Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/EFk_WP_A_QvGCbPv627jqVmsHfg.roa
File: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (raw, json)
Hash identifier: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=
Subject key identifier: 10:59:3F:58:FF:C0:FD:0B:C6:09:B3:EF:EB:6E:E3:A9:59:AC:1D:F8
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 01942068222F786218F3C4ABF9F612146BAE
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/EFk_WP_A_QvGCbPv627jqVmsHfg.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17307
IP address blocks: 77.247.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:22:2f:78:62:18:f3:c4:ab:f9:f6:12:14:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10593f58ffc0fd0bc609b3efeb6ee3a959ac1df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d5:03:f2:0a:b0:4c:1a:0e:fb:47:cb:5e:cc:
33:b8:9d:41:f8:e5:fc:de:f1:cb:f3:70:fd:6b:ee:
a4:a4:d5:15:b0:d9:30:0e:45:8b:54:ca:3c:21:04:
b8:94:9f:cf:3e:cc:bc:c8:fd:28:ca:5d:78:65:24:
e6:23:de:f2:2d:1d:63:b0:55:5f:36:ba:51:21:15:
0e:74:49:38:75:77:7a:1c:3a:f9:44:33:d0:4c:5c:
1d:26:b5:0c:77:a2:7a:1b:31:9a:03:c4:b3:47:80:
09:9a:87:32:e6:2e:f4:f2:8f:2f:0b:d4:50:5d:ff:
32:87:2e:c1:46:09:d7:e4:92:08:ee:a0:81:cc:1c:
30:a2:35:09:91:30:44:89:b2:d3:06:45:4c:6d:50:
fd:6a:3c:1e:1b:4f:bd:57:8d:2e:6b:13:c5:8d:cc:
fb:27:95:7f:07:03:92:f4:d9:7d:bf:cf:8d:e2:f9:
bd:94:52:dd:18:9e:e7:ae:1a:1b:fc:7d:89:08:ff:
f7:86:30:74:ba:9f:b6:29:e0:17:7d:0b:57:6e:41:
c8:c5:a9:36:b0:c3:57:fd:ea:cc:e9:e8:3e:67:cd:
a4:ac:c6:79:12:b4:7b:f8:7f:0f:9a:2f:44:20:15:
1d:10:59:d1:39:9a:0d:6e:60:27:a7:d0:41:5c:8f:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:3F:58:FF:C0:FD:0B:C6:09:B3:EF:EB:6E:E3:A9:59:AC:1D:F8
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/EFk_WP_A_QvGCbPv627jqVmsHfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.0.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:54:41:85:80:bb:cb:91:f3:c3:05:65:8c:df:4e:90:fd:69:
34:e5:8d:d6:0a:4b:e0:ab:0c:ae:a2:af:bc:78:53:f4:60:8c:
0b:9f:12:7c:56:6f:66:c5:5b:2f:cb:04:fd:8f:b4:e5:49:2d:
f3:8e:97:d9:28:61:4f:08:d1:67:87:71:45:d7:73:a3:04:90:
f9:10:a9:d9:b4:84:05:b6:c1:70:f2:23:4f:64:ba:33:15:39:
e7:b4:6f:f1:70:0b:5b:df:bf:2c:81:b2:c4:2d:5f:4f:e8:db:
5b:23:5c:07:cc:02:7a:52:15:b5:a0:f1:59:4d:a2:7c:10:57:
7d:32:99:ed:ac:08:ce:f0:68:fd:b8:43:55:a8:8c:26:75:da:
82:2c:7f:70:1a:56:2d:5f:63:98:46:84:80:4b:1f:b7:c5:f9:
58:90:20:37:26:a2:4c:0f:15:05:ab:0d:6b:d5:6b:a8:8e:88:
b8:bf:96:2f:11:ee:08:3e:f6:75:5c:da:7c:c6:23:bb:f2:49:
1c:08:03:03:6c:7f:95:73:cc:dd:f4:57:93:a0:d4:7d:95:87:
a5:db:07:64:b7:e3:61:54:e3:c9:fa:53:68:f7:c9:63:b4:9a:
5c:1c:0d:08:dd:ba:b7:c5:5d:bb:06:1d:be:4d:14:76:22:fc:
81:c9:6c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:46:40 2025 by rpki-client