Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/EUqk-yAaG5paOCIVkA1j8wPk104.roa
File: EUqk-yAaG5paOCIVkA1j8wPk104.roa (raw, json)
Hash identifier: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=
Subject key identifier: 11:4A:A4:FB:20:1A:1B:9A:5A:38:22:15:90:0D:63:F3:03:E4:D7:4E
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDACE3E215A23847C7CEB2C3063DC3
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/EUqk-yAaG5paOCIVkA1j8wPk104.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211613
IP address blocks: 95.161.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ac:e3:e2:15:a2:38:47:c7:ce:b2:c3:06:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=114aa4fb201a1b9a5a382215900d63f303e4d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:a7:f2:71:c4:13:a4:f8:e7:63:71:8f:c9:
a3:d6:82:95:66:7d:58:21:f4:2f:ca:df:64:d3:37:
5a:73:bd:a8:eb:32:03:21:ed:b9:fe:be:a5:7f:0c:
4b:ef:1a:cc:97:b5:b6:b2:8a:1f:f2:bb:18:76:77:
6d:07:41:0d:16:d9:d8:4a:fe:de:24:53:da:3e:da:
dc:96:2f:ed:ca:fa:b2:2e:c3:ac:bb:02:9a:7e:5b:
90:f4:22:51:a3:4c:49:d5:f9:94:a0:86:cf:d5:2c:
75:3e:a9:f3:26:a1:f0:97:d6:b9:d9:4c:6c:1f:e8:
ac:1a:7f:71:65:0b:e9:79:3c:3c:f7:b7:9f:bd:59:
a9:30:76:89:35:c1:fd:90:46:bf:ef:b8:b8:34:61:
b6:ee:6f:c9:af:bd:15:a8:68:b4:26:cc:59:47:3e:
74:2c:d2:5b:73:fe:88:88:41:63:95:d1:bc:d5:38:
c7:84:b8:8a:1b:d2:e8:58:df:45:2f:27:84:32:39:
45:f5:a4:20:22:c8:71:93:e1:4c:e0:4a:f2:1a:1a:
9c:41:8d:68:e4:a8:1c:81:18:7f:76:f2:29:4a:22:
b6:8c:38:92:a8:b1:16:c2:d7:c7:97:1b:cf:f8:f4:
c2:16:d8:c4:ea:ca:64:0d:77:66:9d:3d:83:1a:76:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:A4:FB:20:1A:1B:9A:5A:38:22:15:90:0D:63:F3:03:E4:D7:4E
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/EUqk-yAaG5paOCIVkA1j8wPk104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.92.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:78:5d:d1:bd:32:6d:de:5a:a7:7e:46:b9:6f:2e:8d:b0:be:
4f:44:a3:7b:b4:12:bf:03:3f:8a:00:8b:7e:48:20:ee:ad:51:
a8:72:6c:43:ad:b8:4d:27:61:56:81:23:b8:3f:9b:4e:c0:91:
75:3d:c5:f1:6c:58:25:72:98:67:6f:ec:47:84:ec:a7:28:85:
61:16:f8:06:84:34:c9:00:93:80:7c:2f:d1:a8:97:67:2b:0b:
8e:a0:d8:ae:19:28:16:93:de:0e:74:c2:6d:08:9d:b2:2d:b6:
9c:2e:7a:dd:04:fc:a3:27:73:f0:48:2d:13:03:4b:ef:ba:be:
d0:e8:46:35:4d:77:98:63:fe:3f:3d:e1:de:a3:75:19:35:fe:
32:8e:ec:6b:48:93:ad:3d:db:51:86:eb:9e:3a:96:19:31:2d:
ca:17:d5:c6:70:99:a2:73:54:1c:6f:85:66:b4:cb:d9:3f:52:
dc:36:d0:a8:9a:fe:48:ec:e4:98:14:8a:89:30:60:f8:02:8f:
fa:8d:c0:3a:18:d0:06:80:e9:41:c9:7b:8e:c0:eb:75:d6:84:
50:70:03:01:ba:e5:4c:27:fb:f3:fa:36:2e:c5:1a:f8:01:b1:
cc:b6:d0:19:89:9c:f6:1c:9e:25:51:8f:c9:68:c1:8d:de:15:
21:2c:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:12 2025 by rpki-client