Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/E9oFZpR0WuPEurk0UT599s3KKDk.roa
File: E9oFZpR0WuPEurk0UT599s3KKDk.roa (raw, json)
Hash identifier: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=
Subject key identifier: 13:DA:05:66:94:74:5A:E3:C4:BA:B9:34:51:3E:7D:F6:CD:CA:28:39
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 019662B4AEFA6668B920A8B0C5B1947743B2
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/E9oFZpR0WuPEurk0UT599s3KKDk.roa
Signing time: Wed 23 Apr 2025 12:52:10 +0000
ROA not before: Wed 23 Apr 2025 12:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205235
IP address blocks: 45.145.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:b4:ae:fa:66:68:b9:20:a8:b0:c5:b1:94:77:43:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Apr 23 12:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13da056694745ae3c4bab934513e7df6cdca2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:69:56:44:9c:5c:db:2f:9c:0f:ac:19:c0:
6a:a4:e5:2d:f0:b9:e6:b2:43:68:d0:e0:6e:3a:c6:
36:2c:6d:c3:81:41:08:1d:0b:89:35:a8:f2:a0:ff:
e9:2f:e2:42:04:2e:97:48:4d:da:23:ab:d9:ca:97:
26:00:d5:de:b6:3b:29:06:11:a4:c4:92:5b:c1:14:
8e:8a:20:a4:e8:d3:43:a6:9d:b0:c3:7f:1b:7f:0d:
28:17:55:c9:35:3a:45:94:c2:7b:5e:2f:94:f7:8f:
6e:4a:8e:97:78:cd:cb:0f:89:c8:3a:ea:e3:af:94:
c2:06:f3:d2:b3:9d:ad:95:93:54:8a:2e:4c:f7:3f:
68:5e:9c:ad:91:d4:cd:9e:c7:36:6e:89:39:72:94:
db:69:dc:61:bc:c9:17:b9:4c:c5:fa:ae:b0:8a:26:
79:75:f1:fa:d4:78:73:1e:c6:fa:21:c7:9b:ad:a3:
2c:a9:c4:4c:68:e3:98:fa:cd:ec:49:14:62:c4:07:
2a:79:86:b8:62:a0:65:fe:40:e8:7e:91:13:27:44:
51:35:d7:20:12:f1:bb:34:2b:c9:0c:e4:39:20:24:
9e:87:e8:fb:77:be:98:59:82:b3:c3:83:49:80:8a:
11:f1:27:d0:00:33:c8:ab:50:f6:8b:96:50:33:f5:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DA:05:66:94:74:5A:E3:C4:BA:B9:34:51:3E:7D:F6:CD:CA:28:39
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/E9oFZpR0WuPEurk0UT599s3KKDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3c:be:ef:dc:13:5b:52:8d:81:e7:0f:de:2e:a7:3c:d0:c2:
a9:01:16:80:ee:55:40:9c:8f:f6:64:7c:6f:4b:80:e7:ba:a2:
76:9e:78:87:bc:38:10:7a:ae:81:a1:dd:9f:26:c3:f8:d3:3e:
d1:97:02:30:61:29:7c:15:31:9d:30:36:73:6c:47:ef:88:dd:
32:41:c7:1e:8d:b6:4f:7a:20:fc:08:65:bd:99:72:bc:16:57:
6a:4c:2f:a7:cd:8f:b0:38:44:99:09:28:74:47:0a:84:9f:e9:
a3:94:e4:58:25:3a:d7:7e:ae:a1:b7:03:7e:46:4b:db:af:f1:
b0:c0:12:d4:ed:69:50:f1:65:0b:80:50:99:dd:9a:b5:7b:ee:
a1:38:78:14:0f:f5:60:60:18:03:eb:56:f7:2d:6e:7e:29:ed:
c2:af:91:80:c0:12:d6:99:59:e8:52:92:65:2c:0c:ae:6f:98:
d1:0a:e0:76:0b:61:72:75:ce:ed:49:eb:0d:e9:7b:c5:96:75:
d2:b0:6e:05:5d:79:53:24:63:01:e2:7d:be:23:f8:59:dc:26:
9a:00:d3:f6:8b:55:97:e3:11:79:ae:89:ac:71:61:90:1a:af:
d7:2b:c2:5f:82:bf:ef:25:58:f7:d5:b2:bc:ff:30:9f:00:af:
a1:d9:ce:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZitK76Zmi5IKiwxbGUd0OyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTYwZTkwMDBjNzVhNzVkNjdlMzdmZTA3YjE0ZTA3YjIy
YzU4ODcwHhcNMjUwNDIzMTI1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2RhMDU2Njk0NzQ1YWUzYzRiYWI5MzQ1MTNlN2RmNmNkY2EyODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ERpVkScXNsvnA+sGcBqpOUt8Lnm
skNo0OBuOsY2LG3DgUEIHQuJNajyoP/pL+JCBC6XSE3aI6vZypcmANXetjspBhGk
xJJbwRSOiiCk6NNDpp2ww38bfw0oF1XJNTpFlMJ7Xi+U949uSo6XeM3LD4nIOurj
r5TCBvPSs52tlZNUii5M9z9oXpytkdTNnsc2bok5cpTbadxhvMkXuUzF+q6wiiZ5
dfH61HhzHsb6IcebraMsqcRMaOOY+s3sSRRixAcqeYa4YqBl/kDofpETJ0RRNdcg
EvG7NCvJDOQ5ICSeh+j7d76YWYKzw4NJgIoR8SfQADPIq1D2i5ZQM/UY+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPaBWaUdFrjxLq5NFE+ffbNyig5MB8GA1UdIwQY
MBaAFI2mDpAAx1p11n43/gexTgeyLFiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQt
YjViOGQwMjQ0OGI4LzEvRTlvRlpwUjBXdVBFdXJrMFVUNTk5czNLS0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83MjgwNmEtMDM5NC00YWQ1LThlMDQtYjViOGQwMjQ0OGI4
LzEvamFZT2tBREhXblhXZmpmLUI3Rk9CN0lzV0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZFdMA0G
CSqGSIb3DQEBCwUAA4IBAQCdPL7v3BNbUo2B5w/eLqc80MKpARaA7lVAnI/2ZHxv
S4DnuqJ2nniHvDgQeq6Bod2fJsP40z7RlwIwYSl8FTGdMDZzbEfviN0yQccejbZP
eiD8CGW9mXK8FldqTC+nzY+wOESZCSh0RwqEn+mjlORYJTrXfq6htwN+Rkvbr/Gw
wBLU7WlQ8WULgFCZ3Zq1e+6hOHgUD/VgYBgD61b3LW5+Ke3Cr5GAwBLWmVnoUpJl
LAyub5jRCuB2C2Fydc7tSesN6XvFlnXSsG4FXXlTJGMB4n2+I/hZ3CaaANP2i1WX
4xF5romscWGQGq/XK8Jfgr/vJVj31bK8/zCfAK+h2c5j
-----END CERTIFICATE-----
Generated at Wed May 7 14:12:01 2025 by rpki-client