Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ePQ5xhOrkyTaDjeQUKKFt4Aztdc.roa
File: ePQ5xhOrkyTaDjeQUKKFt4Aztdc.roa (raw, json)
Hash identifier: VCe1eQBHKf1rqO5fVN2rj6HJYPfL8ta+CxLJmWt5ogM=
Subject key identifier: 78:F4:39:C6:13:AB:93:24:DA:0E:37:90:50:A2:85:B7:80:33:B5:D7
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282F9EB2EECDAF4E0EA27483736402
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ePQ5xhOrkyTaDjeQUKKFt4Aztdc.roa
Signing time: Thu 02 Jan 2025 17:55:09 +0000
ROA not before: Thu 02 Jan 2025 17:55:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209736
IP address blocks: 78.83.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2f:9e:b2:ee:cd:af:4e:0e:a2:74:83:73:64:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78f439c613ab9324da0e379050a285b78033b5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:34:8d:53:3b:c9:79:3a:c3:b7:9c:11:e5:
b6:a9:15:e5:28:38:99:0d:1a:5a:90:2b:52:0b:39:
c7:5f:c3:57:0a:91:13:4b:6a:ec:7f:84:33:d1:73:
7e:ca:19:2b:2c:51:b1:02:42:f1:b6:0b:d6:d4:12:
f8:35:41:4e:19:1d:56:d9:81:af:aa:36:4b:5d:2c:
97:26:b4:50:18:14:c8:fb:38:7b:57:75:d3:92:90:
e4:47:1c:b7:db:0d:3f:46:d8:1c:03:5f:cd:05:c8:
00:48:5a:4c:26:b7:1a:a0:57:3e:06:56:27:e8:fa:
56:1c:43:40:8d:c2:89:48:7b:79:1d:d5:bc:4b:12:
bc:e6:f5:2a:a5:50:a8:c8:5f:a4:2c:35:8a:c4:93:
72:d3:f1:b0:01:1e:9f:a9:54:2b:d8:70:1d:3c:4e:
09:a8:b1:b2:69:01:da:c0:06:9e:8a:1e:5b:78:0a:
87:31:23:40:12:f3:6b:8d:30:bd:fd:cf:6d:a6:f6:
f6:98:62:3e:a4:08:e5:e4:74:da:65:e8:94:78:44:
f5:35:e9:44:c9:78:5b:f3:d2:a6:9b:ad:ad:2f:eb:
6f:31:60:8f:f3:1e:2e:48:95:61:e7:3d:fa:09:16:
d8:32:42:79:7b:87:ed:6b:51:c5:01:a3:2a:32:cf:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F4:39:C6:13:AB:93:24:DA:0E:37:90:50:A2:85:B7:80:33:B5:D7
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/ePQ5xhOrkyTaDjeQUKKFt4Aztdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.140.0/24
Signature Algorithm: sha256WithRSAEncryption
47:b2:b6:16:ca:43:5f:a5:4f:8f:1b:cb:2e:54:66:dc:13:fb:
e1:f4:4f:09:da:cd:33:d8:00:dc:c5:14:39:e1:e7:5d:ab:4f:
f6:ae:a5:0d:32:cf:32:f3:62:55:8d:26:90:7f:ce:a8:4f:39:
18:8c:1f:ab:72:0f:58:f7:7e:c4:90:f8:9d:0c:65:77:45:24:
0d:76:eb:bb:32:7d:d9:44:c5:2c:7c:48:1c:ed:a0:dc:fe:16:
5c:01:a5:95:f2:25:59:68:fd:22:fb:82:c1:a1:35:9a:55:3d:
6d:3a:a6:a5:fc:1e:9e:eb:95:c6:46:65:0f:e9:b6:67:8c:79:
12:b7:4c:29:1d:b3:b7:c0:5d:3b:a7:f0:d5:15:8f:7e:24:93:
31:3a:d4:d7:aa:27:0f:56:a9:12:de:a5:73:74:8c:fd:62:50:
c2:17:e9:3e:ee:71:fa:58:a3:f3:e5:13:2b:62:d7:64:d6:32:
34:63:47:b8:a6:65:f3:09:dd:05:a2:c0:45:e0:8f:ad:a5:47:
e1:d6:d5:44:2e:37:32:37:24:1a:ec:ba:ab:96:9a:51:57:45:
3c:8e:ab:0d:eb:19:a2:2c:bd:36:22:36:cc:82:dd:56:78:ec:
73:f4:ec:ae:54:20:c9:be:a8:3d:9f:b9:27:95:4a:2a:32:3e:
93:8f:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:35 2025 by rpki-client