Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EaYz9d8bcgido2cK-J8A5iABR88.roa
File: EaYz9d8bcgido2cK-J8A5iABR88.roa (raw, json)
Hash identifier: 4N+EHFeIdH2VhV+aazrq8nz7FcT1+8SnVmo4BQnN98I=
Subject key identifier: 11:A6:33:F5:DF:1B:72:08:9D:A3:67:0A:F8:9F:00:E6:20:01:47:CF
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019427481F9DBD48E0F0D89F72F58502B921
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EaYz9d8bcgido2cK-J8A5iABR88.roa
Signing time: Thu 02 Jan 2025 13:50:25 +0000
ROA not before: Thu 02 Jan 2025 13:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41075
IP address blocks: 94.199.176.0/23 maxlen: 24
95.140.33.0/24 maxlen: 24
185.6.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1f:9d:bd:48:e0:f0:d8:9f:72:f5:85:02:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11a633f5df1b72089da3670af89f00e6200147cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:18:69:f7:00:c8:e3:08:6b:b0:ca:8c:3c:
8c:59:84:a6:d6:4f:49:78:69:d9:33:4f:25:5d:c5:
d7:32:1b:d4:f0:9d:ba:d5:e2:3b:75:bf:9f:8e:b9:
5a:2c:35:74:5f:bf:e2:84:25:6b:f9:18:51:0a:76:
3a:27:f3:56:66:e4:7f:88:57:4a:a2:1a:d1:01:3b:
d8:c0:97:79:bc:02:b5:2e:6d:f9:95:ec:34:b5:4a:
31:66:27:16:4a:88:7f:cd:ad:e0:63:dd:62:de:ec:
25:cf:88:7e:f9:20:fe:e6:f9:f8:c7:f6:60:7e:a6:
de:9f:e7:ea:24:af:0a:84:12:5b:ea:92:12:b2:0e:
39:2d:0d:2b:48:5d:ac:ae:b7:04:9e:9e:45:59:a8:
bc:d6:84:93:ed:38:6a:88:17:1b:d1:3e:f9:3f:d1:
40:fa:05:c4:85:df:30:df:17:9c:4f:db:0d:51:34:
c3:3c:23:15:f9:3d:36:4c:03:1f:38:35:29:e7:9a:
73:83:0c:d6:44:22:a3:fe:ee:31:be:e2:0e:89:00:
a1:c4:63:83:5f:f5:a7:89:21:01:da:84:24:99:48:
78:8c:c4:8b:ae:4e:b9:14:90:9d:e0:fc:24:be:4e:
60:3f:dd:7a:f4:f0:ee:aa:a0:df:3b:d2:17:6e:68:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:33:F5:DF:1B:72:08:9D:A3:67:0A:F8:9F:00:E6:20:01:47:CF
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EaYz9d8bcgido2cK-J8A5iABR88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.176.0/23
95.140.33.0/24
185.6.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:91:77:ba:71:f4:a9:4c:6c:7d:af:40:18:80:58:3f:6c:47:
af:a3:bc:1b:02:49:db:1f:4d:32:65:f5:f4:79:db:94:00:49:
b8:43:f3:7c:69:15:24:5d:fb:4a:ae:21:a5:cb:2d:4e:b3:30:
2c:f6:2d:c2:48:11:d2:27:ef:7a:b5:21:01:d4:53:22:e4:f9:
27:b3:a2:f9:9a:06:6f:86:05:95:b4:fe:5a:42:12:04:9f:5b:
3f:fb:81:97:d1:96:1a:a2:43:bd:db:5c:ee:10:72:07:bb:79:
85:04:bc:84:12:d7:c0:7b:73:f7:fb:b2:1e:ff:8d:d5:0c:a2:
cb:55:92:05:61:f4:b1:0d:2d:18:3c:af:09:df:e0:a1:46:0c:
af:2b:6d:11:af:b2:45:9e:8a:7d:4a:84:08:81:c7:f3:07:77:
93:df:5d:df:21:ba:f4:a2:85:87:ec:28:12:c4:56:ac:3a:63:
f7:65:0d:8a:3f:08:80:3d:54:3d:d4:2d:fa:99:ac:85:0b:c5:
9e:e7:cb:48:5c:75:89:94:7b:6f:14:ad:91:e9:45:a4:49:f4:
df:6a:9b:00:96:1a:50:df:f5:2c:88:1a:fd:19:fb:db:9c:e6:
6b:8c:7f:32:fe:1f:d3:21:0a:b0:2b:29:f9:ea:f2:b6:81:cf:
07:66:b4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:03 2025 by rpki-client