
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/EeXlLUaxcDLbElipDJ5H8yAai5Q.roa
File: EeXlLUaxcDLbElipDJ5H8yAai5Q.roa (raw, json)
Hash identifier: m4pbfNUBTDOg36Lb+U7JFF61n+3WbNo1sKMlthjA6E8=
Subject key identifier: 11:E5:E5:2D:46:B1:70:32:DB:12:58:A9:0C:9E:47:F3:20:1A:8B:94
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0194BE76D5C44A670D47A5F0D255C34F04AD
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/EeXlLUaxcDLbElipDJ5H8yAai5Q.roa
Signing time: Fri 31 Jan 2025 22:24:06 +0000
ROA not before: Fri 31 Jan 2025 22:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 84.239.18.0/24 maxlen: 24
84.239.29.0/24 maxlen: 24
84.239.30.0/23 maxlen: 23
84.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:be:76:d5:c4:4a:67:0d:47:a5:f0:d2:55:c3:4f:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 31 22:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e5e52d46b17032db1258a90c9e47f3201a8b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:65:4b:1e:dc:f7:01:cc:6e:5e:89:fe:b9:
17:c3:84:4c:a6:69:c5:82:33:ba:4a:53:cf:ba:85:
0c:c0:59:b6:cd:b1:1a:dd:87:c8:fa:f0:ff:6e:fd:
c4:09:c9:d3:1b:b7:e4:aa:59:f2:d9:d3:5b:e9:f3:
ac:d7:29:e5:db:2d:4a:b7:43:61:35:44:33:b3:7c:
b3:0d:05:c6:67:8a:e3:45:7f:26:6c:0c:e5:dc:28:
82:f3:1d:49:c6:05:05:84:15:51:9c:2b:e4:ad:a9:
8d:19:ac:a9:59:57:72:f7:55:16:c6:b9:5c:e4:59:
00:30:e5:7e:6f:f0:63:1d:f3:34:a2:4e:58:de:ec:
51:24:ad:07:c7:db:84:bf:5f:a6:03:a6:44:f9:78:
50:e9:cf:15:a0:c8:81:ae:65:e3:5e:3b:22:48:b6:
9a:60:92:c8:02:31:6f:7e:96:b4:55:02:a6:d4:d6:
1b:33:e1:ea:d3:b4:5f:5a:c0:21:3a:71:73:8d:89:
48:7c:8b:67:be:6d:c0:3e:91:ce:b0:92:9e:a9:fd:
79:e7:5e:4b:e3:fe:72:55:5b:ec:1b:2d:b4:17:36:
29:71:af:3b:a8:6d:45:23:c6:cd:4c:c2:c9:00:a2:
14:0f:a8:c6:2d:07:26:c5:af:dd:b7:2b:b8:5e:e4:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:E5:2D:46:B1:70:32:DB:12:58:A9:0C:9E:47:F3:20:1A:8B:94
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/EeXlLUaxcDLbElipDJ5H8yAai5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
84.239.29.0-84.239.31.255
Signature Algorithm: sha256WithRSAEncryption
17:41:7d:77:01:a1:b1:1d:e5:2f:c2:9b:c5:43:fe:d9:f4:5b:
b5:e6:06:73:e2:50:0b:a0:2a:a9:4a:83:f1:58:87:c5:26:b5:
9c:56:29:5a:68:cc:89:aa:09:05:25:05:1a:01:bc:57:c1:46:
7c:d4:15:e5:1c:93:55:e1:d0:09:b9:62:2a:4a:a2:15:3b:bd:
ae:2c:5d:19:da:3f:bc:a6:77:c8:d6:70:e1:aa:a6:8c:6c:f2:
66:9b:02:53:01:58:db:ca:b3:7a:1e:3a:6e:b7:15:9f:6d:fe:
9b:b3:03:fd:3f:03:aa:d8:ca:87:68:94:39:d4:80:4b:3b:f9:
e0:f7:7e:12:28:a6:ba:9a:c6:01:d8:7a:8c:23:6d:7c:6a:a9:
41:78:e9:01:f7:45:21:40:f3:aa:bb:9b:03:99:2e:88:3e:d9:
df:d8:e8:2d:1d:9f:a1:21:41:b0:91:53:44:10:bc:60:07:2e:
38:83:e9:bf:d2:76:84:22:0a:5f:8d:89:c4:03:7d:3a:b2:d6:
b2:81:d1:86:02:16:0c:2a:21:30:e4:82:e5:da:8c:db:d0:96:
ad:26:30:63:1d:c6:90:3f:b5:e2:98:7a:b5:c6:7c:0f:6a:fd:
0a:e3:d5:5a:f2:8d:b3:83:83:03:f5:1d:7d:ca:c6:51:0b:0f:
ed:41:51:f4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZS+dtXESmcNR6Xw0lXDTwStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjUwMTMxMjIyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWU1ZTUyZDQ2YjE3MDMyZGIxMjU4YTkwYzllNDdmMzIwMWE4Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHxlSx7c9wHMbl6J/rkXw4RMpmnF
gjO6SlPPuoUMwFm2zbEa3YfI+vD/bv3ECcnTG7fkqlny2dNb6fOs1ynl2y1Kt0Nh
NUQzs3yzDQXGZ4rjRX8mbAzl3CiC8x1JxgUFhBVRnCvkramNGaypWVdy91UWxrlc
5FkAMOV+b/BjHfM0ok5Y3uxRJK0Hx9uEv1+mA6ZE+XhQ6c8VoMiBrmXjXjsiSLaa
YJLIAjFvfpa0VQKm1NYbM+Hq07RfWsAhOnFzjYlIfItnvm3APpHOsJKeqf15515L
4/5yVVvsGy20FzYpca87qG1FI8bNTMLJAKIUD6jGLQcmxa/dtyu4XuRITwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBHl5S1GsXAy2xJYqQyeR/MgGouUMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvRWVYbExVYXhjRExiRWxpcERKNUg4eUFhaTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAVO8SMAwD
BABU7x0DBAVU7wAwDQYJKoZIhvcNAQELBQADggEBABdBfXcBobEd5S/Cm8VD/tn0
W7XmBnPiUAugKqlKg/FYh8UmtZxWKVpozImqCQUlBRoBvFfBRnzUFeUck1Xh0Am5
YipKohU7va4sXRnaP7ymd8jWcOGqpoxs8mabAlMBWNvKs3oeOm63FZ9t/puzA/0/
A6rYyodolDnUgEs7+eD3fhIoprqaxgHYeowjbXxqqUF46QH3RSFA86q7mwOZLog+
2d/Y6C0dn6EhQbCRU0QQvGAHLjiD6b/SdoQiCl+NicQDfTqy1rKB0YYCFgwqITDk
guXajNvQlq0mMGMdxpA/teKYerXGfA9q/Qrj1VryjbODgwP1HX3KxlELD+1BUfQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:31 2025 by rpki-client