Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa
File: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (raw, json)
Hash identifier: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=
Subject key identifier: 78:D7:85:E2:70:19:E1:CC:EB:BE:7B:2B:D5:A5:4B:68:3B:3A:68:E0
Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial: 019428256B86FFA18D4E1922E36FEB4519DF
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa
Signing time: Thu 02 Jan 2025 17:52:08 +0000
ROA not before: Thu 02 Jan 2025 17:52:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204635
IP address blocks: 91.213.37.0/24 maxlen: 24
185.244.196.0/22 maxlen: 24
2001:67c:26ac::/48 maxlen: 48
2a0d:3d80::/29 maxlen: 48
2a0d:3d80:150::/48 maxlen: 48
2a0d:3d80:232::/48 maxlen: 48
2a0d:3d80:245::/48 maxlen: 48
2a0d:3d80:246::/48 maxlen: 48
2a0d:3d80:248::/48 maxlen: 48
2a0d:3d80:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:6b:86:ff:a1:8d:4e:19:22:e3:6f:eb:45:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Validity
Not Before: Jan 2 17:52:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d785e27019e1ccebbe7b2bd5a54b683b3a68e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:ac:ef:aa:df:34:4c:ac:7d:e9:7b:68:5f:
e2:a6:84:9f:9a:dc:bc:11:99:13:75:15:e5:92:71:
04:ec:e2:39:06:54:45:9d:d4:3a:40:d2:84:ca:b9:
f0:0f:0b:1b:78:f2:c6:ae:05:d9:66:96:fc:a6:fa:
84:71:7a:ef:4a:d9:ec:44:26:30:44:f1:93:1a:88:
52:69:59:6a:2d:f3:1c:b5:8a:c1:48:13:f4:f8:f0:
0d:25:0a:a6:0f:5a:2c:8c:cf:86:67:58:1d:8a:84:
b1:0b:7b:a5:58:05:25:29:df:c7:12:85:3e:c1:a2:
d8:7a:f4:0e:82:0c:de:29:4a:27:d1:64:92:c3:f9:
a6:c0:9b:b0:12:13:8d:f1:d8:f1:a7:30:d7:6b:0a:
d6:86:3f:a1:b3:14:31:04:9e:b3:32:2d:e3:f6:31:
29:c3:e3:7d:99:a1:33:77:83:ba:62:e6:c1:9a:12:
b0:96:7b:82:d5:22:1b:d9:be:56:79:a0:fd:20:6e:
1b:5f:b5:17:a4:19:69:92:02:fb:63:a4:4d:1d:d9:
bb:2c:77:65:38:27:3d:5a:0f:e7:55:99:44:d5:f7:
eb:6c:a6:dc:48:9e:db:43:2d:b5:29:2b:de:93:4a:
87:39:68:76:c1:bd:e9:9f:9b:8d:77:6e:35:e4:f3:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:85:E2:70:19:E1:CC:EB:BE:7B:2B:D5:A5:4B:68:3B:3A:68:E0
X509v3 Authority Key Identifier:
keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.37.0/24
185.244.196.0/22
IPv6:
2001:67c:26ac::/48
2a0d:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
af:ef:cb:fb:8b:70:54:2d:ec:70:95:a5:0a:0e:47:85:ee:e8:
9d:b7:e7:73:5f:19:6e:41:32:63:b1:27:c2:77:01:ae:5d:29:
ec:ce:a2:fe:cb:d7:05:e4:19:6a:74:26:f7:df:59:bc:9b:b4:
ec:81:08:c2:25:48:27:59:a8:91:fc:d9:d4:5f:e7:25:3f:76:
b3:cd:bf:2c:24:af:9f:cf:83:f6:1d:07:df:22:0c:9e:44:2b:
02:b5:83:42:71:e0:26:3d:e1:5d:ce:37:0d:92:11:ce:91:46:
0c:85:77:9c:1d:2d:4e:b9:f9:74:3c:dc:19:1c:43:31:21:07:
32:58:a4:2a:03:f7:3b:c0:89:43:37:1b:4c:c4:26:0a:a4:7e:
13:76:25:dc:88:63:07:91:d6:b8:0a:6d:71:be:58:d1:6f:3d:
1a:dd:65:aa:f0:ec:df:71:8b:7a:12:ee:86:92:f5:78:ca:c5:
9b:fa:22:e1:82:ee:38:d2:c4:1c:4d:06:3c:8e:4a:1b:4a:b3:
cd:d7:35:7b:c2:44:e3:31:e6:28:57:7e:8d:08:55:b2:9a:50:
73:74:68:4a:cf:dd:8f:bb:e2:dd:23:b5:b0:cf:9e:a7:75:2d:
4b:90:1e:c0:ff:f3:4c:be:b2:ae:07:64:1d:f0:45:61:ae:e3:
79:85:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:33:20 2025 by rpki-client