Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/EnZTRjVsyeH5YvN_IXdrjMInto8.roa
File: EnZTRjVsyeH5YvN_IXdrjMInto8.roa (raw, json)
Hash identifier: dGNdfgQT3ZLKhZ/v9I6RHyrRDvkswkwt2I+OFKs6hJw=
Subject key identifier: 12:76:53:46:35:6C:C9:E1:F9:62:F3:7F:21:77:6B:8C:C2:27:B6:8F
Certificate issuer: /CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Certificate serial: 0194228D4640041D2E5B1F0DBEA2DCC474FC
Authority key identifier: A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/EnZTRjVsyeH5YvN_IXdrjMInto8.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51493
IP address blocks: 91.217.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:46:40:04:1d:2e:5b:1f:0d:be:a2:dc:c4:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a70627bb45cd6c71f22019226a6a1895222f07
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12765346356cc9e1f962f37f21776b8cc227b68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:51:f2:f2:cf:03:bb:e1:12:68:b1:cf:46:
a0:3c:89:1e:6e:76:ce:2d:65:4f:14:98:ee:74:a7:
a9:41:15:37:74:a9:0e:56:4b:27:c9:21:88:7b:78:
df:46:42:0d:30:31:ff:9b:17:17:13:20:ed:e7:8f:
5f:e1:ff:dd:ca:70:22:17:22:0a:d8:cb:d3:5d:8c:
4d:06:f9:1e:54:ee:a5:e3:d0:5f:b9:d1:59:df:1e:
47:93:8f:0c:ab:b4:ae:a4:a1:17:b2:c3:b7:9e:3e:
f7:1f:05:ba:5d:f0:79:86:bb:c3:84:c0:0c:15:3b:
a2:d2:58:7b:ce:c3:52:a7:fb:24:5c:f5:9d:8d:c2:
66:88:36:c4:fc:ad:f7:89:4c:47:7d:e3:8c:a4:0a:
f1:cf:8f:cb:e2:02:ef:0d:b8:7f:39:7f:2c:98:62:
16:71:9b:61:da:0f:6d:89:25:27:0b:cc:dc:4a:66:
bf:21:22:94:12:88:31:1a:a0:43:7a:75:9e:7a:02:
29:c3:61:56:80:a3:f8:e9:d3:5f:56:05:08:00:93:
33:05:57:9e:d8:35:f4:45:aa:99:76:f0:d9:2d:02:
a2:ff:ff:2a:99:69:18:6e:f0:a7:86:c6:b4:04:70:
0f:a5:4d:35:30:47:b3:0c:7f:74:88:33:10:6d:0e:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:53:46:35:6C:C9:E1:F9:62:F3:7F:21:77:6B:8C:C2:27:B6:8F
X509v3 Authority Key Identifier:
keyid:A7:A7:06:27:BB:45:CD:6C:71:F2:20:19:22:6A:6A:18:95:22:2F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6cGJ7tFzWxx8iAZImpqGJUiLwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/EnZTRjVsyeH5YvN_IXdrjMInto8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5d074a-4e12-4e9c-b354-bdd79f8632e9/1/p6cGJ7tFzWxx8iAZImpqGJUiLwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.157.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6e:ea:7e:b2:bc:75:83:8d:a8:1a:99:7f:d6:ef:e0:3d:f9:
9b:13:a2:52:8e:27:4c:23:0e:a8:bf:9e:81:19:4f:d5:2b:1b:
4a:e0:4b:70:c1:83:d4:c9:c0:82:71:cc:a7:4d:54:40:30:b5:
ee:97:35:47:36:48:47:33:81:75:e5:8b:59:ea:bb:9b:73:dc:
64:96:79:90:80:82:ce:dd:75:b8:ac:69:08:3d:a4:8c:76:9a:
fb:98:b3:d3:87:03:66:c8:f7:64:a5:3b:f7:cd:08:7a:a6:d3:
82:09:9a:d9:cf:c2:64:ff:85:9f:99:76:f1:c8:38:92:1e:69:
73:18:42:59:22:b1:65:da:3c:e0:a9:aa:37:f4:9b:32:8a:e6:
8a:8e:10:6f:ce:74:09:67:53:9f:c2:20:1e:66:48:c2:35:79:
bf:24:79:60:ec:f0:ff:13:3d:86:ee:b1:2d:a5:c2:de:28:4a:
6b:a6:05:f7:86:8a:ae:a4:9a:3e:6d:ae:c4:e1:83:49:cd:22:
b2:74:c5:0e:60:c0:17:fb:6e:b5:89:e9:84:de:65:0d:0a:cd:
a2:99:ae:fc:10:f3:dd:8b:44:12:5c:5a:c5:c8:ed:96:a9:a6:
a8:d2:b7:05:06:16:38:25:e9:f8:38:07:ea:97:1a:2a:99:bc:
31:2c:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:05 2025 by rpki-client