Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/eZijdgAhwuy-ZHRdobMyGcqAvoA.roa
File: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (raw, json)
Hash identifier: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=
Subject key identifier: 79:98:A3:76:00:21:C2:EC:BE:64:74:5D:A1:B3:32:19:CA:80:BE:80
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 01942444E33ED3B8E3AD7CEB5E581D4F23DE
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/eZijdgAhwuy-ZHRdobMyGcqAvoA.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44081
IP address blocks: 92.87.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e3:3e:d3:b8:e3:ad:7c:eb:5e:58:1d:4f:23:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7998a3760021c2ecbe64745da1b33219ca80be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:d8:f6:50:f3:b3:16:5d:3f:3f:a5:42:e3:
8a:da:f5:5d:2f:3b:07:b2:27:06:45:2f:7e:c2:22:
b5:84:c2:0b:70:1b:10:b8:75:a9:9b:00:f9:91:0f:
78:eb:07:c5:6d:ae:e9:95:af:93:b2:d3:d6:30:72:
70:52:8a:db:d9:79:71:92:05:fa:77:98:12:c7:5b:
27:8f:d4:6b:10:c8:64:e3:38:70:8e:ba:e9:2e:ab:
a7:e6:36:a7:4d:5a:5f:b0:ad:1f:ad:07:d7:41:39:
92:89:2f:ce:1f:e0:8e:ea:31:d8:2d:ea:5b:d9:c8:
74:65:ce:e3:6b:58:37:d2:ef:fa:6d:45:2d:75:52:
10:6a:94:81:e1:65:53:cf:18:96:69:1d:2e:d9:ce:
9f:6c:52:99:8a:f8:c0:f5:07:c5:ba:ad:c0:ab:4c:
84:94:2e:11:c8:7b:69:54:52:53:28:b8:68:b4:a7:
ac:6d:f5:da:00:85:af:e4:0f:40:6f:ae:88:61:95:
ee:3c:ee:87:f7:a7:83:58:92:15:9b:d7:1d:ab:87:
f9:b8:11:2c:23:cb:eb:9f:93:ba:c2:fe:4a:5e:a2:
f8:82:14:ca:10:14:d0:48:12:50:e1:ee:52:3a:ae:
0c:dc:e9:50:2a:83:31:91:9a:9c:c8:cc:96:f4:a7:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:A3:76:00:21:C2:EC:BE:64:74:5D:A1:B3:32:19:CA:80:BE:80
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/eZijdgAhwuy-ZHRdobMyGcqAvoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.87.128.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:ea:31:df:ab:88:a2:f3:1e:9e:39:d6:00:bf:34:5c:3a:8e:
0f:ba:00:45:ce:32:9a:0e:ad:a8:13:67:33:e9:7c:7e:d1:70:
43:13:aa:06:63:51:58:eb:e6:c4:bc:47:a3:6e:9b:b8:8b:df:
d0:ed:21:2b:f0:41:ea:8d:6e:a0:f1:0b:7c:b7:d3:4a:3f:37:
25:f3:86:4b:74:de:06:fc:9d:50:12:5e:a8:08:14:01:8c:95:
4a:a4:55:a6:59:d8:02:a9:49:19:56:9e:39:40:f2:a8:cb:07:
78:2a:0f:3d:f2:d8:eb:18:fb:1c:f9:fd:b1:77:46:5f:25:5f:
6d:14:23:ca:71:94:bd:54:c6:2e:c7:28:44:6d:5b:e7:77:5e:
0a:b4:52:07:d8:b5:e1:39:35:f4:d8:0e:0a:92:b6:52:e6:2b:
d5:b7:58:8c:b5:7e:ab:82:db:52:c8:e3:8f:19:db:85:4c:84:
9a:af:48:75:92:6b:21:af:9b:33:48:5f:10:06:27:34:6e:40:
43:f6:0e:e8:57:cf:d3:3f:f3:1b:98:4d:7a:f8:09:fd:67:e8:
3a:2e:b8:46:aa:71:76:51:0d:c3:8d:dd:28:e2:f5:f4:dd:70:
cd:08:a5:21:ea:e2:71:b7:2d:9d:b8:46:6c:f7:0c:7a:be:2e:
3b:ad:81:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:59:27 2025 by rpki-client