Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/ELPDypl8AO7yu9Qb_T04CJHIAmc.roa
File: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (raw, json)
Hash identifier: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=
Subject key identifier: 10:B3:C3:CA:99:7C:00:EE:F2:BB:D4:1B:FD:3D:38:08:91:C8:02:67
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01942143FA0C7DF19D15B0C8DA11E6EC5545
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/ELPDypl8AO7yu9Qb_T04CJHIAmc.roa
Signing time: Wed 01 Jan 2025 09:48:10 +0000
ROA not before: Wed 01 Jan 2025 09:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60233
IP address blocks: 94.177.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fa:0c:7d:f1:9d:15:b0:c8:da:11:e6:ec:55:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 1 09:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b3c3ca997c00eef2bbd41bfd3d380891c80267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2a:d7:cb:1d:57:ae:08:1f:20:12:5f:ff:f9:
ab:ad:98:da:2d:b9:11:f6:6d:24:50:5e:cf:e4:d8:
67:41:03:58:98:af:5b:a8:73:b5:0b:cd:1b:e6:20:
c8:52:7f:81:3e:50:28:6f:5b:64:b4:e1:b2:f2:ab:
8a:0d:9e:fd:cb:43:e3:4a:ac:af:c5:19:59:ad:01:
2d:bf:21:72:61:da:66:29:1d:72:c9:e2:56:fe:a4:
49:22:bf:95:dc:eb:de:5a:7f:60:2d:30:8f:93:0f:
eb:02:a5:30:be:0b:cb:8e:d8:e9:5e:9d:0f:50:34:
57:5e:a4:6f:f2:d8:2f:f8:58:0b:b8:93:d7:ed:ca:
6f:43:aa:10:00:cc:0c:94:d8:34:5c:2a:0a:6c:81:
8d:26:19:c3:5e:c8:28:1e:33:cb:35:8c:9b:95:43:
11:df:db:d9:b3:69:8b:67:56:7b:c6:a8:f0:2c:98:
14:24:c1:7c:d4:88:8f:b0:2d:50:cb:1a:77:77:5c:
9d:94:b6:85:b0:c0:a3:5d:a0:72:29:2c:e7:1d:84:
1b:50:ed:73:83:32:99:35:33:7b:5c:3d:a5:33:92:
1a:e9:61:43:26:ab:af:82:72:51:9a:47:38:59:39:
39:2b:d9:62:d1:9a:d3:94:6a:67:e5:ae:bb:d6:38:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:C3:CA:99:7C:00:EE:F2:BB:D4:1B:FD:3D:38:08:91:C8:02:67
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/ELPDypl8AO7yu9Qb_T04CJHIAmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.80.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:65:99:c0:d5:08:42:ab:9d:31:8b:24:1c:1f:24:76:0f:51:
05:bf:79:6e:f3:3c:29:cd:da:ff:bf:d9:bd:6c:b0:ad:69:8d:
8d:63:5c:2c:73:ba:0a:1f:1e:56:d1:64:bf:e9:e2:b8:44:36:
2b:53:62:8d:d5:d8:e7:0a:98:1f:12:32:63:94:3e:e9:3a:e6:
ad:b6:4a:03:42:fd:65:22:3b:b7:09:e4:ee:a9:04:7d:98:16:
18:09:c5:e2:20:e1:f1:f2:2c:e5:cc:b1:91:55:5d:89:4b:1d:
b4:38:02:8b:55:e0:b6:f4:c4:ed:dd:40:48:29:69:27:f1:4e:
bb:98:40:87:66:5e:58:13:49:65:63:43:6f:fc:3b:fc:5d:3d:
00:c0:2b:21:b3:3e:a7:a5:ce:d1:c9:f5:6d:02:4c:a8:f5:19:
b7:14:1f:0f:80:84:39:a1:b9:98:8c:f9:cd:ec:5f:cd:ef:36:
b7:d2:2e:93:cd:6a:f1:0a:c9:41:bf:d4:92:28:01:26:eb:e8:
fb:32:4c:e3:bd:4c:b8:bc:ff:6c:19:ca:c7:9c:6b:59:f1:04:
7d:fd:1d:7e:f1:ad:b5:54:6d:45:2d:90:98:3e:fc:63:83:d4:
ce:85:ec:ba:0b:fc:eb:05:88:3c:4b:41:94:11:d0:94:8f:6c:
a2:e7:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:11:44 2025 by rpki-client