Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa
File: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (raw, json)
Hash identifier: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=
Subject key identifier: 78:AB:74:89:57:19:41:1F:6C:FB:02:A7:B0:26:8B:9D:10:56:C5:BD
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 01941FFA0E4067E8AEDD49A33E7E5029F77A
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50171
IP address blocks: 91.216.0.0/24 maxlen: 24
176.57.192.0/21 maxlen: 21
193.104.160.0/24 maxlen: 24
2a00:f680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:40:67:e8:ae:dd:49:a3:3e:7e:50:29:f7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78ab74895719411f6cfb02a7b0268b9d1056c5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:b1:90:58:a1:ae:93:95:bb:7a:bf:b2:b7:
9a:a6:bd:2e:00:70:a5:30:41:56:82:ee:d3:fb:d9:
1c:44:02:74:fe:d7:40:b1:4d:45:98:a1:88:48:f7:
2f:ff:79:b7:96:9d:4a:58:20:d0:82:04:96:7d:47:
dc:c2:2f:bd:ec:5b:93:d1:83:0c:5b:cb:d4:64:2d:
f6:b4:a6:a0:6a:f4:dc:2e:3c:99:a7:cf:ef:af:ee:
a1:5a:fc:00:71:fb:9e:9e:ad:72:b9:ad:69:d0:e4:
a2:0e:b6:69:fb:e6:fd:20:e4:3a:0d:a7:b0:2a:2a:
66:26:91:3c:6d:14:01:93:49:97:71:1a:f0:78:05:
57:94:cb:c4:a9:cb:fd:8f:be:56:2f:a0:cb:12:b4:
f0:bb:02:62:d4:49:18:b6:f7:5a:c4:0e:dc:e5:dc:
29:40:ee:d9:63:e9:c3:0c:53:63:4d:46:e8:a4:45:
ee:f7:d3:a0:e5:82:b7:f6:12:55:88:52:03:c5:21:
4b:39:11:46:50:70:6c:52:f4:3c:17:58:9a:32:a6:
0e:7d:56:44:64:5c:1c:6d:72:95:6f:16:27:0d:5e:
b1:b0:e2:9b:98:23:cc:9f:b3:10:e2:a0:71:20:5b:
d1:3b:ae:a1:26:e0:40:50:3e:b2:c3:62:07:bf:0f:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:74:89:57:19:41:1F:6C:FB:02:A7:B0:26:8B:9D:10:56:C5:BD
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.0.0/24
176.57.192.0/21
193.104.160.0/24
IPv6:
2a00:f680::/32
Signature Algorithm: sha256WithRSAEncryption
33:af:ff:71:a4:19:b4:30:47:76:b4:d7:1f:52:d0:40:da:71:
2c:58:90:87:b2:30:21:63:f9:59:6f:d0:4d:fc:45:b1:18:5c:
54:8e:3d:84:f5:ed:44:11:97:3a:47:5d:8c:8f:95:b8:71:05:
eb:57:b7:32:ca:6c:29:33:a4:cf:70:a5:41:b1:31:d6:07:d9:
45:58:70:e7:63:8f:c1:93:ef:36:ef:f0:5d:7f:3f:b4:89:24:
cb:6a:6b:67:cd:a1:a1:40:72:2d:87:55:94:5d:08:a5:e4:a0:
52:f0:a0:82:59:28:21:fa:a9:e8:b4:32:e9:c2:3e:f3:b8:d8:
e5:fa:17:34:0d:f5:a2:97:32:f0:05:1c:09:08:fc:33:71:44:
6d:91:da:e8:af:24:9e:94:dc:25:41:a4:be:3d:0b:ad:23:3d:
e7:3f:70:55:2c:83:35:8a:ed:85:42:3c:a0:ab:42:9b:b2:7a:
c2:2e:df:98:35:88:1d:02:e9:ff:90:03:04:1d:6c:07:97:e2:
49:7f:85:44:4b:b3:be:90:c1:94:29:eb:92:d9:08:78:e7:37:
00:0b:36:c7:61:e5:1e:b3:81:a5:2e:00:91:4b:f4:36:6c:d5:
26:28:86:6d:04:59:cf:00:76:bc:16:06:95:b5:4d:f8:52:3f:
fb:7e:67:b4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQf+g5AZ+iu3UmjPn5QKfd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OGU3MTNiMDdjNzlmOTdiNDdlOWYwMzIxNzY4YjA5NDg4
YjdhMDMwHhcNMjUwMTAxMDM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGFiNzQ4OTU3MTk0MTFmNmNmYjAyYTdiMDI2OGI5ZDEwNTZjNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhKxkFihrpOVu3q/sreapr0uAHCl
MEFWgu7T+9kcRAJ0/tdAsU1FmKGISPcv/3m3lp1KWCDQggSWfUfcwi+97FuT0YMM
W8vUZC32tKagavTcLjyZp8/vr+6hWvwAcfuenq1yua1p0OSiDrZp++b9IOQ6Daew
KipmJpE8bRQBk0mXcRrweAVXlMvEqcv9j75WL6DLErTwuwJi1EkYtvdaxA7c5dwp
QO7ZY+nDDFNjTUbopEXu99Og5YK39hJViFIDxSFLORFGUHBsUvQ8F1iaMqYOfVZE
ZFwcbXKVbxYnDV6xsOKbmCPMn7MQ4qBxIFvRO66hJuBAUD6yw2IHvw8AZQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHirdIlXGUEfbPsCp7Ami50QVsW9MB8GA1UdIwQY
MBaAFGiOcTsHx5+XtH6fAyF2iwlIi3oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYt
Njk1ZjRhOTI3NjEwLzEvZUt0MGlWY1pRUjlzLXdLbnNDYUxuUkJXeGIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZWJlYjktMzFhOC00NTUwLTgzOTYtNjk1ZjRhOTI3NjEw
LzEvYUk1eE93ZkhuNWUwZnA4RElYYUxDVWlMZWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9gAAwQD
sDnAAwQAwWigMA0EAgACMAcDBQAqAPaAMA0GCSqGSIb3DQEBCwUAA4IBAQAzr/9x
pBm0MEd2tNcfUtBA2nEsWJCHsjAhY/lZb9BN/EWxGFxUjj2E9e1EEZc6R12Mj5W4
cQXrV7cyymwpM6TPcKVBsTHWB9lFWHDnY4/Bk+827/Bdfz+0iSTLamtnzaGhQHIt
h1WUXQil5KBS8KCCWSgh+qnotDLpwj7zuNjl+hc0DfWilzLwBRwJCPwzcURtkdro
rySelNwlQaS+PQutIz3nP3BVLIM1iu2FQjygq0KbsnrCLt+YNYgdAun/kAMEHWwH
l+JJf4VES7O+kMGUKeuS2Qh45zcACzbHYeUes4GlLgCRS/Q2bNUmKIZtBFnPAHa8
FgaVtU34Uj/7fme0
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:04:36 2025 by rpki-client