Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa
File: EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa (raw, json)
Hash identifier: fG2UBrX6DjIKV9kptyQGomVTDY864OWJshOwmuCJfno=
Subject key identifier: 11:60:0E:DD:D5:EA:8F:89:3F:65:CD:B8:93:50:73:72:97:30:95:EC
Certificate issuer: /CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Certificate serial: 019566E1F7596375F50FD2A1F45FF8FE4054
Authority key identifier: D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa
Signing time: Wed 05 Mar 2025 15:17:19 +0000
ROA not before: Wed 05 Mar 2025 15:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48099
IP address blocks: 91.213.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:e1:f7:59:63:75:f5:0f:d2:a1:f4:5f:f8:fe:40:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83ef7142998e4e6566053e2c63a70808c6ea237
Validity
Not Before: Mar 5 15:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11600eddd5ea8f893f65cdb893507372973095ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7a:ab:6d:a4:7b:3c:a5:ff:0a:1b:85:c3:51:
d6:16:47:8b:47:fc:bf:eb:c2:6f:a4:54:96:c3:36:
42:75:ea:67:2c:03:97:4d:37:d9:bc:0b:b8:9d:98:
33:f9:0a:35:6f:29:ca:a6:f8:3a:68:f5:c4:3f:9a:
b9:e0:e0:da:62:fe:33:c8:22:8c:a2:0d:19:fd:4d:
62:80:86:03:ee:a5:cb:37:8b:98:a3:fd:9a:c7:cf:
d3:d3:76:d2:3b:63:31:28:b3:36:33:31:ea:9d:49:
0a:0f:43:75:ee:9c:97:c0:67:de:12:41:a2:07:15:
f8:54:f8:88:9a:86:09:19:ff:63:69:fe:ec:3f:3e:
b9:b6:cc:4e:50:85:a3:fa:f6:85:76:84:d7:5b:12:
0a:42:44:ae:7b:cd:cb:23:ab:14:f1:73:e3:c6:57:
b0:71:77:fd:24:35:5e:cb:b8:59:7d:08:66:99:73:
cd:5f:57:42:f2:4a:e6:64:1a:99:60:d8:86:68:1d:
6d:ae:ab:fe:a4:9c:45:0e:d4:83:88:c7:0e:c4:ae:
57:0e:85:75:f0:b0:33:e5:14:49:b5:18:e7:37:03:
1e:05:50:7a:ab:82:f5:17:09:e7:10:b0:df:3a:79:
53:01:03:af:10:68:98:22:9f:d3:97:bc:86:09:bf:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:60:0E:DD:D5:EA:8F:89:3F:65:CD:B8:93:50:73:72:97:30:95:EC
X509v3 Authority Key Identifier:
keyid:D8:3E:F7:14:29:98:E4:E6:56:60:53:E2:C6:3A:70:80:8C:6E:A2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D73FCmY5OZWYFPixjpwgIxuojc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/EWAO3dXqj4k_Zc24k1Bzcpcwlew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7fcb35-4408-4218-9862-7f75a1b10ec3/1/2D73FCmY5OZWYFPixjpwgIxuojc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.176.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7e:70:6f:22:8f:58:40:7c:1b:34:ef:64:bf:d5:03:8f:00:
97:64:7f:f1:cc:12:aa:01:0e:8c:41:0b:06:f5:58:3c:9c:16:
49:6f:bd:f4:e5:3b:fb:21:20:57:b4:db:21:96:6a:96:dd:be:
f4:1f:f0:c0:7c:42:f0:d6:77:20:a4:2b:a9:d1:d6:34:27:fe:
6d:c7:52:5a:4e:b5:9c:e9:93:1c:a9:d2:91:b2:71:8e:b3:35:
5c:41:ca:74:12:3c:f0:4e:fb:70:19:1e:54:53:9c:54:45:fe:
06:d2:8e:d1:5d:57:a6:08:27:0e:94:82:6d:dc:e3:1f:72:7a:
e9:55:20:9b:8b:ca:c9:da:f7:4a:a3:60:2c:54:f2:8c:7e:50:
71:a6:36:68:a7:39:8c:9d:f5:b6:8e:a0:9c:5e:88:ce:4b:9f:
c4:3e:65:5e:8c:06:24:ed:0c:e4:91:dc:2a:11:e9:ec:40:bf:
99:83:b4:54:a2:4c:2d:a7:ce:54:67:da:43:03:47:b6:1c:55:
6f:bd:29:52:c7:23:5a:bc:60:83:97:59:12:93:7e:01:53:86:
d1:5b:b1:20:40:28:28:85:a9:d4:cd:94:29:e2:e0:7b:08:30:
75:92:08:be:d0:0e:a7:6e:11:56:87:5a:88:80:af:66:de:28:
e3:34:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:21 2025 by rpki-client