Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eLVzy-X9Sgf-5DwVop9fxDt0qTw.roa
File: eLVzy-X9Sgf-5DwVop9fxDt0qTw.roa (raw, json)
Hash identifier: AJFqaCGW334t5MCcLg4WaM3iv/x1O757tB7FILddMaU=
Subject key identifier: 78:B5:73:CB:E5:FD:4A:07:FE:E4:3C:15:A2:9F:5F:C4:3B:74:A9:3C
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444974AF0BCE4DC350A7252B35EED13
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eLVzy-X9Sgf-5DwVop9fxDt0qTw.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137263
IP address blocks: 185.122.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:97:4a:f0:bc:e4:dc:35:0a:72:52:b3:5e:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b573cbe5fd4a07fee43c15a29f5fc43b74a93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:36:87:34:84:85:86:c5:6e:1d:fc:b9:3c:
86:8e:d1:a5:01:b8:c4:71:49:b0:d4:dd:66:05:da:
0c:75:38:ce:22:e0:5d:bc:8b:01:9c:ef:17:77:55:
64:1f:67:33:86:fd:27:45:88:18:38:26:20:02:e6:
6e:ec:9f:2e:1a:a7:c7:4e:16:4a:9c:63:ed:7a:39:
25:9c:7e:ea:13:52:e9:22:1d:3e:29:ee:bc:4b:3c:
be:54:e8:50:e5:a9:da:fe:45:5e:e5:03:ff:18:03:
07:df:a3:c6:cb:6d:ac:63:d5:d5:f7:86:58:73:7a:
88:64:55:66:28:c6:fd:b8:5a:26:ac:71:a9:7d:80:
f0:44:bc:f6:bf:20:6c:e5:c5:d6:68:dd:e1:b0:55:
62:d4:db:9b:d3:13:dd:e3:7e:04:4e:57:86:0b:40:
2a:0c:c6:66:7a:4d:8e:7d:62:07:d2:e6:25:52:4e:
55:1a:dd:4a:ec:92:d8:7f:03:6d:61:cd:81:d0:e6:
fa:f9:61:e8:98:7c:ed:86:84:3d:ed:65:3a:95:69:
a8:8e:85:fa:a8:54:83:ba:f5:f8:62:19:49:02:6d:
13:93:b7:33:1c:07:f4:eb:13:95:85:4d:30:93:b7:
e7:96:72:03:ec:2a:93:34:59:dd:e5:e4:57:07:ea:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:73:CB:E5:FD:4A:07:FE:E4:3C:15:A2:9F:5F:C4:3B:74:A9:3C
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eLVzy-X9Sgf-5DwVop9fxDt0qTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b6:d1:d9:3c:48:d4:fe:b4:38:2d:50:10:cd:57:15:2c:23:
ad:4c:bc:44:57:f4:51:8a:42:84:19:8f:30:7e:e8:43:9f:67:
4d:01:78:02:9e:7b:96:95:da:c3:c3:35:87:6b:3f:10:47:ee:
0e:9c:82:36:5d:fb:7d:b5:73:7c:74:48:ff:58:9e:bc:9f:05:
ae:82:86:02:f9:40:ef:c1:75:ce:c3:b4:3a:44:40:a2:db:29:
cf:cf:3a:7d:b2:e3:12:a4:7c:44:03:27:95:63:a5:47:35:79:
05:f6:2f:d1:08:65:b5:fe:f3:42:81:76:90:c8:43:0f:6b:f9:
1c:07:6f:15:ab:d2:5e:91:0d:b0:e5:5a:dd:2c:e0:c6:30:b9:
6a:2e:da:5f:7a:b4:7a:26:bb:6f:3e:fc:5c:f2:f6:4c:df:89:
ef:e5:e8:60:72:5f:15:bf:c9:f2:a2:19:42:7c:3d:e9:50:4a:
c1:ea:2e:ec:d5:fc:0c:4a:5b:46:5a:6c:7f:ee:83:9e:66:5c:
39:14:c7:96:46:19:23:3d:5a:7b:6d:3e:e4:8c:12:40:c9:f4:
47:b0:14:bf:2b:ba:64:fe:45:9a:fd:db:a7:3e:b1:79:b6:c1:
0c:1e:c0:95:a4:91:e3:0c:25:44:9b:b9:ae:84:d0:e0:ee:a5:
f2:45:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:46:09 2025 by rpki-client