Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/JuLc15VQAUmfB5AhoFLPEFJjfOM.roa
File: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (raw, json)
Hash identifier: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=
Subject key identifier: 26:E2:DC:D7:95:50:01:49:9F:07:90:21:A0:52:CF:10:52:63:7C:E3
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB1C6545B8EE23880B1B5FA9E8EA2
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/JuLc15VQAUmfB5AhoFLPEFJjfOM.roa
Signing time: Wed 01 Jan 2025 13:48:09 +0000
ROA not before: Wed 01 Jan 2025 13:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12831
IP address blocks: 89.191.160.0/20 maxlen: 20
89.191.176.0/20 maxlen: 20
213.192.64.0/20 maxlen: 20
213.192.80.0/20 maxlen: 20
213.192.96.0/20 maxlen: 20
213.192.112.0/20 maxlen: 20
2001:4070:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b1:c6:54:5b:8e:e2:38:80:b1:b5:fa:9e:8e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26e2dcd7955001499f079021a052cf1052637ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:7f:69:38:a0:26:f7:df:13:2f:be:27:f6:
f3:b7:d8:d3:f1:cf:70:83:39:03:c7:0e:0a:f8:cc:
ad:42:40:59:a4:b7:5c:60:63:d8:c1:f6:15:e8:f5:
fd:c7:61:06:7e:d0:a3:e2:88:39:66:5b:0a:0b:ba:
85:f1:11:39:5d:ca:72:7b:a7:6d:95:1c:a1:f0:c2:
bc:81:36:79:a7:fb:7c:93:7d:ab:08:ee:bb:dc:7e:
a3:30:4b:65:1d:56:67:a6:63:9d:2d:7a:cf:94:f6:
01:ef:f2:36:6b:67:3d:49:e9:47:1e:51:42:37:be:
9c:2c:72:c4:42:fd:41:19:7d:df:88:fc:33:a4:52:
41:4b:44:c1:c2:af:1e:25:c4:7e:51:fb:aa:ad:10:
4d:fa:fc:48:95:5e:74:7c:9d:18:10:55:aa:9c:07:
bc:74:6c:87:f3:a7:d8:9e:5b:db:58:fa:71:40:97:
84:e7:dd:25:04:c9:66:5c:ef:cf:c8:65:dd:a9:68:
d5:09:d0:56:38:72:e8:f9:d2:43:a2:71:20:c5:de:
d9:c6:e6:90:38:5e:06:0a:78:d0:d5:7a:23:f7:2d:
99:97:fd:63:0d:64:8d:cd:c4:23:96:ad:1d:37:1a:
0d:6c:a9:db:76:7a:68:dd:0c:1b:b4:e5:7c:ac:36:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E2:DC:D7:95:50:01:49:9F:07:90:21:A0:52:CF:10:52:63:7C:E3
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/JuLc15VQAUmfB5AhoFLPEFJjfOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.160.0/19
213.192.64.0/18
IPv6:
2001:4070:8000::/33
Signature Algorithm: sha256WithRSAEncryption
31:dc:ce:e5:ae:c6:b2:1e:e0:0d:57:8f:8c:e1:f1:32:60:67:
b6:26:47:7f:ad:78:da:51:99:a0:73:d0:15:78:da:21:90:44:
d6:6c:0e:77:49:18:fe:87:2c:a5:f5:54:b4:4a:d3:9a:76:18:
71:88:91:87:79:f1:ec:b4:bc:9e:d3:d4:a1:c9:8a:d9:38:30:
d8:2a:2b:48:0c:5b:31:0c:7a:27:dc:27:06:85:44:b9:ae:71:
54:45:68:84:e1:c2:e1:6b:aa:e8:65:09:85:04:3d:27:f8:52:
f5:56:87:ce:73:37:b5:e5:ad:10:1b:89:1b:88:2a:ed:8a:dd:
e2:7f:af:79:d1:ca:1f:9c:9b:e7:09:a2:88:4b:9c:7c:2c:52:
e3:8a:07:2e:e0:58:2c:e3:6b:d1:4f:b2:7f:49:b4:e7:46:43:
9e:3b:cf:b9:51:94:df:0c:58:0e:d5:3a:b0:c6:34:0f:cf:a8:
08:95:a1:39:9e:41:fd:54:fa:1f:3b:81:86:77:ec:82:8a:4d:
72:8b:dd:0e:43:39:da:d7:ed:f2:d2:72:78:0f:98:cf:27:10:
a8:f1:a8:c1:4b:90:44:29:29:07:fb:0a:c7:31:e7:dc:f8:9f:
eb:de:91:41:40:83:ca:29:76:8d:94:5d:a1:e3:62:3c:77:62:
b7:7a:d7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:08:59 2025 by rpki-client