Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/ELu3LuUF_RIVec7Qob2dIFhYU0M.roa
File: ELu3LuUF_RIVec7Qob2dIFhYU0M.roa (raw, json)
Hash identifier: wSf0qPOqXT4taNDWLndlbS/Ta5lAjuq2peZYJn7IxJY=
Subject key identifier: 10:BB:B7:2E:E5:05:FD:12:15:79:CE:D0:A1:BD:9D:20:58:58:53:43
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4BDE0E44A1733EEF0DC4A1EE3757
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/ELu3LuUF_RIVec7Qob2dIFhYU0M.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46746
IP address blocks: 82.112.107.0/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4b:de:0e:44:a1:73:3e:ef:0d:c4:a1:ee:37:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10bbb72ee505fd121579ced0a1bd9d2058585343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fe:ab:37:09:fd:ad:9c:09:a1:28:b7:c0:a5:
f9:19:a6:dd:32:67:24:c1:94:a0:73:e7:9e:ec:86:
e1:e2:90:e5:ca:f9:67:88:ce:5f:11:32:01:5f:5f:
b4:eb:8c:2e:78:e4:4b:b8:88:09:81:88:00:86:9a:
b6:04:c9:04:fb:48:d2:27:f6:da:60:47:30:12:e8:
8e:37:8f:5b:27:dc:d5:00:80:29:ff:b4:3e:4a:a0:
ef:43:35:df:2f:ed:2b:51:e4:7d:b9:33:c4:b3:5d:
b3:d7:f9:f0:bc:7f:ca:b2:de:01:9b:75:d0:f4:66:
32:30:16:aa:56:51:cc:a0:c8:53:16:df:79:e6:12:
4b:5d:80:ea:2d:56:af:03:a5:a5:79:52:16:81:53:
b9:2c:9e:bb:88:3f:e7:19:21:da:c0:e1:8d:d1:9c:
2e:90:1e:c4:97:4d:af:c6:0f:df:d5:95:e2:cd:36:
52:93:f8:46:fa:9f:19:94:01:72:ab:6a:7a:99:0d:
9b:ff:65:60:d5:49:42:04:8b:90:09:56:f7:79:2a:
2f:a1:94:c8:9e:55:b3:f0:44:aa:6c:7f:8b:c4:ff:
51:06:83:31:b5:95:de:4e:5c:b9:f5:06:6b:a3:4b:
30:c9:8c:33:08:2b:80:4d:4f:56:6a:04:3b:7b:fc:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:B7:2E:E5:05:FD:12:15:79:CE:D0:A1:BD:9D:20:58:58:53:43
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/ELu3LuUF_RIVec7Qob2dIFhYU0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.107.0/28
Signature Algorithm: sha256WithRSAEncryption
af:a0:b3:01:2b:52:d7:91:1d:6a:16:17:c1:0b:af:e0:76:5f:
5e:81:84:15:45:c0:c2:50:ec:1d:5a:23:e3:03:0b:ef:94:e7:
15:9e:e3:40:82:65:43:39:3d:a5:a7:85:f3:3b:cb:6f:55:f7:
4c:27:fe:2d:95:59:9a:54:a0:7e:71:0e:1c:83:88:7e:11:76:
48:c6:b8:e7:d8:f6:21:4b:30:15:a5:64:2b:6f:eb:3c:2f:3b:
50:6f:70:22:8b:3a:b6:a3:a5:9c:6d:a1:c8:09:41:2b:bd:22:
6d:03:3d:2f:f8:02:72:1b:3b:23:a1:97:28:0b:88:52:7d:7c:
f1:c3:0c:fc:c3:f8:89:72:8a:3f:1d:3b:75:51:aa:1f:43:50:
f7:88:40:e0:78:a3:86:c8:62:b0:9f:b6:2a:66:13:34:ff:26:
56:9d:1d:5f:84:8e:15:dc:ff:70:5d:b3:cb:1c:99:f5:4b:ca:
93:79:1a:53:5b:ab:49:2d:3d:d1:c5:32:18:7f:71:26:01:c4:
92:a6:81:7a:0c:fe:bf:da:f9:4b:f0:fa:4e:33:63:f6:e2:99:
a4:45:7c:cd:8a:88:2f:d1:4b:03:6c:d9:ce:61:fb:66:79:5a:
59:20:ff:59:34:39:2c:88:40:42:4c:78:07:0b:e4:8e:0d:2c:
72:3e:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:38 2025 by rpki-client