Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/EZv_Oz18_ep5ks2EcgzgLDMuntA.roa
File: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (raw, json)
Hash identifier: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=
Subject key identifier: 11:9B:FF:3B:3D:7C:FD:EA:79:92:CD:84:72:0C:E0:2C:33:2E:9E:D0
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 0194266B2A453DA84C6EC274F311D53FA233
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/EZv_Oz18_ep5ks2EcgzgLDMuntA.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206860
IP address blocks: 85.202.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2a:45:3d:a8:4c:6e:c2:74:f3:11:d5:3f:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=119bff3b3d7cfdea7992cd84720ce02c332e9ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:eb:25:1e:f3:6f:e2:7b:90:b4:e4:9d:9c:ab:
10:68:3d:da:7d:65:38:86:31:27:4c:93:b7:01:c4:
61:54:b8:e4:5f:b0:cf:9c:6e:55:42:20:ff:05:b7:
93:55:52:74:10:b2:d3:39:28:f3:17:56:6e:f2:7d:
ae:a9:04:b6:c8:46:d4:82:f3:14:0e:5f:38:9a:d6:
91:8a:34:79:30:b4:c6:24:b2:33:95:0c:d0:44:a6:
fe:9e:f6:7c:56:77:fb:a1:ad:e8:77:2b:54:78:2e:
5c:43:1e:0f:b4:37:cd:a0:d6:c0:56:af:42:a7:e4:
f0:e5:ca:e7:b6:c8:00:c9:5e:aa:30:f0:38:49:3f:
c1:c9:f6:ff:5c:7f:f5:75:9b:79:f3:e0:40:02:c9:
cd:27:c7:c6:13:6a:99:2c:c4:09:95:21:4f:bd:84:
c4:80:ba:86:5d:e4:8c:4b:3d:0c:a7:76:97:e0:c3:
96:df:66:42:80:64:a6:3c:c3:ec:4c:35:de:da:28:
b3:0b:d6:51:d8:f4:1e:bb:11:b0:91:eb:7c:da:43:
bf:26:69:48:8f:2e:eb:cb:55:23:19:1c:9b:fd:30:
c9:94:1d:21:0c:09:a1:cb:9b:00:e8:8c:d7:35:d1:
59:1a:bb:86:ce:aa:5a:7b:13:10:b6:4b:1c:00:87:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:FF:3B:3D:7C:FD:EA:79:92:CD:84:72:0C:E0:2C:33:2E:9E:D0
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/EZv_Oz18_ep5ks2EcgzgLDMuntA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.201.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f6:1c:80:6a:b0:a2:22:62:28:43:94:b5:f4:ed:72:80:ac:
ba:f3:66:a4:13:2c:98:c2:e2:e5:d9:92:91:c2:09:8e:83:2d:
d0:ff:93:fc:b7:a8:d7:5b:af:47:c3:34:02:be:59:83:36:ce:
b2:11:b4:92:5b:6b:65:bc:d2:ad:c9:57:d0:ad:1c:90:60:2c:
e1:c4:94:d1:e2:32:af:dd:5a:4f:e7:55:f7:be:32:99:bd:c0:
75:4c:88:74:a5:e4:9f:ab:a6:fd:81:2b:6d:c4:ae:a6:e0:23:
ab:4c:0d:55:50:2e:8b:99:8f:eb:91:c5:73:2b:7f:bb:a5:f4:
0f:93:74:a7:e1:7c:81:e6:31:78:42:a7:8d:48:33:d2:0f:bb:
98:4c:1e:f7:2a:8a:35:7b:46:97:9c:c2:3f:0b:1f:6a:eb:7e:
2c:76:2c:25:04:28:98:28:b5:f6:aa:79:9e:00:aa:bb:9b:20:
95:38:d6:b3:ed:d8:89:bd:98:18:ac:8a:9f:7b:4d:3f:32:a1:
b8:74:cd:80:0a:e6:09:cc:34:15:a7:f0:5c:88:4e:20:e9:c6:
0f:dc:83:43:13:27:3e:8a:63:27:45:b5:be:80:a3:b5:59:6f:
f8:1c:ee:a2:73:c1:91:66:7f:f6:b9:21:3e:7f:53:0f:11:d1:
2f:fa:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:31:15 2025 by rpki-client