Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/EY7ogwruZGSD63obEpUnqn0nkuo.roa
File: EY7ogwruZGSD63obEpUnqn0nkuo.roa (raw, json)
Hash identifier: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=
Subject key identifier: 11:8E:E8:83:0A:EE:64:64:83:EB:7A:1B:12:95:27:AA:7D:27:92:EA
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 019428258C51539336A428EED40640A7D798
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/EY7ogwruZGSD63obEpUnqn0nkuo.roa
Signing time: Thu 02 Jan 2025 17:52:16 +0000
ROA not before: Thu 02 Jan 2025 17:52:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211043
IP address blocks: 46.244.99.0/24 maxlen: 24
92.240.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8c:51:53:93:36:a4:28:ee:d4:06:40:a7:d7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jan 2 17:52:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118ee8830aee646483eb7a1b129527aa7d2792ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:87:a1:24:5c:aa:7c:ba:eb:aa:ea:91:86:
0c:16:03:36:05:bd:8e:66:1f:e6:63:a2:2c:01:c0:
0f:bb:40:fc:70:59:86:a0:29:38:55:8b:dc:69:b2:
3f:6f:d2:d6:67:ab:27:28:d9:ee:94:65:a3:ec:43:
bf:3b:00:81:57:9e:e7:04:97:5d:1c:89:2f:12:58:
48:fa:66:3c:1d:7e:72:7d:63:6b:1d:48:96:02:47:
99:3d:5c:a6:98:85:c9:85:c2:40:c1:34:1b:db:cd:
d9:63:d6:95:c8:c1:f5:1f:49:cb:cf:1f:2e:2a:5c:
67:d6:8e:01:a8:7d:99:bb:77:ae:3e:f3:e2:b9:40:
80:48:44:8d:58:b0:df:ed:00:c7:1f:6e:8f:97:3a:
d8:8b:bc:bb:24:59:4d:58:c8:0b:b7:bf:c1:ef:e8:
bc:14:49:c2:8b:5d:55:8c:35:93:b6:ed:fe:fb:92:
da:39:de:b7:a9:68:c2:14:f1:db:7a:93:1c:3c:aa:
a7:7c:d6:c1:59:b4:3a:35:cb:57:6a:6a:a1:b8:18:
0e:b2:d2:db:d7:db:e7:c0:fa:13:e3:85:26:04:aa:
a2:5a:de:be:17:11:ef:aa:a3:cc:97:bd:24:9b:4c:
7a:d9:ed:25:36:7f:6f:0b:34:ec:6b:02:3e:39:b3:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8E:E8:83:0A:EE:64:64:83:EB:7A:1B:12:95:27:AA:7D:27:92:EA
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/EY7ogwruZGSD63obEpUnqn0nkuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.99.0/24
92.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:84:28:a4:4d:4e:38:de:98:c3:ad:1b:e2:3a:9d:cb:a2:33:
0c:98:fa:5e:74:c5:42:ed:e9:48:6f:d7:00:fc:a7:5b:23:2c:
a5:db:15:9d:b0:ed:b1:d3:aa:88:53:d0:80:ee:0c:47:0b:0f:
79:ff:05:a8:1b:48:f7:65:03:7f:bb:89:70:1e:df:9b:7e:8a:
79:90:28:da:b1:ef:68:be:0e:3f:fc:43:6b:f2:c1:21:e1:aa:
e6:ab:a7:37:fa:3a:4b:58:43:df:ae:61:6e:74:ac:a9:1e:3d:
0a:46:58:04:ec:9c:43:13:2f:eb:d2:03:ce:ce:89:3d:be:97:
a9:45:6c:7a:b1:9f:6d:e8:80:02:87:56:4e:0e:0e:a6:10:39:
32:05:87:f4:a2:41:45:9b:e1:8e:65:32:a0:74:f2:81:25:ff:
ad:8a:35:85:9c:97:0b:61:32:80:f7:ab:1a:04:58:cd:3c:14:
ed:e7:10:7f:58:55:8a:5c:8a:40:29:f3:2e:f6:31:e3:f4:4b:
66:7a:dc:0b:ce:5e:36:bc:58:e2:12:ac:d3:0e:eb:4b:87:0a:
ff:93:31:b3:44:14:45:4f:6e:55:17:0e:3a:28:ef:45:f6:cb:
e3:4b:33:7f:53:36:3d:a3:86:8c:89:67:1a:6e:32:70:86:47:
b1:20:d1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:26 2025 by rpki-client