Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/eIbScniidhxgoW_2gLpLbnftECI.roa
File: eIbScniidhxgoW_2gLpLbnftECI.roa (raw, json)
Hash identifier: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=
Subject key identifier: 78:86:D2:72:78:A2:76:1C:60:A1:6F:F6:80:BA:4B:6E:77:ED:10:22
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019424B3D07625437C9B8E1F348090BFE0A4
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/eIbScniidhxgoW_2gLpLbnftECI.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 195.248.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d0:76:25:43:7c:9b:8e:1f:34:80:90:bf:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7886d27278a2761c60a16ff680ba4b6e77ed1022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:20:4e:a0:68:e0:84:97:d4:3a:c3:5e:90:
a3:d7:b2:46:cf:1a:73:58:0a:0c:1e:b2:5f:58:e3:
4f:32:3d:8b:95:8e:78:50:84:4f:cb:77:f7:6b:4b:
42:10:8f:07:d9:7b:4e:a8:78:58:eb:e3:57:be:d2:
4b:f7:5a:b0:0c:54:3d:f2:62:a9:54:fa:a3:af:48:
9f:fc:f2:f6:92:c3:8a:b8:35:82:91:0d:18:62:07:
c3:3d:8a:61:0e:42:5f:ac:6f:6d:2e:dc:03:e4:77:
13:f0:2f:7d:87:c3:18:9b:98:c0:fc:69:9d:39:9d:
55:da:6d:58:b2:5a:eb:b1:fa:59:71:e6:29:b2:68:
38:ff:69:41:0e:cf:15:fd:84:cd:c9:00:fa:1f:79:
76:fd:48:67:15:ab:19:01:95:4f:bf:c8:7b:0c:32:
f3:74:50:e8:90:9d:6c:62:6c:a4:41:0b:31:78:17:
c3:6e:07:64:1a:c2:1a:07:7c:62:e3:78:d7:fe:be:
92:b7:29:bf:16:92:86:fb:6c:e6:a1:9e:d3:0c:e1:
01:91:e1:4f:6e:5a:71:52:da:d5:58:f1:59:c4:67:
75:96:f5:54:e8:b9:a6:d6:92:62:36:fe:33:3b:c7:
34:0f:14:41:1b:2d:08:04:c7:e3:6d:d8:a8:23:64:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:D2:72:78:A2:76:1C:60:A1:6F:F6:80:BA:4B:6E:77:ED:10:22
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/eIbScniidhxgoW_2gLpLbnftECI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b6:e4:80:f5:c3:73:30:3c:a2:2e:f5:9c:6f:74:db:fc:d3:
5c:1c:45:e1:c5:77:1f:1e:6a:46:4b:04:9c:22:63:4b:eb:74:
3f:a4:cc:1d:8f:ab:43:44:96:85:34:fe:1b:74:0d:69:85:1d:
3f:d5:87:73:96:5c:1b:7e:9f:7f:db:8c:85:71:95:33:0f:6e:
3c:d4:ec:6b:b1:08:96:e9:eb:8e:94:7a:44:72:93:82:a3:f2:
cb:6e:b6:98:1e:c1:b7:b5:10:91:d9:f8:b9:45:0c:63:61:e5:
3f:d4:1f:26:ba:cc:06:e8:c8:f5:1d:60:b9:d3:7c:07:61:87:
a1:24:5d:a2:3d:83:39:23:04:87:85:8d:10:90:e3:6b:74:71:
0c:33:b9:98:86:12:7a:d1:d5:ee:f9:bd:aa:d3:f9:1b:6b:47:
54:e3:02:b0:41:7e:9b:b6:08:46:8d:c3:69:f0:5e:54:06:8c:
b5:54:cc:99:f9:5f:f0:2c:fe:d2:8f:f8:9f:dd:65:bb:ab:41:
a2:9e:da:19:62:97:03:e6:c8:a1:8d:7e:f2:fd:c6:bf:40:6f:
eb:b5:d8:67:c2:24:db:47:b7:f2:aa:43:7c:a8:e6:e1:5e:3c:
b4:c9:4f:a5:7b:5a:d5:48:3a:8c:58:8d:f9:68:d6:04:0e:97:
88:18:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:54:55 2025 by rpki-client