Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/EtJkvePPPWppk5nFnry3B6dGLBk.roa
File: EtJkvePPPWppk5nFnry3B6dGLBk.roa (raw, json)
Hash identifier: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=
Subject key identifier: 12:D2:64:BD:E3:CF:3D:6A:69:93:99:C5:9E:BC:B7:07:A7:46:2C:19
Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial: 019421B237A0C3F2C8E876ACD50B111D11A9
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/EtJkvePPPWppk5nFnry3B6dGLBk.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 77.246.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:37:a0:c3:f2:c8:e8:76:ac:d5:0b:11:1d:11:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12d264bde3cf3d6a699399c59ebcb707a7462c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:20:20:01:2e:e2:c4:f9:dc:7c:c2:75:7f:
46:ac:5c:c8:6a:0b:c1:4d:39:62:cf:8d:8f:11:cb:
95:79:dc:c3:d9:2f:17:a0:b0:20:91:e4:31:d7:3c:
ed:4e:3a:b2:24:c9:d2:e2:d6:ab:d2:df:0a:4f:a3:
14:a0:eb:a4:5b:fd:f1:a2:3e:bf:27:8e:07:ce:72:
66:c5:d7:81:79:59:10:7f:a2:7a:24:b4:a0:e8:b7:
46:ec:56:65:80:02:bf:89:19:9f:76:65:f6:ed:5c:
89:c9:77:28:68:d5:77:45:58:fe:97:c5:ec:5b:b0:
bf:e2:08:de:b6:91:82:e9:04:44:0e:a0:0f:4e:06:
98:dc:ab:da:f8:62:e4:86:01:55:a4:a5:b8:7c:58:
00:6d:d5:f4:0b:0e:89:f1:98:21:fa:2b:82:2a:fb:
84:8c:f2:f7:56:ea:08:e2:4a:68:53:b6:5c:b5:07:
57:c2:8a:c1:09:c5:b5:e5:3a:b2:89:cd:0d:91:78:
db:68:d4:fe:ab:a4:f3:56:9b:d2:04:9d:c6:ca:c8:
35:3c:1b:b1:d4:77:d7:ad:bb:fb:46:a6:ab:5e:99:
98:44:62:6a:8d:8d:6d:c1:dd:93:42:b3:89:d9:c7:
c3:cd:ab:57:03:14:5a:1a:8a:5e:0d:c8:5a:44:76:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:64:BD:E3:CF:3D:6A:69:93:99:C5:9E:BC:B7:07:A7:46:2C:19
X509v3 Authority Key Identifier:
keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/EtJkvePPPWppk5nFnry3B6dGLBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.60.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c6:0c:5d:94:ec:01:f4:f1:df:82:d2:22:c2:d1:1c:77:73:
ff:fd:d1:b2:46:8a:79:a9:62:63:5f:f8:eb:9e:e8:dc:94:5e:
89:44:bd:f9:ff:69:89:b0:3a:a8:ac:fd:c2:a3:9e:9a:d7:b2:
a8:d9:30:19:c6:8c:b2:8e:c4:4b:e8:fd:9b:16:52:23:2d:45:
a8:c5:d0:87:75:3a:7b:07:3d:2e:12:66:e4:64:18:30:21:bd:
7c:11:96:44:65:bc:47:33:7b:6d:5d:25:fe:d0:db:1a:1a:d6:
83:d5:3a:84:b8:82:62:85:4e:81:e0:e8:b0:85:1f:cf:84:30:
97:96:4f:d5:da:e4:67:7f:27:2c:8f:62:a3:04:91:ff:8f:35:
4b:9e:cf:4c:4c:28:93:8a:62:fb:b2:5c:6d:4f:16:0e:a6:2b:
20:7a:32:50:a6:e5:c2:38:d7:90:72:a3:49:5a:ac:1e:ab:62:
e5:33:72:ca:98:00:33:4e:1f:fb:0e:95:66:ef:c6:3e:37:fa:
e3:40:64:e4:18:33:a8:3f:02:e8:52:6c:c8:b6:5a:31:12:96:
74:a0:55:fc:51:d9:4e:04:c7:22:6f:c5:06:f1:38:41:c7:29:
88:56:97:d7:49:07:74:e4:50:63:1c:11:05:24:4c:cf:27:3e:
7a:fc:d4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:02:08 2025 by rpki-client