Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/efQyVpTfdzTLxoeY6EZRaCPb9ME.roa
File: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (raw, json)
Hash identifier: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=
Subject key identifier: 79:F4:32:56:94:DF:77:34:CB:C6:87:98:E8:46:51:68:23:DB:F4:C1
Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial: 01942746654E225EDC4880451331E3AD82C8
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/efQyVpTfdzTLxoeY6EZRaCPb9ME.roa
Signing time: Thu 02 Jan 2025 13:48:32 +0000
ROA not before: Thu 02 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15656
IP address blocks: 212.146.128.0/24 maxlen: 24
212.146.129.0/24 maxlen: 24
212.146.130.0/24 maxlen: 24
212.146.131.0/24 maxlen: 24
212.146.132.0/24 maxlen: 24
212.146.133.0/24 maxlen: 24
212.146.134.0/24 maxlen: 24
212.146.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:65:4e:22:5e:dc:48:80:45:13:31:e3:ad:82:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79f4325694df7734cbc68798e846516823dbf4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:6a:f4:4b:b7:6c:f8:8c:d7:41:04:0f:52:
b8:e6:b8:c4:70:5c:dd:97:df:9d:d6:74:22:4e:a4:
34:d0:95:37:5c:43:41:92:ad:78:59:98:35:fe:c4:
a4:3b:67:8d:24:3b:c6:a4:b1:b5:8a:86:be:e0:23:
ff:0e:ac:6c:53:42:ae:9e:9a:e0:b7:60:ab:bc:0f:
48:98:8d:d6:b2:5e:a2:12:2c:47:2c:87:cc:0b:f6:
39:eb:69:7d:23:62:09:84:09:66:ef:6d:bf:a4:92:
74:48:eb:11:5a:ad:c5:6b:92:2e:30:68:fb:86:ee:
aa:27:eb:c7:af:50:a4:59:cf:1f:78:86:4c:17:05:
4b:d4:23:ab:5a:c1:14:84:47:9c:98:d4:aa:1b:77:
0c:2e:4a:4b:ab:e0:18:fb:85:c9:a0:a9:6c:d9:24:
f6:4a:08:e0:56:06:6f:7c:55:49:a8:44:0a:bb:2e:
dd:1c:25:29:e2:c8:6a:9c:f9:4f:9e:3b:07:a7:9a:
b7:50:23:dc:f3:5d:a2:78:24:25:24:dd:62:2d:0c:
56:2d:3d:ca:48:1f:60:1a:29:c9:a8:a6:94:9d:c0:
89:15:41:b3:1e:41:5e:63:13:55:3e:4f:cd:a9:a5:
df:05:1b:d1:c9:5a:45:da:4e:a7:0b:c4:4e:bf:21:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F4:32:56:94:DF:77:34:CB:C6:87:98:E8:46:51:68:23:DB:F4:C1
X509v3 Authority Key Identifier:
keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/efQyVpTfdzTLxoeY6EZRaCPb9ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.146.128.0/21
Signature Algorithm: sha256WithRSAEncryption
51:99:c7:e5:5e:a1:82:0a:dc:83:a1:b6:c8:7e:a1:9b:7e:29:
ef:a9:e2:8c:2e:3c:b8:4e:f7:bf:5a:f4:aa:3a:cc:c0:a7:aa:
47:99:20:28:61:77:05:e0:87:e0:85:b0:cc:9e:82:6e:05:f9:
09:ad:57:f6:2c:c2:4e:36:6e:e8:cd:08:f8:8d:8e:97:8b:0a:
53:30:e7:3a:22:42:a0:0b:ea:7b:ed:72:d8:19:34:d4:2f:ec:
11:f4:1a:1e:26:f5:26:89:c1:c3:20:18:c3:31:3a:3c:3b:71:
85:d0:c3:70:a3:83:64:36:86:bd:45:a2:29:25:77:2a:4c:7d:
21:ce:c5:df:55:6a:97:b6:bd:78:ba:56:20:a2:6f:9b:2c:04:
24:23:7b:f2:94:33:eb:33:d5:6b:28:ef:d5:42:db:5e:df:eb:
a3:86:b1:da:c0:9b:8b:ae:a0:9a:49:ae:07:a6:53:a3:68:d8:
ca:eb:2a:94:c5:b3:6e:45:5f:a4:c9:0e:3a:e0:f7:d1:18:ed:
f0:7c:49:b6:d1:75:7a:ca:c6:dd:cc:80:f2:ee:4f:aa:9a:d9:
88:f4:5e:65:05:9c:c2:14:88:37:23:d1:8c:5c:bb:bc:b1:7e:
3d:b9:d0:08:41:bd:ec:be:de:74:4e:36:32:b8:5c:9f:b0:5f:
28:ac:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:08 2025 by rpki-client