Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ejmalSfr1tk53rbyCCEzLQB9ZzM.roa
File: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (raw, json)
Hash identifier: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=
Subject key identifier: 7A:39:9A:95:27:EB:D6:D9:39:DE:B6:F2:08:21:33:2D:00:7D:67:33
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 019427B66AEE6E528310DD9810E26EC95532
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ejmalSfr1tk53rbyCCEzLQB9ZzM.roa
Signing time: Thu 02 Jan 2025 15:50:53 +0000
ROA not before: Thu 02 Jan 2025 15:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44152
IP address blocks: 109.109.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:6a:ee:6e:52:83:10:dd:98:10:e2:6e:c9:55:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a399a9527ebd6d939deb6f20821332d007d6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:89:9b:c1:70:58:04:de:86:0b:f2:28:43:
51:7c:22:60:0e:64:17:b2:ed:30:ba:9a:56:9f:70:
f1:3d:74:f4:39:5d:79:b3:a3:f6:61:79:7c:f3:32:
58:a4:d2:04:46:dc:3d:ea:57:bc:29:61:0b:7e:aa:
24:ec:60:1a:d2:0c:e1:e9:d3:10:b9:32:e9:56:e8:
e2:10:67:7e:03:0d:fa:ee:8d:52:e2:96:06:92:e4:
99:75:f1:13:da:98:26:c8:e3:67:7c:1c:b1:e0:09:
05:fb:67:39:53:a7:26:6f:03:14:a7:b2:07:ae:fc:
4f:38:aa:91:cf:ff:24:71:e4:ca:0b:75:3c:d0:59:
c7:b9:9e:12:82:4b:55:da:be:02:8c:57:05:42:1e:
b8:84:fa:3b:36:56:59:c9:3b:33:dd:79:f4:67:1f:
06:5c:90:44:2c:a6:78:dd:60:ef:46:23:ae:e2:49:
56:8c:e2:83:de:7b:85:ef:4f:8f:d2:f3:12:0b:c9:
02:b6:32:31:a3:6e:f8:3b:41:85:d5:b7:27:36:55:
89:3c:53:b9:1a:51:ba:70:94:7c:7a:72:00:6d:82:
74:22:8e:3b:02:4f:58:e1:4d:bc:d4:84:a9:a1:92:
84:64:0b:2d:da:11:3f:91:d7:d1:19:85:75:3f:b9:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:9A:95:27:EB:D6:D9:39:DE:B6:F2:08:21:33:2D:00:7D:67:33
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/ejmalSfr1tk53rbyCCEzLQB9ZzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.109.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ef:c8:7f:7b:5f:cb:9b:e2:78:91:ae:79:ea:88:2e:46:cb:
16:65:38:61:49:35:cb:d6:bb:ee:1e:24:26:8f:58:5d:b4:ce:
09:ed:59:78:03:a8:a7:0e:e4:aa:2f:d6:50:c6:11:b5:29:32:
6c:ab:91:d1:09:bf:10:77:27:53:c2:42:89:d4:02:a3:5b:8f:
f4:1b:35:97:fb:91:1c:26:18:fe:29:9d:92:5d:23:bc:73:23:
69:3b:30:5a:f0:37:30:07:83:49:22:ab:b8:bd:d4:e1:56:64:
ad:00:5d:2c:f5:a1:0d:e7:38:81:83:c1:cd:52:0c:c6:5f:36:
70:0b:42:a5:f6:24:f2:d5:0c:1f:43:ad:aa:46:1b:53:cb:62:
3f:d9:f2:b3:97:67:d3:d3:a2:1e:19:21:b2:17:1e:82:b0:3e:
b7:00:95:f8:72:1e:43:e2:fc:b5:01:37:aa:00:b2:a0:09:12:
6c:05:ae:68:37:72:6b:4e:52:3b:89:87:ce:30:3b:46:d2:4e:
c9:bf:15:8c:41:4b:93:2d:3c:d7:01:84:9f:6f:a1:e3:9c:f1:
d5:7b:42:26:e8:97:7b:ad:bb:a3:30:c1:24:6d:80:80:8b:7d:
39:14:f7:25:97:1c:b8:e3:78:b7:c6:08:00:b1:7e:82:5a:1c:
c1:67:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:53:34 2025 by rpki-client