Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa
File: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (raw, json)
Hash identifier: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=
Subject key identifier: 79:81:77:93:6C:32:7C:5E:13:E5:A0:D6:FD:4B:3B:6C:FE:BA:11:EE
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FF472882026271984968CD4CD1046
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214279
IP address blocks: 43.240.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f4:72:88:20:26:27:19:84:96:8c:d4:cd:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798177936c327c5e13e5a0d6fd4b3b6cfeba11ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:19:22:9c:9c:22:63:5f:48:29:08:71:05:
91:98:35:72:87:b0:c6:b4:af:f7:a3:ed:da:77:ca:
5f:b6:e1:3b:b1:9e:c9:fb:c6:19:f1:7c:68:4b:d7:
f8:62:c3:f4:7c:ec:ac:dc:c4:a1:2a:31:7a:22:c7:
6c:38:ad:ee:28:40:9c:10:af:04:04:2d:49:c1:3e:
09:a8:b4:8e:c1:58:f7:e4:9c:9f:7d:7a:08:89:e6:
55:1f:fa:bf:be:8b:0f:be:0f:56:ad:af:60:1f:aa:
c0:32:4a:5d:ae:e2:b3:51:e9:37:d1:c4:5e:e1:81:
9b:96:9a:34:a8:89:f5:5f:86:31:77:3e:21:51:2d:
ae:46:2e:f7:30:68:06:aa:e7:b3:0d:dd:7a:ea:06:
98:26:d1:2a:ce:7a:4f:8f:37:9d:6b:4f:3a:b6:81:
ce:64:9a:77:1a:84:87:6e:fe:12:80:c3:fa:74:7b:
62:7a:8f:de:90:14:5b:0e:a7:13:e9:68:73:b2:71:
a7:b6:d5:66:1c:0c:80:69:5a:20:ff:67:4b:c1:79:
9d:fd:c9:7c:53:81:62:41:09:5e:58:e5:27:f6:18:
2b:18:98:94:27:8f:bc:c6:d9:77:cb:21:1d:d7:6b:
1c:3c:b9:bc:84:a0:6d:4c:ab:d7:5b:5f:29:02:a6:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:77:93:6C:32:7C:5E:13:E5:A0:D6:FD:4B:3B:6C:FE:BA:11:EE
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.149.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:53:d5:31:8f:b0:75:a1:f4:a6:ff:aa:ca:01:0f:86:27:f2:
45:c3:13:a6:f4:7d:61:ef:b3:96:ef:dc:59:90:36:f2:bb:2d:
bf:3d:e6:a5:c7:f4:38:37:9d:19:cf:2b:f2:18:b6:92:21:4e:
03:2a:7e:31:f9:25:68:40:cd:87:5d:ec:95:1f:2d:da:e5:c7:
81:52:b0:46:74:20:dc:b8:1a:a0:55:a2:f9:c5:80:9a:09:7c:
9e:31:60:7e:b4:fb:b8:c0:ce:8b:78:92:10:1a:76:59:74:4a:
47:cc:24:7c:06:05:51:ce:e2:7d:90:88:ce:0f:ff:89:b8:6c:
ea:c0:a9:d7:4f:a8:79:eb:60:af:9d:07:53:cc:06:d7:f7:9a:
5f:c0:2c:cd:2d:16:71:94:ed:0a:26:a3:68:b7:02:67:ef:f2:
90:78:95:a0:64:ac:e0:9a:6b:ed:0b:fd:18:b1:8b:71:67:9c:
cf:6a:f1:d7:63:d6:e8:10:83:1b:e5:a8:62:57:cc:ea:69:7b:
46:f0:7e:35:f7:94:60:2e:42:05:b6:f9:f7:46:77:45:82:b3:
f6:a5:da:47:01:74:87:46:3b:4c:fc:6c:30:83:6c:61:6f:2f:
b2:ee:f9:b7:0b:fd:c6:20:45:da:c3:18:08:f0:2f:f2:cb:2a:
fa:49:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:04 2025 by rpki-client