Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/pTrML_rCjHKEVyz2Ay6uxcXeeD0.roa
File: pTrML_rCjHKEVyz2Ay6uxcXeeD0.roa (raw, json)
Hash identifier: IRQ99fzhRoZInuh2BwvkchfeEwF11hNc3StWXtdatKo=
Subject key identifier: A5:3A:CC:2F:FA:C2:8C:72:84:57:2C:F6:03:2E:AE:C5:C5:DE:78:3D
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 01969F2B80671564712B0E07A4265D838252
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/pTrML_rCjHKEVyz2Ay6uxcXeeD0.roa
Signing time: Mon 05 May 2025 06:39:10 +0000
ROA not before: Mon 05 May 2025 06:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212166
IP address blocks: 89.39.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:2b:80:67:15:64:71:2b:0e:07:a4:26:5d:83:82:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: May 5 06:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a53acc2ffac28c7284572cf6032eaec5c5de783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:09:37:4a:a6:7d:53:0e:3f:a0:11:92:b1:
9b:75:ff:f0:36:36:3f:03:7f:61:30:2b:04:9e:5c:
75:61:a8:f3:2d:fa:e8:df:09:87:c1:6e:31:ce:9b:
05:ef:3d:f8:f8:ae:5f:26:9f:07:cb:80:1b:5b:a7:
ae:29:f2:7f:95:49:95:1a:25:db:96:f5:bd:61:76:
d5:ab:cf:c1:e8:56:e6:81:9d:1c:b5:58:22:20:89:
bd:60:9e:63:0b:2f:77:c9:72:72:e6:37:df:57:fb:
ab:9e:3c:d0:98:6d:a4:16:6f:1a:25:f5:d9:b2:7b:
c6:88:c3:5c:ff:68:69:11:ea:19:d0:da:ac:79:d9:
df:6c:0f:cd:e4:d5:c6:2a:7f:f9:c4:b9:55:28:fb:
d3:86:f3:3b:96:c9:5e:de:2b:ab:d1:44:c7:11:5d:
29:b2:ff:ff:fc:10:47:b5:9f:bc:42:49:03:19:0d:
16:54:2e:0f:d9:1a:42:c3:0a:a9:f6:4f:76:cd:f4:
73:ee:b0:85:fe:2a:10:d1:b7:0a:56:8a:85:c5:64:
eb:53:77:c0:f0:a6:be:a5:33:f7:2f:1a:3d:a4:4a:
18:4a:eb:52:2f:ab:b6:fd:40:58:03:90:77:9f:a5:
ae:12:81:25:94:c6:5f:c0:d1:6b:97:40:c7:67:08:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:CC:2F:FA:C2:8C:72:84:57:2C:F6:03:2E:AE:C5:C5:DE:78:3D
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/pTrML_rCjHKEVyz2Ay6uxcXeeD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:7f:e1:ed:5b:c6:8f:37:e1:e9:9d:f7:f2:9f:2e:8d:c9:4b:
d1:de:49:18:df:09:c5:68:96:67:7b:06:8e:d1:71:15:8c:31:
02:4f:44:c6:38:5c:f3:07:1c:07:03:8f:6f:1a:90:f5:df:6a:
27:aa:df:a1:b9:dd:7d:45:ca:4e:9a:04:13:c8:99:73:2c:62:
5f:bc:c3:18:da:5c:d4:69:a1:78:c4:65:9f:47:d2:dc:df:c0:
48:9b:fa:b2:79:34:42:33:fd:61:6d:5b:f5:16:e3:83:b8:df:
3e:85:91:28:24:a0:d2:b3:21:0e:e6:65:19:94:9e:89:58:5b:
62:b0:85:4e:01:e7:79:f8:91:12:40:c4:6d:02:6d:a6:8d:42:
3e:a3:8b:f5:ac:73:83:26:89:3d:c3:ec:49:c4:07:4b:46:5b:
e2:f1:6c:3b:a1:af:62:c9:61:8c:db:ef:b9:ce:05:bc:24:6b:
6a:a8:b9:77:4f:6c:4b:c1:28:91:7b:c8:25:b3:97:38:ec:48:
81:36:ad:97:01:4a:9b:d7:1d:1d:b3:ec:9a:43:8b:6c:d0:22:
63:69:97:1e:20:d3:d6:e9:05:aa:c4:7f:04:7f:04:3c:3b:3c:
1b:d1:85:4c:8b:85:c9:8c:36:b7:e3:64:3d:4d:6d:12:bf:bf:
97:35:c9:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZafK4BnFWRxKw4HpCZdg4JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2
MTIxYzgwHhcNMjUwNTA1MDYzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNhY2MyZmZhYzI4YzcyODQ1NzJjZjYwMzJlYWVjNWM1ZGU3ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApysJN0qmfVMOP6ARkrGbdf/wNjY/
A39hMCsEnlx1YajzLfro3wmHwW4xzpsF7z34+K5fJp8Hy4AbW6euKfJ/lUmVGiXb
lvW9YXbVq8/B6FbmgZ0ctVgiIIm9YJ5jCy93yXJy5jffV/urnjzQmG2kFm8aJfXZ
snvGiMNc/2hpEeoZ0NqsednfbA/N5NXGKn/5xLlVKPvThvM7lsle3iur0UTHEV0p
sv///BBHtZ+8QkkDGQ0WVC4P2RpCwwqp9k92zfRz7rCF/ioQ0bcKVoqFxWTrU3fA
8Ka+pTP3Lxo9pEoYSutSL6u2/UBYA5B3n6WuEoEllMZfwNFrl0DHZwiz/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKU6zC/6woxyhFcs9gMursXF3ng9MB8GA1UdIwQY
MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt
YTAwMWEyOWMyM2YwLzEvcFRyTUxfckNqSEtFVnl6MkF5NnV4Y1hlZUQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw
LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSf1MA0G
CSqGSIb3DQEBCwUAA4IBAQDEf+HtW8aPN+Hpnffyny6NyUvR3kkY3wnFaJZnewaO
0XEVjDECT0TGOFzzBxwHA49vGpD132onqt+hud19RcpOmgQTyJlzLGJfvMMY2lzU
aaF4xGWfR9Lc38BIm/qyeTRCM/1hbVv1FuODuN8+hZEoJKDSsyEO5mUZlJ6JWFti
sIVOAed5+JESQMRtAm2mjUI+o4v1rHODJok9w+xJxAdLRlvi8Ww7oa9iyWGM2++5
zgW8JGtqqLl3T2xLwSiRe8gls5c47EiBNq2XAUqb1x0ds+yaQ4ts0CJjaZceINPW
6QWqxH8EfwQ8Ozwb0YVMi4XJjDa342Q9TW0Sv7+XNckr
-----END CERTIFICATE-----
Generated at Mon May 5 16:14:34 2025 by rpki-client