Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/EjxEvyFrbjIutBBjgjTn5G6eW5c.roa
File: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (raw, json)
Hash identifier: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=
Subject key identifier: 12:3C:44:BF:21:6B:6E:32:2E:B4:10:63:82:34:E7:E4:6E:9E:5B:97
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0194228E45CFFFAA33A05C53FC150F461E20
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/EjxEvyFrbjIutBBjgjTn5G6eW5c.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211345
IP address blocks: 193.36.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:45:cf:ff:aa:33:a0:5c:53:fc:15:0f:46:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=123c44bf216b6e322eb410638234e7e46e9e5b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:21:cd:b1:41:08:68:b8:12:38:9d:ff:a5:
e8:2c:5e:ae:73:e2:1c:64:6d:96:2e:0a:00:f1:72:
be:f3:ef:70:ce:33:35:61:55:b6:17:07:b3:c9:ba:
f7:a6:f6:be:44:25:0b:b4:29:45:8f:4e:35:75:aa:
e1:89:c8:d9:77:b8:19:e7:26:3d:db:3f:3e:69:73:
99:a2:0b:54:9c:31:82:bb:e5:ce:0b:56:6e:f7:1a:
ef:81:d4:1e:e7:f1:44:3f:ec:27:8f:e9:9a:34:fd:
22:31:40:5f:e7:b9:9b:fb:c9:21:19:3c:b6:15:10:
2d:9e:65:52:a5:7e:1f:ae:61:d0:59:20:f5:cc:9d:
0d:a5:5e:bf:5d:d5:11:e1:2e:f8:4f:1f:50:ce:55:
15:8a:aa:cd:5c:3d:c3:e8:04:10:c8:46:fc:5f:39:
a7:c7:32:b1:2a:e7:10:2c:70:77:a5:e8:0c:ee:8d:
fa:13:04:1e:76:26:25:62:4f:91:27:62:c4:73:4f:
ae:62:54:e1:81:d9:5d:db:fa:a6:d1:eb:04:36:66:
b7:44:9f:d9:5f:f9:04:c5:4b:ba:88:34:ec:7a:46:
06:cc:41:4c:4a:d8:2f:5e:34:02:66:32:cb:c2:0e:
c8:40:f9:5a:4f:be:cc:c3:c1:23:04:a9:6d:ef:04:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3C:44:BF:21:6B:6E:32:2E:B4:10:63:82:34:E7:E4:6E:9E:5B:97
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/EjxEvyFrbjIutBBjgjTn5G6eW5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d7:2d:76:25:91:2b:9e:6e:4b:38:c5:3b:dd:c0:7a:2f:83:
31:b3:cc:13:89:c6:13:4d:a8:11:82:ee:7a:cf:a3:8a:f7:c7:
6e:77:2f:a4:e8:b7:21:c6:a4:aa:79:dd:8d:48:e8:a6:39:82:
57:1b:cf:a2:7f:61:1d:40:a8:cc:ab:19:81:10:39:e5:7e:34:
1d:e5:0a:1b:cd:b7:05:50:f9:77:85:f9:90:84:62:95:6f:fd:
79:d3:f5:f0:c0:cb:f6:eb:b1:45:fa:a4:29:1c:9b:45:ba:23:
ec:f6:a0:2d:c0:52:e3:d6:fa:d3:81:ba:eb:a0:5c:ef:a8:2b:
b8:2a:89:0e:28:b2:7d:fe:3c:cb:c3:b9:e5:c1:29:5d:d9:56:
5e:90:e5:49:55:46:1f:1a:26:81:76:b5:08:46:82:ca:3f:f3:
12:42:05:9f:aa:f1:86:58:89:08:3a:00:92:2e:c1:f6:3d:29:
ab:0d:81:47:ed:6c:e6:e0:cd:45:6a:2a:af:ec:64:43:dd:bf:
ff:bb:12:df:4d:84:0f:e8:60:d4:93:b7:a5:49:3e:db:f3:d2:
c5:d5:fb:6d:cd:e5:f4:0f:68:00:75:0a:ac:1c:96:4b:df:41:
34:9f:e2:d1:3d:f1:c9:ca:f8:0f:6c:27:5b:c9:ad:7e:be:d4:
0a:73:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:34 2025 by rpki-client