Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/iEpDEVUAC0FqyMEjeItbSe6hHhw.roa
File: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (raw, json)
Hash identifier: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=
Subject key identifier: 88:4A:43:11:55:00:0B:41:6A:C8:C1:23:78:8B:5B:49:EE:A1:1E:1C
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 0196898C3A40E6C23ED2BF65A47D9909F813
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/iEpDEVUAC0FqyMEjeItbSe6hHhw.roa
Signing time: Thu 01 May 2025 01:53:10 +0000
ROA not before: Thu 01 May 2025 01:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 213.182.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:8c:3a:40:e6:c2:3e:d2:bf:65:a4:7d:99:09:f8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: May 1 01:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=884a431155000b416ac8c123788b5b49eea11e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:76:a2:ca:89:fe:aa:9b:ff:6f:d4:f6:51:
0e:95:b0:45:9e:16:ff:de:fc:81:78:09:50:70:98:
f8:e4:b2:1d:01:62:5d:8c:a3:b8:97:8d:53:95:2e:
02:9e:d6:f6:4f:67:b5:04:c7:39:62:a3:98:cc:d8:
6a:73:b9:35:e6:bd:72:de:dc:69:1b:2c:48:5d:43:
ed:25:01:85:c5:9c:70:f5:96:95:f4:3f:62:47:7a:
f4:1b:29:eb:5d:7c:16:69:fb:1b:f0:e8:03:8e:45:
e1:a3:cb:4a:9b:79:26:31:f7:14:95:9e:7c:07:6d:
99:c5:7a:0c:a8:ff:09:c7:d6:7c:a4:ba:0b:aa:c2:
bd:b9:64:61:d5:ae:5e:c7:5b:fb:79:5c:6b:99:e4:
f7:ce:d7:da:2a:c8:47:af:79:74:58:7b:8f:5a:53:
69:2c:09:58:ca:87:d9:9f:da:36:e7:4c:04:fa:81:
fa:1d:80:2f:4e:a0:86:0b:9d:f7:ad:ac:cd:f4:59:
e9:12:67:97:66:b4:af:f7:e1:26:3f:62:86:05:95:
6d:3f:1f:2c:60:82:e8:71:2b:85:f0:a4:b1:3a:47:
cc:03:cb:9f:ce:01:bf:08:48:52:34:cc:80:7d:d2:
8e:ff:62:8d:77:24:06:63:2c:2d:b9:d8:30:60:ee:
ba:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:43:11:55:00:0B:41:6A:C8:C1:23:78:8B:5B:49:EE:A1:1E:1C
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/iEpDEVUAC0FqyMEjeItbSe6hHhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.208.0/24
Signature Algorithm: sha256WithRSAEncryption
86:5e:ad:26:5f:c0:b2:40:e1:d1:44:15:4a:d1:c0:18:fe:5c:
86:6e:fa:0c:0c:85:29:95:24:d4:f2:37:68:a5:b7:a0:a3:e8:
5a:35:21:69:fb:42:9f:c0:5c:fc:ac:5e:f3:30:50:95:aa:5d:
88:3a:af:80:00:44:0d:f7:5d:d2:64:98:3d:b0:57:48:c9:fc:
e4:1b:bf:c5:33:10:47:6c:88:75:1f:88:ca:46:81:7a:8e:11:
b0:87:00:30:1e:0f:5e:87:50:a9:65:05:35:e1:20:8b:c4:4e:
cc:e8:ef:a9:6f:83:7f:ae:00:f0:e5:04:b5:cc:36:80:3a:d5:
fb:60:2f:1b:31:81:cf:b0:6b:6c:11:94:9b:8a:9f:97:30:f7:
93:57:31:e1:34:19:05:fc:9d:e2:71:bf:30:ea:74:c4:4f:be:
fd:b5:1c:7a:a3:89:b3:35:36:46:18:4e:ca:8f:77:98:b8:65:
7a:2c:f8:30:70:6b:34:81:e8:04:2f:2e:c2:6a:67:60:ce:5c:
6c:12:84:55:81:0e:3d:34:7d:ea:80:d3:96:42:94:99:65:cb:
de:e2:5f:99:64:c2:f8:7f:46:b4:d6:6c:00:6e:a1:bb:a7:6c:
9a:35:18:00:cb:a2:80:46:69:a2:7f:8b:35:e6:e3:9f:f7:01:
15:0a:b2:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZaJjDpA5sI+0r9lpH2ZCfgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjUwNTAxMDE1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODRhNDMxMTU1MDAwYjQxNmFjOGMxMjM3ODhiNWI0OWVlYTExZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15B2osqJ/qqb/2/U9lEOlbBFnhb/
3vyBeAlQcJj45LIdAWJdjKO4l41TlS4Cntb2T2e1BMc5YqOYzNhqc7k15r1y3txp
GyxIXUPtJQGFxZxw9ZaV9D9iR3r0GynrXXwWafsb8OgDjkXho8tKm3kmMfcUlZ58
B22ZxXoMqP8Jx9Z8pLoLqsK9uWRh1a5ex1v7eVxrmeT3ztfaKshHr3l0WHuPWlNp
LAlYyofZn9o250wE+oH6HYAvTqCGC533razN9FnpEmeXZrSv9+EmP2KGBZVtPx8s
YILocSuF8KSxOkfMA8ufzgG/CEhSNMyAfdKO/2KNdyQGYywtudgwYO66dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhKQxFVAAtBasjBI3iLW0nuoR4cMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvaUVwREVWVUFDMEZxeU1FamVJdGJTZTZoSGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bbQMA0G
CSqGSIb3DQEBCwUAA4IBAQCGXq0mX8CyQOHRRBVK0cAY/lyGbvoMDIUplSTU8jdo
pbego+haNSFp+0KfwFz8rF7zMFCVql2IOq+AAEQN913SZJg9sFdIyfzkG7/FMxBH
bIh1H4jKRoF6jhGwhwAwHg9eh1CpZQU14SCLxE7M6O+pb4N/rgDw5QS1zDaAOtX7
YC8bMYHPsGtsEZSbip+XMPeTVzHhNBkF/J3icb8w6nTET779tRx6o4mzNTZGGE7K
j3eYuGV6LPgwcGs0gegELy7CamdgzlxsEoRVgQ49NH3qgNOWQpSZZcve4l+ZZML4
f0a01mwAbqG7p2yaNRgAy6KARmmif4s15uOf9wEVCrJE
-----END CERTIFICATE-----
Generated at Mon May 5 18:14:32 2025 by rpki-client