Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa
File: EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa (raw, json)
Hash identifier: Us3Y5yljNy3p7flzVkHUSVVxPFvWxXzsb07771aSlx8=
Subject key identifier: 10:64:BF:5F:70:2D:8D:31:59:E5:50:F0:B5:5E:71:66:B2:A9:14:3C
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01941F8C5971E35106DFC2922FB2E631CA10
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34533
IP address blocks: 2a02:2698:6800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:59:71:e3:51:06:df:c2:92:2f:b2:e6:31:ca:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1064bf5f702d8d3159e550f0b55e7166b2a9143c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:e5:6d:03:5e:ff:65:23:7e:42:61:13:7b:
98:92:fb:09:87:68:04:22:fb:0b:37:ee:39:12:e5:
42:84:26:49:e2:d2:69:90:9d:59:b8:bd:b2:bc:00:
84:b6:50:b3:f9:b8:0f:f9:de:e2:c3:05:ac:c4:8c:
8c:6d:3c:e2:8f:73:2e:9a:41:ba:e4:ee:12:d5:a7:
a3:d7:b8:c5:5f:3e:9c:54:3c:b5:0e:23:35:9f:cf:
75:79:d4:f3:53:c5:00:f8:7d:e8:16:9f:ac:0e:f3:
85:34:b5:70:03:06:15:ca:8f:68:a9:19:b8:58:50:
39:d7:01:c8:44:8c:31:22:f1:ca:68:c7:0e:30:77:
c3:57:e7:9b:4c:3b:a1:73:c5:26:51:25:fd:5b:ee:
aa:5b:4e:86:2c:20:79:61:cd:79:f4:eb:03:4e:52:
8f:3d:1d:49:9f:5e:17:aa:08:a1:65:21:2c:d1:0b:
67:fb:22:d5:83:d3:55:c5:51:d5:cc:27:c2:da:24:
2c:c3:49:98:28:d0:5b:13:e9:25:87:38:94:37:e0:
aa:89:f5:f5:66:3d:06:ce:f8:17:36:fd:2a:0e:c8:
1f:18:16:d6:86:b7:4a:c9:32:3c:08:08:2e:3a:5e:
b4:8b:9d:09:89:82:f4:de:87:87:4a:b2:a3:65:9a:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:BF:5F:70:2D:8D:31:59:E5:50:F0:B5:5E:71:66:B2:A9:14:3C
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/EGS_X3AtjTFZ5VDwtV5xZrKpFDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:6800::/38
Signature Algorithm: sha256WithRSAEncryption
93:d9:30:4c:17:bf:15:1e:74:46:1f:73:38:7c:2f:68:95:01:
1e:71:eb:fd:91:79:45:94:fe:8b:be:95:56:af:ee:e0:2f:c7:
f9:fb:38:d7:6b:b3:2e:36:16:23:f3:80:f7:85:cd:04:2d:33:
49:71:fb:70:49:25:39:f6:9c:1f:1e:00:2f:f1:ee:14:9e:9e:
95:37:6a:ea:29:6b:e5:df:ef:b8:65:c1:b9:f9:06:1f:2c:54:
e7:85:80:d6:49:c7:9b:bb:a3:36:42:79:ed:3b:e2:ad:f7:d9:
55:61:21:22:ce:85:17:89:5f:6f:17:51:a9:6d:e5:4d:93:bf:
34:e3:93:52:5f:f8:a0:e9:8a:60:bd:ee:79:53:43:cc:13:67:
89:07:69:e1:69:74:a6:3e:8f:9a:08:2f:69:55:81:e6:f7:68:
ba:48:c4:17:09:32:66:a3:d7:9a:e6:4c:a0:78:6e:5c:e3:73:
f9:62:18:47:3f:a2:14:38:e7:f7:59:62:12:db:3d:b1:ab:3c:
18:6d:7a:64:9c:38:b3:4c:47:a3:35:b4:e2:cd:61:38:4a:da:
51:6a:90:e4:44:b2:a6:a3:11:db:75:a0:d5:f5:63:9e:db:2a:
53:c2:a8:29:9a:9d:84:a8:0c:9d:25:32:c5:69:3b:ea:83:fc:
07:8a:48:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:15 2025 by rpki-client