Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ezIDmnmfXP-otKEwpp9PIe8LbuY.roa
File: ezIDmnmfXP-otKEwpp9PIe8LbuY.roa (raw, json)
Hash identifier: OWXY+6jlyYmK4/lYwrDCULGlp2I+Tnx62XdaE5QWam0=
Subject key identifier: 7B:32:03:9A:79:9F:5C:FF:A8:B4:A1:30:A6:9F:4F:21:EF:0B:6E:E6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824907ED15EF0C80283E36F72B0EA80
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ezIDmnmfXP-otKEwpp9PIe8LbuY.roa
Signing time: Thu 02 Jan 2025 17:51:12 +0000
ROA not before: Thu 02 Jan 2025 17:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59723
IP address blocks: 94.156.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:90:7e:d1:5e:f0:c8:02:83:e3:6f:72:b0:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b32039a799f5cffa8b4a130a69f4f21ef0b6ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:46:13:a5:c7:87:08:db:43:94:58:34:2a:
d6:7d:48:37:63:18:e8:64:06:d7:b3:cf:a9:53:1b:
4f:71:8e:4e:ac:19:58:75:09:5e:3c:14:53:a9:0a:
79:f4:cb:d9:c0:52:a0:f4:2d:ec:f0:f6:32:56:7e:
84:c7:8e:2a:ad:36:93:36:f6:84:23:27:5a:a6:fd:
6e:30:0c:46:06:f8:5a:3c:03:46:3a:6a:d3:fb:9b:
f3:4e:d7:aa:f9:68:69:07:f7:6c:de:85:28:f3:1b:
dd:89:d3:35:28:b8:b8:b7:07:0a:9f:fb:7e:91:6e:
e9:71:9b:f9:7e:0d:7f:8b:af:9f:d3:64:be:d9:95:
6b:de:40:24:54:ed:e2:7d:17:ca:8a:11:88:e1:0f:
44:d1:b6:39:5a:9c:14:c2:35:66:b1:5b:8f:69:2d:
14:dd:63:86:94:27:bd:a1:aa:8a:1a:bc:e8:3a:68:
06:b3:25:ef:09:76:e3:2f:c7:b8:0b:16:c5:78:5a:
8d:d1:86:fa:63:c0:2d:44:57:ab:d7:d3:59:b1:c4:
69:6c:21:99:51:ea:9d:e5:70:0c:29:18:7f:a5:ca:
cf:14:b1:b3:9c:b0:66:bc:ca:f7:fe:d4:e0:d3:39:
91:f4:45:89:8b:65:08:c7:7f:d9:30:78:a4:b7:e9:
fb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:32:03:9A:79:9F:5C:FF:A8:B4:A1:30:A6:9F:4F:21:EF:0B:6E:E6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ezIDmnmfXP-otKEwpp9PIe8LbuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.78.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2e:8d:e1:5f:ba:1b:ed:88:fa:52:a3:a0:73:6c:60:ed:2c:
54:ea:e2:a4:96:e4:30:d9:7a:2e:74:1e:84:a9:ea:0d:df:a9:
96:8c:6a:a2:61:b9:d4:16:e0:bc:0b:01:b2:9e:ab:8b:32:46:
39:87:94:11:51:b3:d1:09:8e:36:72:ea:d2:67:58:55:c1:42:
38:dd:3b:e9:1e:2b:7d:6f:33:d3:a3:40:a1:69:e6:03:d7:a6:
51:d5:70:31:ac:7f:2c:fb:1b:db:83:31:5b:a1:fd:75:61:b6:
e3:44:32:ff:2f:dd:6b:22:a2:67:99:46:c7:0b:ea:4a:39:9f:
50:b8:d7:72:e2:d8:69:b0:89:11:a2:a5:f9:1e:e2:78:8a:fe:
96:6c:50:14:47:b1:59:26:a3:c4:ed:c6:d6:5a:c5:b4:4a:40:
27:7d:38:32:96:37:46:28:1a:8a:17:52:19:fd:1a:4d:36:77:
3a:50:ca:79:2d:b1:44:82:c5:08:aa:79:3a:d7:6c:37:09:0f:
da:84:4b:ef:a8:3d:a5:d5:cf:08:59:b6:93:3a:f8:2b:43:2a:
6a:ba:58:13:dc:77:01:d6:c9:cb:9b:18:11:e1:31:4b:24:26:
0d:42:ca:76:a4:6b:74:b5:71:7e:cb:94:4a:84:91:04:75:9f:
ac:96:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:09 2025 by rpki-client