Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ecGl7SXxfvzyrf_IROWG6PeXN6I.roa
File: ecGl7SXxfvzyrf_IROWG6PeXN6I.roa (raw, json)
Hash identifier: BeofmFT3DEwetEcQFY4kjdzbj6TWwwJHMUHk5ZEuYcY=
Subject key identifier: 79:C1:A5:ED:25:F1:7E:FC:F2:AD:FF:C8:44:E5:86:E8:F7:97:37:A2
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01942826A110E0B2AB17C5E2E4567C226345
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ecGl7SXxfvzyrf_IROWG6PeXN6I.roa
Signing time: Thu 02 Jan 2025 17:53:27 +0000
ROA not before: Thu 02 Jan 2025 17:53:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202425
IP address blocks: 45.148.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a1:10:e0:b2:ab:17:c5:e2:e4:56:7c:22:63:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 2 17:53:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79c1a5ed25f17efcf2adffc844e586e8f79737a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:eb:7b:7b:bf:f6:40:05:84:67:d3:f5:52:
b9:fc:6a:77:b8:23:e7:96:08:5f:d2:8c:43:07:1e:
62:e9:04:e6:94:ea:01:96:e6:7a:e4:29:7f:f6:7a:
5c:f2:4d:9c:17:06:e4:d2:f8:2e:0f:95:1c:01:09:
61:3e:81:8e:23:76:05:cd:a9:63:0a:a1:a2:64:ac:
dd:1d:a9:db:87:70:80:ed:2e:72:67:0e:06:f8:2e:
ae:73:af:94:ec:61:5a:2d:1a:69:6b:ba:ff:17:03:
b8:87:f4:4c:6c:03:d9:79:02:8c:63:13:46:b4:e3:
26:26:9f:08:fc:ef:e3:70:ee:c9:aa:1d:62:39:72:
27:de:d9:8c:bf:63:58:84:5c:79:93:bd:99:28:5b:
df:ce:7e:ce:82:f9:dc:81:29:7d:3a:0c:46:41:8e:
76:be:ed:d9:f2:7b:7b:12:95:24:49:7d:f2:14:3d:
d5:c2:90:77:78:9e:e0:18:31:9f:c7:38:c8:5f:44:
95:eb:01:34:db:9d:43:c9:8a:ea:25:57:65:1d:1b:
2b:41:2b:64:eb:f2:84:52:30:b9:b4:1d:f1:da:30:
1a:58:7d:53:04:35:f3:d2:c7:4b:b2:50:87:48:00:
83:d1:24:ac:6a:7f:c1:03:a4:1a:1d:f3:fc:08:3d:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C1:A5:ED:25:F1:7E:FC:F2:AD:FF:C8:44:E5:86:E8:F7:97:37:A2
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ecGl7SXxfvzyrf_IROWG6PeXN6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
59:78:5f:84:7d:fe:9b:33:bb:67:6c:f5:56:ce:9b:6e:65:a6:
1e:4a:19:3f:5f:01:1e:82:a9:7b:6a:9c:58:e7:2f:9c:56:5f:
43:0b:01:56:c0:a9:b7:af:fa:29:91:ad:18:c8:a2:b2:eb:03:
88:90:83:94:c1:78:3a:fa:71:39:61:45:c4:2a:cf:4d:b1:9b:
33:b9:01:9a:27:68:44:2e:0b:6f:05:df:29:fc:5e:87:ab:52:
dd:65:ae:09:46:29:c1:15:b3:2c:e3:7b:49:e9:c1:98:47:6a:
9d:2e:9f:7e:be:18:01:6c:98:9c:d7:aa:dd:5a:81:d3:ac:3c:
c6:38:aa:62:7a:05:50:7e:52:90:2e:cc:9d:ec:c1:a9:3b:a6:
ed:cb:23:bb:bb:34:ec:e1:04:8f:fb:30:d9:29:12:cc:40:17:
f8:be:2e:f4:77:dd:a8:80:fe:5e:b4:82:f6:b3:46:71:9f:af:
cf:54:c4:3a:7d:35:68:68:f8:89:d6:9d:0d:a9:51:f5:34:e5:
3d:df:7b:6c:2e:1b:48:44:ad:1f:d7:36:60:0e:7f:b5:d7:3f:
2d:7f:2f:d2:cd:2a:c5:d9:88:3d:9d:11:3e:77:52:9a:2f:e8:
80:00:84:a5:70:f2:b1:e7:b4:c6:4e:d1:fd:f2:f7:de:b1:8f:
1e:0e:b2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:23:18 2025 by rpki-client