Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kE7edc6RxVB8wHBrlQuyIVRBSOE.roa
File: kE7edc6RxVB8wHBrlQuyIVRBSOE.roa (raw, json)
Hash identifier: VgCrc55fFSMPGAF1+eEmgsiO+WwjxfM4Lli8mq5wNmg=
Subject key identifier: 90:4E:DE:75:CE:91:C5:50:7C:C0:70:6B:95:0B:B2:21:54:41:48:E1
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01942823979DD1E3876DB380778B2E7C3373
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kE7edc6RxVB8wHBrlQuyIVRBSOE.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 87.248.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:97:9d:d1:e3:87:6d:b3:80:77:8b:2e:7c:33:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=904ede75ce91c5507cc0706b950bb221544148e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:56:19:26:67:98:7c:f5:6e:ab:15:f1:78:
01:8f:d4:8a:28:d0:1d:51:b5:6c:a6:59:92:eb:40:
2c:b0:0e:7b:9f:44:c1:9c:f3:b2:70:bf:9e:b3:40:
f6:d6:70:30:97:49:a0:30:6c:41:4a:17:85:2c:2f:
be:49:95:3f:10:a1:1b:59:ea:8c:d6:b1:61:8c:68:
50:92:a9:bf:6b:63:f3:dd:b8:c8:64:8f:6d:a4:27:
6c:ba:32:33:d5:df:e2:2b:aa:a2:a1:06:11:0d:bd:
2f:53:d0:98:24:22:e0:ec:a2:dc:8d:36:c9:92:3d:
61:12:3e:4d:37:80:55:5d:18:0e:87:bb:69:38:fa:
0e:c8:ca:ef:0a:b8:e8:4c:54:a0:2f:81:0e:4e:fd:
6c:e5:0e:ca:dc:61:b1:a2:ec:9f:15:7a:96:e2:0d:
48:8b:aa:17:e6:6e:47:3f:45:30:e6:11:b8:94:35:
2b:aa:91:25:bb:94:d2:79:92:2f:38:8b:09:bb:b1:
db:e5:9d:92:9d:2a:63:8a:0f:79:62:70:60:e6:db:
77:e0:74:69:65:ad:9c:b5:d1:61:ac:e4:8d:4d:f0:
6b:3c:88:01:35:67:4d:25:c0:53:36:c5:f0:33:3e:
1f:42:c0:1d:ff:53:d7:89:6a:55:3d:ea:11:ad:70:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:DE:75:CE:91:C5:50:7C:C0:70:6B:95:0B:B2:21:54:41:48:E1
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/kE7edc6RxVB8wHBrlQuyIVRBSOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.148.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6c:47:43:6a:b5:c2:bb:da:c5:ff:f6:8d:cc:2b:45:d4:59:
0d:28:98:69:55:3b:1a:0c:ca:5b:ad:f6:14:a2:5b:8c:4a:5f:
ea:ae:3f:ee:40:c5:56:fe:e1:1f:25:29:06:42:8b:cd:e0:38:
92:75:30:c9:2c:71:cf:f4:48:68:91:d0:80:82:f2:89:19:53:
64:78:21:d1:ca:ef:45:8c:0b:c3:6c:d6:06:04:ec:53:2a:dc:
71:f3:ee:8d:54:27:d1:5b:9a:c3:dc:41:48:82:19:e0:77:d4:
1a:f2:61:4e:f6:da:d9:93:17:bb:f6:6f:3c:95:89:57:ef:24:
0f:31:cd:f4:50:66:91:01:d0:99:f6:af:a0:1b:fc:7a:e7:59:
09:23:27:4d:91:af:02:bd:9a:03:6a:1f:ea:5c:c8:ce:e6:7b:
58:cd:b9:03:4f:46:c6:6f:67:eb:f3:b9:02:0e:2f:aa:ba:36:
00:d2:74:52:74:26:0e:88:ef:bf:3d:e5:a3:cf:02:e1:44:71:
3c:24:da:2e:0b:5f:d2:f4:6b:29:ae:0d:18:85:71:14:7e:10:
f3:33:e7:a5:40:db:72:e9:18:2a:11:50:3d:0c:a7:46:20:dd:
8d:d4:c0:be:5b:39:8d:57:0b:c3:0a:f8:60:90:26:09:80:3e:
72:e2:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:42 2025 by rpki-client