Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EgXXGvA-2XcpMopQdo39_bM2xWk.roa
File: EgXXGvA-2XcpMopQdo39_bM2xWk.roa (raw, json)
Hash identifier: 5y4L7KkH3QjO4J+FpnQq0BcBHJvCcabOmTJ9/kpUKTM=
Subject key identifier: 12:05:D7:1A:F0:3E:D9:77:29:32:8A:50:76:8D:FD:FD:B3:36:C5:69
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F8E90254F580099DF8F24B9B8DF1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EgXXGvA-2XcpMopQdo39_bM2xWk.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198071
IP address blocks: 194.87.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f8:e9:02:54:f5:80:09:9d:f8:f2:4b:9b:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1205d71af03ed97729328a50768dfdfdb336c569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:90:3a:c0:42:60:0d:db:fb:05:3c:41:d6:4b:
a5:21:61:ce:2f:24:e0:bd:de:b3:50:f4:43:92:3f:
39:23:8c:0e:70:f8:b2:da:52:a9:e2:38:ef:01:aa:
50:23:6d:5c:99:73:73:f2:58:0b:12:24:dd:cb:76:
8d:ba:2e:fd:b2:cb:b8:9c:ae:63:66:25:3d:03:3f:
f5:d6:4d:33:6a:d0:23:f0:5f:ef:4d:53:32:d0:9b:
d8:c6:f3:e4:44:20:dd:3b:6e:1e:ec:a6:73:f3:82:
5a:5e:64:75:95:3e:1e:44:9e:09:24:62:fd:68:96:
ab:be:55:07:d4:cc:78:ed:b1:10:f0:15:a8:e7:2e:
67:62:e9:c2:18:1e:77:a4:08:37:26:73:51:e8:57:
3f:9a:60:b3:3e:7e:88:7a:0d:5a:4d:3a:8c:83:86:
cb:a7:02:6a:51:55:b3:07:fc:b6:3e:9c:3a:23:82:
e5:90:a7:c5:1e:cb:ce:66:c8:b5:52:4c:5d:6d:c5:
51:01:57:37:d6:9c:41:92:c8:00:65:bf:27:2d:4e:
12:ca:03:1f:b6:86:57:58:51:70:6e:3f:86:5c:ee:
8e:b5:9e:e3:81:6d:cc:64:b5:a8:4c:a0:71:40:61:
f1:5b:1e:94:3b:d2:31:e2:4f:3f:2c:40:37:9f:78:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:05:D7:1A:F0:3E:D9:77:29:32:8A:50:76:8D:FD:FD:B3:36:C5:69
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EgXXGvA-2XcpMopQdo39_bM2xWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.141.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0e:1d:0c:64:67:83:63:a8:c1:27:47:f0:73:4b:8d:cb:81:
3d:56:3c:b2:40:b7:20:2a:01:ac:1e:b4:41:af:15:a8:b2:f2:
18:2e:87:fb:16:91:05:da:ca:9d:fe:ce:2c:63:09:63:d0:1f:
8a:fd:e8:9b:4c:fd:e3:14:d7:50:df:c9:ce:aa:e8:a4:e0:79:
13:24:e9:c8:9f:f8:37:f7:39:e0:65:2d:e9:dc:3b:43:d3:93:
d2:6d:de:22:27:b2:2f:5f:f0:25:a0:7f:c8:72:ae:1a:c1:0f:
ef:b8:74:f5:bb:49:1b:73:13:d6:91:49:74:48:a0:03:91:ee:
7f:e8:dd:1b:18:d4:81:7b:6a:93:a4:27:89:fc:4b:89:eb:a4:
2f:8d:0e:c5:ee:27:39:b1:28:60:db:28:51:39:8a:f3:e0:a3:
e2:78:8f:fe:36:f3:46:fb:b8:93:aa:c5:54:14:ad:a5:38:6d:
5e:46:ab:e7:82:31:ae:f4:13:57:0e:ab:3a:64:85:ed:a7:28:
89:65:c7:2a:9e:57:bf:82:93:a0:47:2e:0c:6c:08:00:3d:f9:
3a:5a:5b:3b:c1:b0:a5:c1:b1:20:7e:64:56:ac:0b:57:00:12:
45:d3:ae:06:6f:d8:e7:66:13:03:75:ec:09:ee:05:8d:61:d3:
2a:43:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:35 2025 by rpki-client