Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPFyPd6mJXsltRLVDtXcpS2caWo.roa
File: EPFyPd6mJXsltRLVDtXcpS2caWo.roa (raw, json)
Hash identifier: bc+DvNL0kvqZ/wN04b1Ytp+wKVgVxg+XlNL7sqxB8uQ=
Subject key identifier: 10:F1:72:3D:DE:A6:25:7B:25:B5:12:D5:0E:D5:DC:A5:2D:9C:69:6A
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 01942445557C3FC714B4BBF0918315B0158A
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPFyPd6mJXsltRLVDtXcpS2caWo.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35080
IP address blocks: 85.119.64.0/24 maxlen: 24
85.119.65.0/24 maxlen: 24
85.119.68.0/24 maxlen: 24
85.119.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:7c:3f:c7:14:b4:bb:f0:91:83:15:b0:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f1723ddea6257b25b512d50ed5dca52d9c696a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:4a:e4:e6:06:42:e8:f6:48:0b:77:32:13:
e2:3f:12:86:77:84:71:63:72:e1:3a:5f:e3:96:96:
89:fa:f1:77:75:71:55:c0:61:cb:4e:b3:c0:e5:4b:
15:2e:25:e7:c3:23:9a:f5:92:33:c8:b9:65:71:3a:
35:be:63:63:04:04:ea:af:72:e3:27:f4:13:b4:03:
64:0e:78:12:d9:14:a8:68:84:6d:24:5b:f5:5c:55:
09:42:8c:c6:ce:06:07:72:18:9c:91:e0:b2:ed:b8:
e2:97:bb:0f:57:06:f0:8f:ce:b3:75:1a:d0:d0:e2:
3c:bb:6a:f5:c1:8d:c3:80:a4:d0:c2:d4:d0:58:04:
d4:cc:55:53:2e:ba:24:6a:2b:33:b4:e7:98:44:d6:
e1:d1:63:3c:1a:11:70:d2:51:db:46:bc:64:f6:d5:
5c:07:71:a8:0f:6f:27:5c:67:17:ec:35:e2:0f:52:
62:d3:14:2c:64:52:83:88:2a:20:ca:a4:6b:9f:d3:
47:13:e8:aa:64:95:42:37:5e:c0:13:0d:97:9e:41:
f8:13:ca:da:c3:0c:cb:fa:3e:75:6f:cc:58:ee:9d:
05:80:ce:31:75:fc:0c:6a:17:1f:1d:ec:85:a8:2e:
d3:5b:75:1a:82:59:0f:43:79:39:8e:99:78:a7:8e:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:72:3D:DE:A6:25:7B:25:B5:12:D5:0E:D5:DC:A5:2D:9C:69:6A
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/EPFyPd6mJXsltRLVDtXcpS2caWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.64.0/23
85.119.68.0/24
85.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f2:8d:be:22:db:ca:47:ae:32:cd:4c:d5:7c:90:f0:ee:a4:
07:67:fe:16:01:9f:6b:26:61:23:cf:7a:c3:d1:10:41:43:e0:
7b:d4:24:37:85:af:b0:88:14:ef:fd:5a:b8:74:72:c5:9d:ab:
74:8f:02:91:0d:c0:f8:71:1a:11:51:08:58:f8:83:d5:82:37:
03:88:b0:97:40:85:30:bf:e1:c8:c9:97:d0:8f:78:c2:01:59:
e3:ce:6f:3e:a2:fb:b4:75:cf:5a:89:e0:5d:18:cc:28:78:6f:
c9:54:17:e4:e0:c1:1b:cf:49:ea:29:fb:11:ed:1f:37:3b:23:
28:64:bd:29:2a:a8:5a:32:a3:72:d8:ed:02:4a:ef:a5:ba:8a:
49:20:fb:99:55:60:f4:1d:96:81:03:d6:de:f4:4b:fd:dc:af:
fe:80:ea:73:39:87:4e:4d:6b:0f:16:1a:b4:8a:db:86:a5:da:
11:df:0d:2e:c3:14:cd:d5:5c:88:35:66:57:7f:19:df:14:95:
c3:4d:55:69:0e:c2:96:bb:45:aa:41:0f:7e:7d:16:4a:78:65:
eb:39:79:ab:67:a6:c9:9b:88:e6:51:cc:07:37:a4:44:2f:03:
5f:20:e7:89:7c:76:a5:ea:18:4e:4d:2f:fa:1b:a7:78:af:1f:
c8:6a:a5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:25 2025 by rpki-client