Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/ePyQopOScagWFzEkE8JnltAqMeo.roa
File: ePyQopOScagWFzEkE8JnltAqMeo.roa (raw, json)
Hash identifier: HBo6Q0ESBQ76lXOKaYzIqOC//rtW1Zw5+A47hcrlRkM=
Subject key identifier: 78:FC:90:A2:93:92:71:A8:16:17:31:24:13:C2:67:96:D0:2A:31:EA
Certificate issuer: /CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Certificate serial: 0195C7976C059E79C9204798E11EA14F771E
Authority key identifier: 53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/ePyQopOScagWFzEkE8JnltAqMeo.roa
Signing time: Mon 24 Mar 2025 09:59:04 +0000
ROA not before: Mon 24 Mar 2025 09:59:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29085
IP address blocks: 185.116.28.0/22 maxlen: 22
185.116.28.0/24 maxlen: 24
185.116.29.0/24 maxlen: 24
185.116.30.0/24 maxlen: 24
185.116.31.0/24 maxlen: 24
193.109.74.0/23 maxlen: 23
193.109.74.0/24 maxlen: 24
193.109.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:97:6c:05:9e:79:c9:20:47:98:e1:1e:a1:4f:77:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335cac70a198a85f324bfeda0f35ed7991c2aeb
Validity
Not Before: Mar 24 09:59:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78fc90a2939271a81617312413c26796d02a31ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:fd:6a:b4:c6:24:dd:af:78:58:47:eb:d8:
ff:88:47:b4:1d:e2:eb:46:83:1f:28:c4:45:8b:f0:
81:ca:e0:90:1c:d7:f2:e0:1e:22:8c:7f:ca:00:91:
3a:ba:e5:9d:df:53:34:22:4b:f3:5a:8b:91:ff:8f:
a1:8b:b2:71:f3:6a:bb:c8:c9:6c:1e:26:7f:da:e8:
44:bd:a2:cc:64:84:d8:73:5d:54:e6:17:6e:00:f6:
8f:b7:08:d2:d4:e7:f6:f4:e9:cb:11:65:d3:01:d7:
89:b2:6d:1a:9b:fc:19:9e:37:8d:82:d2:02:27:7a:
bf:3c:c5:a3:53:3a:ff:2b:89:fc:58:5d:cb:d6:56:
bf:cd:58:5e:07:56:28:56:57:d3:ce:90:46:aa:9c:
48:31:39:da:dd:86:99:e5:33:c5:29:04:21:54:4a:
49:3f:da:09:fa:77:49:8c:8e:ae:eb:bc:d9:91:f8:
32:b0:3e:b0:72:f8:3c:b9:27:37:33:62:dd:75:f9:
53:3b:83:0f:b4:41:04:6c:dd:2d:14:ee:cc:94:cc:
b5:0c:02:7b:13:31:63:9f:03:75:93:87:fd:71:d8:
32:75:3b:17:63:6e:9a:58:64:ee:88:36:e5:0e:7d:
96:6f:00:12:1a:00:f3:52:50:3c:fb:f0:7d:e6:ab:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:90:A2:93:92:71:A8:16:17:31:24:13:C2:67:96:D0:2A:31:EA
X509v3 Authority Key Identifier:
keyid:53:35:CA:C7:0A:19:8A:85:F3:24:BF:ED:A0:F3:5E:D7:99:1C:2A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXKxwoZioXzJL_toPNe15kcKus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/ePyQopOScagWFzEkE8JnltAqMeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/90cf3e-d468-443c-afa4-f34a8f72eec4/1/UzXKxwoZioXzJL_toPNe15kcKus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.28.0/22
193.109.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:03:c5:1e:8f:67:10:1b:fc:49:46:e1:9b:6d:ad:30:6c:b0:
a0:85:37:66:3a:9d:aa:58:3c:1b:98:d0:e6:71:20:a8:e1:11:
44:b5:15:64:eb:cb:79:16:4c:9f:1b:c9:b9:86:9d:84:93:15:
cf:cb:a5:dc:56:c5:89:e6:89:26:79:28:0c:6b:a2:01:43:5c:
d2:f8:8e:4c:b6:f2:f9:59:1a:57:ad:39:b9:61:96:b3:e1:10:
df:ed:7a:e2:00:4d:0d:1d:b6:83:f6:5b:8e:2c:01:93:64:c5:
24:f3:64:e7:14:25:98:25:18:93:d0:5f:86:ef:eb:3f:7c:78:
9c:12:ab:a8:af:ad:97:4a:6b:93:0b:bf:83:74:71:61:15:ce:
c9:81:5b:2a:75:b5:0e:dd:b3:2c:a5:27:a9:b7:3a:e0:9b:e4:
85:83:0b:57:47:9d:48:17:23:fe:0c:e4:a3:f5:35:1e:78:63:
73:4f:22:c9:d5:de:25:3d:14:78:7c:60:07:2f:db:d8:bb:02:
c7:a0:ed:83:2f:f1:06:31:d9:64:61:2a:68:43:bf:e8:ed:ec:
19:5d:c4:b3:52:ec:24:81:20:78:c8:d8:0d:18:26:c8:1a:e7:
fc:61:a0:66:92:8d:4f:8d:6d:6b:36:bf:3a:b3:74:24:b4:8e:
4d:9a:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:56:02 2025 by rpki-client