Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/eMXlE66gMRsDFMLRrkzGyL9uy6I.roa
File: eMXlE66gMRsDFMLRrkzGyL9uy6I.roa (raw, json)
Hash identifier: 7g7g30yz/1pDKwuKxy4CYQAz4mI13ODOfpJW3kKSKA4=
Subject key identifier: 78:C5:E5:13:AE:A0:31:1B:03:14:C2:D1:AE:4C:C6:C8:BF:6E:CB:A2
Certificate issuer: /CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Certificate serial: 0194258FC7F8A80A265E0942018D08CB3ABC
Authority key identifier: EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/eMXlE66gMRsDFMLRrkzGyL9uy6I.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65535
IP address blocks: 185.3.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c7:f8:a8:0a:26:5e:09:42:01:8d:08:cb:3a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec167bb6b061fffa629dd2a84ccf7db44c71a351
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c5e513aea0311b0314c2d1ae4cc6c8bf6ecba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:fe:cb:a4:7e:5d:2d:82:57:d4:b6:84:8a:
b9:16:d1:89:28:f7:cd:7c:64:72:cc:4d:78:26:6a:
cc:4a:13:7c:28:1a:03:a3:9c:0a:1b:6d:0f:ed:34:
10:f0:a9:03:50:af:0c:70:a2:35:85:c2:91:3c:27:
00:d7:d1:dc:79:79:cb:9f:87:b5:71:d3:8a:b0:c3:
ec:fb:9f:4d:a9:1b:75:80:87:5f:9e:b1:70:8c:6e:
97:94:44:93:26:83:60:4d:0a:9a:45:90:8a:61:b9:
df:48:8d:cc:b6:99:8b:6e:8d:ad:a1:a7:8e:3e:fd:
9b:54:59:25:e0:f1:82:b6:59:64:38:5e:26:3b:f9:
64:9c:d6:69:7f:65:af:63:6a:e3:48:88:78:ab:61:
8f:1c:5e:23:a6:34:ed:60:f8:28:dc:db:f8:0d:b9:
71:8f:fa:85:34:29:73:c5:10:1b:87:fd:9c:8a:0b:
17:8c:b6:e7:57:16:b6:3f:85:37:7b:36:a6:6a:f0:
96:00:68:5d:c0:d7:6e:d7:99:9f:70:86:19:e1:82:
7c:ef:0e:bc:58:f9:a2:44:2f:9d:47:54:e9:fc:14:
70:85:b8:72:5f:ee:d8:c0:3c:70:79:da:52:83:ef:
bc:d1:a4:bc:df:c6:da:22:e8:8f:8c:8b:69:46:48:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:E5:13:AE:A0:31:1B:03:14:C2:D1:AE:4C:C6:C8:BF:6E:CB:A2
X509v3 Authority Key Identifier:
keyid:EC:16:7B:B6:B0:61:FF:FA:62:9D:D2:A8:4C:CF:7D:B4:4C:71:A3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BZ7trBh__pindKoTM99tExxo1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/eMXlE66gMRsDFMLRrkzGyL9uy6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f55d44-5893-4c22-b0b7-c655ad594193/1/7BZ7trBh__pindKoTM99tExxo1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.28.0/23
Signature Algorithm: sha256WithRSAEncryption
49:ef:64:ee:0e:c4:65:a7:ea:3b:0a:39:a6:66:53:45:31:ca:
87:5e:61:4b:b2:8e:3e:a4:74:2e:52:92:7c:db:8f:26:8c:75:
3a:ec:ac:cb:75:24:53:eb:89:44:ec:84:d4:df:bf:56:b5:ac:
53:90:11:9d:49:85:42:44:af:4c:64:9d:6a:51:70:d0:1d:a0:
d7:15:68:e8:d3:bf:c5:47:90:0d:59:5f:61:8a:3b:2f:1e:77:
32:2d:87:a6:5e:48:27:bc:3b:a4:71:43:9b:2e:58:00:d4:e3:
fa:b9:9f:ec:6e:0b:b2:b4:cb:78:d8:64:4a:fb:22:e6:4c:83:
f6:6c:f7:72:4b:95:a2:1d:38:cc:29:7f:37:88:c2:2b:cb:45:
a3:c9:21:44:44:59:0d:8b:93:e1:50:20:c1:db:bf:ea:ee:e4:
b1:49:e1:9f:b2:40:2c:ee:51:8e:f7:29:82:72:19:cd:72:bc:
00:22:24:a0:f1:54:6f:b3:7c:a6:4a:11:09:a4:79:c6:7c:95:
25:f8:1f:af:45:02:fc:54:78:49:55:cc:5c:15:7b:63:f9:50:
d9:01:f2:c2:2d:79:fc:7b:65:29:8b:6d:fc:2c:e1:40:4f:b2:
d0:af:3a:8d:41:c5:9c:be:96:36:4d:4c:9f:52:54:ed:46:7e:
dc:ba:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:14:13 2025 by rpki-client