifier: YT1c35Zq9dyQPPn6Y7mwPw38U77LyOhKHvCPJ017zEI=
Subject key identifier: 69:EB:35:DE:4A:BA:E5:FE:44:DE:80:16:37:9D:DA:A7:B1:B4:66:10
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64C21B5F158F11C63F2031CE0E03D2
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aes13kq65f5E3oAWN53ap7G0ZhA.roa
Signing time: Thu 09 Jan 2025 09:28:24 +0000
ROA not before: Thu 09 Jan 2025 09:28:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205872
IP address blocks: 79.124.72.0/24 maxlen: 24
83.222.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:c2:1b:5f:15:8f:11:c6:3f:20:31:ce:0e:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69eb35de4abae5fe44de8016379ddaa7b1b46610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:7b:aa:08:1b:61:ac:fa:b4:3f:f5:4d:57:
39:a9:6f:90:8c:54:de:01:e7:15:21:49:5c:07:92:
75:bc:9d:cf:fd:bd:25:4b:9d:e7:7e:fd:3a:01:8f:
c4:40:75:18:fd:f5:75:f7:a6:1b:f0:e7:6b:53:ae:
23:53:45:23:f2:6b:d6:0c:8d:43:aa:fe:61:9a:eb:
de:9e:4f:d5:cb:8c:c8:fb:02:3b:1a:b0:2d:e2:f4:
37:2d:67:de:c1:e5:00:43:27:cb:91:14:e6:60:ec:
ec:95:f3:91:06:16:33:99:7d:f2:34:26:07:cf:ca:
c7:db:3b:82:26:f8:a5:39:e0:3b:61:71:35:13:53:
80:8c:c8:1c:65:cc:fc:21:1b:4b:a0:1b:20:34:c4:
14:db:e1:ed:8e:fa:02:b9:a2:d4:72:c6:1b:a4:94:
1d:26:76:c8:9d:7b:67:21:77:80:e9:7c:5b:09:a3:
28:24:89:fc:0b:4d:5e:e1:82:99:c8:4e:e7:30:f5:
f4:ae:03:e1:77:88:4b:c3:70:02:37:cc:f3:d5:8d:
f8:b8:cf:8a:a3:26:b8:b3:35:d6:57:3a:c0:7d:14:
7f:c7:3b:51:17:6c:ae:e9:29:28:93:70:c7:95:a1:
ed:6b:e6:66:3e:4b:37:de:84:12:74:5e:72:14:ed:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EB:35:DE:4A:BA:E5:FE:44:DE:80:16:37:9D:DA:A7:B1:B4:66:10
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aes13kq65f5E3oAWN53ap7G0ZhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.72.0/24
83.222.189.0/24
Signature Algorithm: sha256WithRSAEncryption
97:29:57:21:d5:51:e7:29:0a:1b:74:52:fa:79:2a:21:a8:31:
55:a7:cf:49:5d:71:e0:2b:b2:87:be:5a:20:77:be:e9:df:63:
16:75:00:fb:7f:2d:ee:35:9e:c5:9a:be:45:39:7e:18:54:b9:
4a:09:45:42:f3:e4:4a:36:d2:0c:fb:2e:52:74:5f:d1:19:12:
1d:e2:55:18:30:32:10:be:06:2c:64:d8:42:1c:a2:d7:1c:c4:
db:bf:14:1a:71:c2:f9:bb:f7:a0:37:04:2a:03:fd:d6:26:7c:
4a:fa:1d:3b:20:33:ca:19:17:78:02:84:16:cb:c0:50:ae:15:
b7:29:90:3e:ac:d8:c0:54:33:1a:a5:c3:30:49:16:ca:c8:a7:
d5:1d:1f:ac:93:67:0e:ee:13:87:5d:63:f3:30:9f:1f:7d:49:
aa:16:01:74:d9:1d:9a:59:fc:44:87:5d:95:89:cf:5e:c1:0f:
58:6d:88:11:58:36:ff:6e:66:e8:ee:2d:9c:27:07:7d:c2:6f:
e1:cf:82:c4:a3:ed:0a:4e:57:0b:13:33:4a:4a:e7:d1:9c:30:
0d:8b:fe:e2:73:c6:fc:d9:f8:f2:e9:e5:19:03:97:88:7a:0a:
87:eb:25:b7:49:2e:43:e6:8f:24:7a:4e:29:8b:cc:0d:41:18:
40:5e:22:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRKZMIbXxWPEcY/IDHODgPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTA5MDkyODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWViMzVkZTRhYmFlNWZlNDRkZTgwMTYzNzlkZGFhN2IxYjQ2NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk17qggbYaz6tD/1TVc5qW+QjFTe
AecVIUlcB5J1vJ3P/b0lS53nfv06AY/EQHUY/fV196Yb8OdrU64jU0Uj8mvWDI1D
qv5hmuvenk/Vy4zI+wI7GrAt4vQ3LWfeweUAQyfLkRTmYOzslfORBhYzmX3yNCYH
z8rH2zuCJvilOeA7YXE1E1OAjMgcZcz8IRtLoBsgNMQU2+HtjvoCuaLUcsYbpJQd
JnbInXtnIXeA6XxbCaMoJIn8C01e4YKZyE7nMPX0rgPhd4hLw3ACN8zz1Y34uM+K
oya4szXWVzrAfRR/xztRF2yu6Skok3DHlaHta+ZmPks33oQSdF5yFO1kvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGnrNd5KuuX+RN6AFjed2qextGYQMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvYWVzMTNrcTY1ZjVFM29BV041M2FwN0cwWmhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT3xIAwQA
U969MA0GCSqGSIb3DQEBCwUAA4IBAQCXKVch1VHnKQobdFL6eSohqDFVp89JXXHg
K7KHvlogd77p32MWdQD7fy3uNZ7Fmr5FOX4YVLlKCUVC8+RKNtIM+y5SdF/RGRId
4lUYMDIQvgYsZNhCHKLXHMTbvxQaccL5u/egNwQqA/3WJnxK+h07IDPKGRd4AoQW
y8BQrhW3KZA+rNjAVDMapcMwSRbKyKfVHR+sk2cO7hOHXWPzMJ8ffUmqFgF02R2a
WfxEh12Vic9ewQ9YbYgRWDb/bmbo7i2cJwd9wm/hz4LEo+0KTlcLEzNKSufRnDAN
i/7ic8b82fjy6eUZA5eIegqH6yW3SS5D5o8kek4pi8wNQRhAXiIp
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:02 2025 by rpki-client