Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/Ep6x42DXRSqizolUteEfvKxUcLA.roa
File: Ep6x42DXRSqizolUteEfvKxUcLA.roa (raw, json)
Hash identifier: R7QtcNnXyeV8OJfFTG/3xT0jdYWPM+BRX6IIEmRZyXk=
Subject key identifier: 12:9E:B1:E3:60:D7:45:2A:A2:CE:89:54:B5:E1:1F:BC:AC:54:70:B0
Certificate issuer: /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial: 0194206864EEC188221B0D20EA5DE18806D6
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/Ep6x42DXRSqizolUteEfvKxUcLA.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205065
IP address blocks: 130.193.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:ee:c1:88:22:1b:0d:20:ea:5d:e1:88:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=129eb1e360d7452aa2ce8954b5e11fbcac5470b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:a5:61:f8:c8:ab:53:f0:2d:bc:3d:2a:ce:
df:05:f7:3d:b4:bf:8d:a5:8d:95:72:f2:55:2c:62:
f4:d5:b2:33:e8:c4:2d:69:77:e9:c6:45:eb:da:85:
ce:51:78:08:9d:5a:cb:4b:bc:b8:07:b1:7f:c2:d5:
aa:fb:98:d8:99:53:5e:c5:ff:c7:47:10:2d:01:5f:
0e:55:57:87:d0:57:e4:8e:31:d5:11:1f:53:52:bd:
c1:38:03:fc:64:38:fc:48:a8:68:f9:85:a8:a0:56:
6b:80:02:28:4b:2b:47:a8:40:92:df:4d:3c:88:45:
70:34:af:90:99:dd:a9:16:3e:f1:a0:e9:a4:f4:49:
c6:41:05:62:24:1e:25:53:f0:27:3d:be:49:06:36:
a3:a4:43:93:b9:c4:e7:e2:c6:8d:18:cd:ab:6c:a1:
3d:95:95:41:4a:18:7c:bd:98:4b:d9:4b:f3:29:aa:
96:d9:44:10:b2:33:28:c1:55:32:d4:79:b2:08:35:
7c:e9:4d:c7:c1:88:76:cc:f4:8e:37:37:1e:b7:2d:
a0:e8:c7:6d:81:e5:3c:a8:41:c9:de:fd:71:54:02:
d1:f1:68:02:0b:eb:c8:4b:ae:b4:02:86:63:be:b4:
ac:24:82:01:fa:6a:c5:8d:2c:7c:60:34:a3:15:8a:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:B1:E3:60:D7:45:2A:A2:CE:89:54:B5:E1:1F:BC:AC:54:70:B0
X509v3 Authority Key Identifier:
keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/Ep6x42DXRSqizolUteEfvKxUcLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.76.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e7:d7:45:86:85:ee:97:c7:09:d7:e2:84:de:99:7f:4d:f4:
11:e7:25:8d:d7:8f:fd:dc:93:7c:b9:e4:86:93:b6:12:65:db:
62:5d:23:ef:d0:c1:c5:78:f4:51:e3:d4:cf:93:75:4e:4c:32:
55:f5:07:0e:8e:00:38:77:cf:68:22:23:be:23:1d:b1:62:02:
fa:cb:6a:a3:83:99:5c:b3:71:80:3e:3d:ee:48:ad:04:13:cc:
54:8b:fa:05:04:e9:c4:d0:5b:be:e2:fd:52:27:f3:63:64:2d:
d4:86:86:90:ad:05:63:6f:98:10:39:14:b7:bd:82:8d:e5:38:
03:fd:44:b4:eb:2d:5b:b2:c9:3e:8c:2a:0d:21:43:f5:2b:5e:
86:20:a3:68:43:52:a2:ab:42:ee:79:69:61:88:eb:9b:15:dc:
ea:c5:95:61:7a:eb:6c:66:7c:a3:32:f6:52:13:1d:fb:98:8b:
56:62:c9:29:66:90:7f:01:fb:00:42:b5:49:04:58:c0:ed:d2:
1b:13:c0:17:db:bb:42:66:c0:d5:c8:44:85:54:71:04:c2:75:
17:e1:1f:11:91:8d:f6:02:0e:46:93:8a:e2:3e:21:96:90:92:
b5:42:2c:1e:42:6e:ac:d2:2b:65:ff:70:8d:ec:f3:15:8a:00:
51:42:f5:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaGTuwYgiGw0g6l3hiAbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZDM2ZWNiYWY1NWU0NjRlMDBiMzk4N2RhNTI2NGI2YWYy
ZGNmODgwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjllYjFlMzYwZDc0NTJhYTJjZTg5NTRiNWUxMWZiY2FjNTQ3MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGOlYfjIq1PwLbw9Ks7fBfc9tL+N
pY2VcvJVLGL01bIz6MQtaXfpxkXr2oXOUXgInVrLS7y4B7F/wtWq+5jYmVNexf/H
RxAtAV8OVVeH0FfkjjHVER9TUr3BOAP8ZDj8SKho+YWooFZrgAIoSytHqECS3008
iEVwNK+Qmd2pFj7xoOmk9EnGQQViJB4lU/AnPb5JBjajpEOTucTn4saNGM2rbKE9
lZVBShh8vZhL2UvzKaqW2UQQsjMowVUy1HmyCDV86U3HwYh2zPSONzcety2g6Mdt
geU8qEHJ3v1xVALR8WgCC+vIS660AoZjvrSsJIIB+mrFjSx8YDSjFYo3HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKeseNg10Uqos6JVLXhH7ysVHCwMB8GA1UdIwQY
MBaAFIPTbsuvVeRk4As5h9pSZLavLc+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAt
OTY1MzFkMTYzMzFiLzEvRXA2eDQyRFhSU3Fpem9sVXRlRWZ2S3hVY0xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMmJlZjAtNzU2MS00MzdiLTk0OTAtOTY1MzFkMTYzMzFi
LzEvZzlOdXk2OVY1R1RnQ3ptSDJsSmt0cTh0ejRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsFMMA0G
CSqGSIb3DQEBCwUAA4IBAQAz59dFhoXul8cJ1+KE3pl/TfQR5yWN14/93JN8ueSG
k7YSZdtiXSPv0MHFePRR49TPk3VOTDJV9QcOjgA4d89oIiO+Ix2xYgL6y2qjg5lc
s3GAPj3uSK0EE8xUi/oFBOnE0Fu+4v1SJ/NjZC3UhoaQrQVjb5gQORS3vYKN5TgD
/US06y1bssk+jCoNIUP1K16GIKNoQ1Kiq0LueWlhiOubFdzqxZVheutsZnyjMvZS
Ex37mItWYskpZpB/AfsAQrVJBFjA7dIbE8AX27tCZsDVyESFVHEEwnUX4R8RkY32
Ag5Gk4riPiGWkJK1QiweQm6s0itl/3CN7PMVigBRQvWx
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:46 2025 by rpki-client