Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/eE7CtoiQAT2pLGSZ83z4bGyxlms.roa
File: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (raw, json)
Hash identifier: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=
Subject key identifier: 78:4E:C2:B6:88:90:01:3D:A9:2C:64:99:F3:7C:F8:6C:6C:B1:96:6B
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 019425FC4460EEED67C306FCD495086ABAA9
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/eE7CtoiQAT2pLGSZ83z4bGyxlms.roa
Signing time: Thu 02 Jan 2025 07:47:57 +0000
ROA not before: Thu 02 Jan 2025 07:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8649
IP address blocks: 176.96.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:44:60:ee:ed:67:c3:06:fc:d4:95:08:6a:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Jan 2 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=784ec2b68890013da92c6499f37cf86c6cb1966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:95:b6:da:b8:a5:60:e7:cf:b3:8c:42:f0:
53:9d:36:81:ef:44:bc:85:07:50:37:7a:a6:fc:7b:
1a:03:cc:b1:b7:a6:14:23:80:39:ab:ef:48:4d:5f:
2a:18:fd:da:31:b1:44:97:96:b0:dc:25:b6:ec:05:
12:80:72:46:21:90:b0:09:61:d4:84:8e:69:5e:74:
bd:f5:4e:a4:23:59:48:67:ca:f3:24:a5:c0:a3:0c:
e1:f0:44:1c:fb:9b:86:b3:13:e3:e3:73:f6:84:aa:
d3:40:24:9a:27:77:ad:98:43:8a:02:45:99:df:69:
38:1a:8f:63:bf:03:7b:c4:34:1d:92:23:a4:6c:81:
16:61:c8:06:6c:73:3e:32:5e:f9:67:b7:2d:88:06:
d5:c1:85:e4:ee:e7:77:f4:b8:91:47:27:1b:42:fd:
18:6c:58:e6:53:58:e1:c5:d1:10:5e:45:24:ff:8b:
9a:10:c0:2f:15:2b:bb:d0:be:f5:59:ff:43:39:2c:
eb:34:17:94:16:99:8b:ac:33:e8:3b:be:c8:07:ba:
62:b9:f8:24:56:7a:47:ec:37:8a:dd:4c:14:12:05:
8d:d8:41:fe:61:2d:be:00:47:a3:b1:40:33:b8:db:
98:eb:00:d1:2e:8f:72:14:5a:fd:69:67:8b:7f:0c:
c6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:C2:B6:88:90:01:3D:A9:2C:64:99:F3:7C:F8:6C:6C:B1:96:6B
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/eE7CtoiQAT2pLGSZ83z4bGyxlms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.96.0/19
Signature Algorithm: sha256WithRSAEncryption
92:ec:0a:93:56:0c:9c:23:b5:af:87:f4:fe:4e:65:22:2a:c1:
33:c1:ca:2e:67:e9:8b:30:f1:92:32:c5:0e:82:da:c1:55:4e:
03:97:8e:aa:58:dd:b9:de:ea:4a:da:21:e2:41:18:95:19:8d:
ba:9a:67:30:0b:c8:f4:13:71:bc:2d:2a:2a:9e:21:13:85:df:
13:fe:54:e1:33:97:93:5d:b5:53:7f:86:b5:5d:47:8a:47:ca:
5b:90:22:3b:4d:0d:17:cd:2b:cc:5b:e8:05:9a:03:a8:3c:52:
90:f2:58:b6:27:39:1f:bd:d9:14:87:bd:05:8a:41:0a:d2:2e:
15:f8:c0:c9:42:e4:19:d7:d5:95:60:8b:c7:0c:5e:95:21:fb:
04:87:6a:b6:5d:9a:2c:da:a7:6e:5e:38:24:b8:3d:1f:86:46:
42:33:cf:77:a4:56:47:b1:f9:ef:9d:c3:ae:0a:e1:8a:f0:fd:
2c:fb:df:bd:50:6e:39:25:0d:ca:e1:f1:78:d1:85:aa:d0:bc:
1f:c4:40:87:05:5d:3d:fb:ed:1d:22:8f:0c:a1:aa:ef:b7:b6:
83:72:07:95:4f:ec:08:4b:7b:e3:04:39:9f:19:12:48:d3:f8:
99:f4:ae:3b:d0:f6:92:4c:1a:16:78:d2:e1:a1:03:68:4e:13:
38:33:72:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ERg7u1nwwb81JUIarqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4
OWE3NWYwHhcNMjUwMTAyMDc0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODRlYzJiNjg4OTAwMTNkYTkyYzY0OTlmMzdjZjg2YzZjYjE5NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwqVttq4pWDnz7OMQvBTnTaB70S8
hQdQN3qm/HsaA8yxt6YUI4A5q+9ITV8qGP3aMbFEl5aw3CW27AUSgHJGIZCwCWHU
hI5pXnS99U6kI1lIZ8rzJKXAowzh8EQc+5uGsxPj43P2hKrTQCSaJ3etmEOKAkWZ
32k4Go9jvwN7xDQdkiOkbIEWYcgGbHM+Ml75Z7ctiAbVwYXk7ud39LiRRycbQv0Y
bFjmU1jhxdEQXkUk/4uaEMAvFSu70L71Wf9DOSzrNBeUFpmLrDPoO77IB7piufgk
VnpH7DeK3UwUEgWN2EH+YS2+AEejsUAzuNuY6wDRLo9yFFr9aWeLfwzGpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhOwraIkAE9qSxkmfN8+GxssZZrMB8GA1UdIwQY
MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt
NTJiODE2NjgyOWQ3LzEvZUU3Q3RvaVFBVDJwTEdTWjgzejRiR3l4bG1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3
LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFsGBgMA0G
CSqGSIb3DQEBCwUAA4IBAQCS7AqTVgycI7Wvh/T+TmUiKsEzwcouZ+mLMPGSMsUO
gtrBVU4Dl46qWN253upK2iHiQRiVGY26mmcwC8j0E3G8LSoqniEThd8T/lThM5eT
XbVTf4a1XUeKR8pbkCI7TQ0XzSvMW+gFmgOoPFKQ8li2JzkfvdkUh70FikEK0i4V
+MDJQuQZ19WVYIvHDF6VIfsEh2q2XZos2qduXjgkuD0fhkZCM893pFZHsfnvncOu
CuGK8P0s+9+9UG45JQ3K4fF40YWq0LwfxECHBV09++0dIo8Moarvt7aDcgeVT+wI
S3vjBDmfGRJI0/iZ9K470PaSTBoWeNLhoQNoThM4M3JL
-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:15 2025 by rpki-client