Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-2EBppiSOjktT4c8541NHUWIXp4.roa
File: 1-2EBppiSOjktT4c8541NHUWIXp4.roa (raw, json)
Hash identifier: mDi6ulbEvLogL54BCm4x5j5s52n2zOwohZJdy8LLDgM=
Subject key identifier: FB:61:01:A6:98:92:3A:39:2D:4F:87:3C:E7:8D:4D:1D:45:88:5E:9E
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 01941F8C3872249B4AB9221BF623B3537884
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-2EBppiSOjktT4c8541NHUWIXp4.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 164.138.248.0/21 maxlen: 24
2a0a:7d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:72:24:9b:4a:b9:22:1b:f6:23:b3:53:78:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6101a698923a392d4f873ce78d4d1d45885e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:57:17:c6:1d:96:63:c1:17:99:33:c4:01:
4f:3b:60:e5:df:17:87:62:1f:32:65:85:2d:1a:36:
f1:00:81:5a:7b:ce:d7:a9:76:65:2c:5f:78:4e:03:
39:32:68:1b:fe:fa:d7:a8:a4:97:09:4c:16:81:79:
28:86:d3:3c:36:3d:b0:ea:d6:38:3e:f3:84:ab:1c:
d8:9c:cb:39:d2:dc:41:82:90:90:77:96:a3:5d:2f:
bd:fa:03:0d:6b:47:55:91:99:3a:e4:fb:0e:be:46:
88:b0:8d:e6:e0:b5:5d:5a:9c:06:83:04:3d:2f:c8:
20:1b:b9:fb:f4:11:e1:2d:25:da:05:37:79:b6:16:
1d:a0:e4:0a:45:a6:8c:a1:21:2f:1b:1e:7b:d7:c1:
c4:b3:3f:30:4c:9e:b2:a7:bf:6a:88:dc:12:55:38:
74:51:ea:95:99:32:b2:67:0f:2e:1d:c1:9d:b8:d4:
0f:65:09:de:74:ce:24:d8:8b:28:8f:7a:b0:39:99:
39:0e:ef:4d:c3:db:25:14:46:10:98:e2:21:2a:87:
a4:a0:aa:8d:1a:29:dc:7e:84:b8:03:df:e8:ee:a4:
93:17:38:d7:82:59:a6:51:87:04:90:8e:d3:2d:c9:
88:b7:dd:e8:9b:cb:2b:66:00:a1:ac:92:ab:53:d3:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:01:A6:98:92:3A:39:2D:4F:87:3C:E7:8D:4D:1D:45:88:5E:9E
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/1-2EBppiSOjktT4c8541NHUWIXp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.248.0/21
IPv6:
2a0a:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
47:36:56:29:9e:05:6e:ef:3d:0e:29:1c:11:9e:78:47:a4:c4:
17:61:a5:01:7f:7f:05:e9:7a:79:43:33:31:6b:f2:5f:38:6d:
07:42:dc:b0:61:1e:3e:05:cd:41:92:bf:c2:34:4d:1f:0d:40:
d4:59:04:98:5c:6c:8a:eb:db:c5:ba:fb:01:cb:0e:4e:28:9c:
93:6c:a5:02:65:f1:69:61:80:b4:14:a8:28:78:6f:6f:b7:dd:
35:dd:97:a6:2b:85:27:19:c3:c0:19:b5:c4:c0:23:ed:29:d6:
76:9a:2b:a4:9b:61:33:6f:6b:50:36:31:d2:a3:74:17:7c:c0:
92:ba:37:bb:94:9a:59:96:3c:cb:1c:6f:75:81:7f:dc:d2:89:
c3:1d:00:fa:71:73:0a:ba:f3:64:9f:51:07:99:a4:ed:a1:df:
ad:e0:61:7b:00:c0:e0:e5:3a:ad:29:2e:f5:a4:01:99:a7:af:
27:b8:a8:f3:7d:48:10:a4:c4:2b:00:14:cd:fb:5d:67:e1:07:
c5:5a:57:40:5e:fe:52:85:af:10:c0:08:85:52:ef:45:7d:06:
ac:a5:e2:1b:d2:55:2d:c8:f4:3a:0b:40:ba:f0:7d:af:b9:72:
0c:db:72:dc:eb:04:d5:5b:ff:e2:46:52:ae:91:93:8d:39:e1:
be:ca:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:54 2025 by rpki-client