Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/eyY-erluNs3v5144XEgHxCFOudE.roa
File: eyY-erluNs3v5144XEgHxCFOudE.roa (raw, json)
Hash identifier: TBmAqLL8PbuQkrNWT7JMgvjhkU1ufdS4TOsNk7ShJ90=
Subject key identifier: 7B:26:3E:7A:B9:6E:36:CD:EF:E7:5E:38:5C:48:07:C4:21:4E:B9:D1
Certificate issuer: /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial: 01941F8C38A5CB8C972D3AC26E5EACF1AFAB
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/eyY-erluNs3v5144XEgHxCFOudE.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 91.217.253.0/24 maxlen: 24
91.220.28.0/24 maxlen: 24
91.220.35.0/24 maxlen: 24
91.220.71.0/24 maxlen: 24
164.138.248.0/21 maxlen: 24
164.138.254.0/24 maxlen: 24
2a0a:7d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:38:a5:cb:8c:97:2d:3a:c2:6e:5e:ac:f1:af:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b263e7ab96e36cdefe75e385c4807c4214eb9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:2e:ab:ad:e3:98:36:23:0f:31:c4:9f:11:
fc:1e:ce:ec:b2:88:8b:28:b1:46:ed:02:f3:3a:5d:
3e:06:ae:38:cb:27:43:b6:ba:41:56:33:fc:64:a1:
85:c0:28:6a:6e:a6:e4:09:a0:12:f3:37:40:14:a0:
6e:b4:28:6a:c4:01:03:52:34:d1:63:43:74:3b:f3:
10:aa:e8:67:3d:a2:7a:a7:db:81:7f:75:0d:5d:41:
ab:64:6e:75:58:51:bc:a5:a4:31:ea:65:6d:99:90:
07:05:34:e0:e2:04:06:c9:74:47:9a:89:e0:bc:76:
a0:15:a8:3a:0c:cc:0b:dd:fc:7e:15:70:69:2c:87:
0c:13:97:fe:5f:70:87:9e:88:2e:d2:1d:32:b5:34:
bd:a9:76:af:3a:9b:c7:5f:df:a7:e8:a2:ee:e4:f5:
93:1f:5b:b2:64:e9:0e:f4:ac:a2:80:2c:27:bc:37:
b4:10:e0:b9:7e:ad:8c:85:1a:76:42:bb:0c:7a:04:
1a:ee:41:79:63:d0:6c:fa:ed:ce:7a:5b:44:76:2e:
cd:a5:e7:87:56:e8:96:59:bc:f4:a1:8d:a8:85:5f:
88:d6:8f:47:7a:83:a6:57:49:ee:0d:a8:73:8f:58:
6e:85:00:7a:1d:e2:77:57:b8:9e:9f:b6:66:75:a0:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:3E:7A:B9:6E:36:CD:EF:E7:5E:38:5C:48:07:C4:21:4E:B9:D1
X509v3 Authority Key Identifier:
keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/eyY-erluNs3v5144XEgHxCFOudE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.253.0/24
91.220.28.0/24
91.220.35.0/24
91.220.71.0/24
164.138.248.0/21
IPv6:
2a0a:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
17:57:dc:7d:93:4d:57:3e:f6:ed:11:37:f4:d8:0d:d5:84:8e:
df:46:e1:fc:eb:70:25:4c:fc:7e:08:4a:2c:84:94:74:4d:c8:
33:d3:e4:69:1e:90:9d:27:30:42:35:bc:0b:34:d9:9f:e5:75:
85:b0:c6:71:54:07:f2:a8:5f:10:f2:b8:3b:b3:ad:3c:a7:c6:
b5:3d:d5:ca:95:db:ea:b2:4f:3f:b3:90:ac:5e:75:d0:ad:6d:
b5:cc:e4:22:4b:cc:27:df:18:e7:0f:3d:4d:ae:76:a0:d6:33:
c2:f8:ee:a9:99:08:59:bd:47:0d:4d:62:be:e4:de:28:47:c5:
8f:d9:1a:29:f2:91:b1:86:e1:16:eb:51:b1:4a:c6:de:0e:19:
16:f9:b0:ce:70:c6:ef:82:14:c5:f5:93:ec:10:22:2e:52:a4:
6e:6a:5c:dc:c6:fb:aa:be:01:2a:c2:a7:ce:3b:45:27:03:4b:
be:87:f6:0d:50:9f:de:ef:0e:a6:77:96:40:f5:5d:0e:29:e6:
81:31:53:2d:79:d1:5b:0c:14:61:32:37:e8:7e:01:1b:67:4b:
91:6e:c5:88:bd:e2:50:4a:d5:9b:fc:f9:d5:e4:e1:6a:2d:db:
ab:44:d2:07:a0:30:8d:5a:83:59:9f:80:46:ea:3b:d6:66:ca:
11:0b:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:43:26 2025 by rpki-client