Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EqkXgOY99e-iUkXVNdA5xYmgxlo.roa
File: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (raw, json)
Hash identifier: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=
Subject key identifier: 12:A9:17:80:E6:3D:F5:EF:A2:52:45:D5:35:D0:39:C5:89:A0:C6:5A
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019421B192D9F6C7BE184454288CCF44DF9E
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EqkXgOY99e-iUkXVNdA5xYmgxlo.roa
Signing time: Wed 01 Jan 2025 11:47:53 +0000
ROA not before: Wed 01 Jan 2025 11:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41695
IP address blocks: 89.21.224.0/19 maxlen: 19
134.0.64.0/21 maxlen: 21
2a01:420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:92:d9:f6:c7:be:18:44:54:28:8c:cf:44:df:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jan 1 11:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12a91780e63df5efa25245d535d039c589a0c65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:a4:57:ec:90:60:8d:ef:21:d4:79:b6:0a:
e2:3b:54:70:88:70:c3:be:82:65:df:79:fa:e2:c3:
d4:ec:4d:c6:27:dc:9c:11:94:cc:17:e0:72:63:f9:
55:32:53:7e:af:b3:42:5a:ca:97:53:c9:51:17:95:
00:e5:1f:25:5f:d4:b3:c4:53:1e:41:3d:c1:27:bc:
f8:b7:25:c7:80:31:ba:5b:33:82:63:04:e2:f3:4d:
45:98:f7:f8:fa:52:7c:b1:57:6b:b9:6d:7c:96:e7:
86:c4:bd:7e:60:94:9d:42:f6:90:b9:f9:e3:af:87:
b9:46:c2:fa:57:9e:84:0e:21:bc:2b:af:61:05:66:
07:90:bd:7e:cd:f8:05:d1:9c:b8:d3:62:99:3e:3a:
3f:e1:b0:12:65:a2:51:09:0c:ab:78:09:9f:71:fd:
be:05:ff:0e:8b:fc:fc:99:c4:46:4c:b3:6b:10:bf:
93:54:aa:a3:6f:b2:9d:6a:0d:6d:66:50:b9:66:37:
c3:70:ce:13:d0:f8:69:0c:0a:78:b5:87:ed:39:40:
fc:a6:a5:84:13:86:ff:b2:2b:cb:23:82:18:f4:97:
16:e7:07:9b:45:01:4d:a7:e0:af:38:fd:1b:38:59:
30:fc:0a:5a:28:4d:78:84:eb:eb:57:ea:d0:d7:81:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:17:80:E6:3D:F5:EF:A2:52:45:D5:35:D0:39:C5:89:A0:C6:5A
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/EqkXgOY99e-iUkXVNdA5xYmgxlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.224.0/19
134.0.64.0/21
IPv6:
2a01:420::/32
Signature Algorithm: sha256WithRSAEncryption
75:4a:62:c0:e3:57:f0:d2:aa:fb:b7:d7:3f:73:8e:03:31:05:
f1:67:0a:25:40:61:60:8e:3f:38:f2:9f:6f:7f:28:48:d8:c9:
84:03:9c:22:a6:91:e1:3b:7c:99:61:e4:0c:16:d1:76:a4:7f:
ef:fa:ec:36:80:ef:ce:30:47:f0:2b:29:2b:2e:70:d0:97:c6:
f7:b2:e6:1d:79:2f:a6:23:7d:ae:58:b8:e8:d6:ad:1b:63:4c:
92:7d:f4:5f:76:57:0f:71:58:a9:5d:a6:da:2f:89:12:79:f2:
d5:59:b3:8c:2f:9a:f9:2f:6f:09:d4:ac:25:3a:c0:7c:ed:f3:
a0:4c:2f:84:f8:72:17:9e:0f:23:cd:5f:00:e3:b0:b9:10:00:
d3:2d:69:59:95:26:59:d3:59:1a:3a:ac:3c:eb:1e:52:66:3f:
e1:30:61:53:c4:5f:c8:66:22:a7:33:d3:23:d3:f8:1c:0d:60:
b9:a1:b4:70:0f:bb:71:dd:04:b5:23:e7:2a:44:14:d0:7d:29:
b2:20:7b:24:97:78:67:35:4e:13:e4:c6:c1:42:04:36:eb:69:
77:b7:ae:60:b2:f1:db:ee:21:70:83:a9:72:97:41:72:4e:d3:
68:0e:45:7c:fd:59:cb:43:fd:30:69:b5:43:56:19:c6:b8:75:
66:53:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:22 2025 by rpki-client