Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p52ECLHacG3z-Gg5eipSNQK8sHg.roa
File: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (raw, json)
Hash identifier: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=
Subject key identifier: A7:9D:84:08:B1:DA:70:6D:F3:F8:68:39:7A:2A:52:35:02:BC:B0:78
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01942068731CC5615B8A1AA2F4E91BC62621
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p52ECLHacG3z-Gg5eipSNQK8sHg.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47479
IP address blocks: 178.254.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:73:1c:c5:61:5b:8a:1a:a2:f4:e9:1b:c6:26:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79d8408b1da706df3f868397a2a523502bcb078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:16:ed:ab:98:24:14:63:0f:f5:96:27:8e:
b9:34:76:8e:3f:e7:b7:8c:3a:7a:b1:c7:d4:0d:8f:
39:86:d6:5b:09:a4:4c:8d:bf:53:66:b9:8b:d3:02:
db:bd:95:e1:ec:37:70:3d:ce:11:a1:46:05:a3:5b:
0a:3d:8d:18:50:15:56:14:4b:ed:a4:91:65:75:31:
ec:df:55:58:96:b4:c8:59:d4:b5:8f:9c:f7:07:c9:
0d:4f:c2:d6:56:49:55:10:47:8b:a6:d9:ab:32:d0:
37:0d:0b:66:54:8a:21:c4:29:21:ba:3f:a8:10:4a:
99:36:13:7b:99:37:ab:8f:0c:59:a7:c5:ce:69:d6:
a3:fb:10:41:62:9a:19:90:00:bc:d3:ca:2c:86:e0:
62:bb:76:6c:c0:01:9f:37:3f:ed:d7:8e:4e:28:23:
6b:d2:9a:8c:eb:56:90:84:28:75:35:ac:68:83:76:
92:34:ec:26:bf:01:2d:b6:1f:b3:88:9b:1d:ca:43:
63:c4:b5:9b:7a:8f:1f:73:a3:fc:bc:05:98:d0:91:
98:31:ab:26:26:4c:4d:dd:cf:29:1a:5e:58:f9:14:
f3:38:fc:c9:07:67:bd:5a:11:6d:a2:ef:08:e9:1c:
0e:24:19:e0:32:74:dc:5c:e7:92:09:cf:79:d9:1a:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:84:08:B1:DA:70:6D:F3:F8:68:39:7A:2A:52:35:02:BC:B0:78
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p52ECLHacG3z-Gg5eipSNQK8sHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:4c:a0:81:79:d9:e3:df:c3:df:5c:3d:71:7d:77:28:a4:b8:
87:51:28:c8:a5:2d:93:ab:69:48:3f:4c:ec:b3:22:69:a9:9b:
3c:a7:2b:b4:01:ce:6b:58:0a:8c:f1:ac:4b:8b:a8:d4:55:8f:
fe:3c:ac:85:59:ff:83:f5:e5:1f:91:c4:16:44:ed:24:96:67:
83:ae:93:75:88:e4:5b:8f:f5:56:e6:4a:f8:60:0d:32:a3:52:
ef:40:d1:ae:97:7a:ae:eb:8e:25:27:ac:61:e2:bb:e0:89:f0:
81:3e:fd:d4:85:45:8b:3f:c6:3f:d9:43:1e:dd:66:5a:a7:61:
60:e5:8f:f7:f3:e8:62:97:05:c8:f0:d0:8a:1c:32:68:f9:7b:
a4:ff:72:37:e0:a1:5e:8d:37:ba:17:bb:2b:cd:ba:a9:03:13:
b8:28:01:63:ff:dd:12:72:34:a4:a3:a7:71:7e:40:37:3a:e3:
1f:34:a8:5e:fe:9d:59:a0:3a:f1:c0:65:99:cb:73:24:75:83:
2d:26:2a:e8:04:28:0b:94:59:7b:40:1d:c9:9d:68:b9:5b:12:
a1:47:01:bc:f7:a6:27:6b:ca:07:b3:ec:30:66:44:37:be:04:
76:4d:22:71:ac:a3:6b:f5:d4:90:b8:d7:2f:74:88:f2:9f:41:
b3:4a:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:12 2025 by rpki-client