Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/EpEEDO6av2BjZqXM7PJuDNRRddc.roa
File: EpEEDO6av2BjZqXM7PJuDNRRddc.roa (raw, json)
Hash identifier: goR8NYgMvQvI2XaHVSHQ54m82iix34JIgDUIXRKLU78=
Subject key identifier: 12:91:04:0C:EE:9A:BF:60:63:66:A5:CC:EC:F2:6E:0C:D4:51:75:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019422FBB26B193D811A2D818B73BDDB8335
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/EpEEDO6av2BjZqXM7PJuDNRRddc.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197917
IP address blocks: 87.236.112.0/21 maxlen: 21
185.192.224.0/22 maxlen: 22
2a0a:2f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:6b:19:3d:81:1a:2d:81:8b:73:bd:db:83:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1291040cee9abf606366a5ccecf26e0cd45175d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:5f:53:78:51:11:ec:f7:2a:ce:2c:f3:c5:
3b:be:84:34:f0:63:97:da:08:b8:09:75:cf:75:7d:
1d:13:39:99:b7:e8:25:e1:3d:7f:d5:de:b9:8c:65:
79:ba:47:7f:27:9b:52:56:10:07:fb:8e:51:4b:0d:
14:4e:c3:84:03:70:31:dd:db:bc:f0:f6:83:31:a1:
33:bc:7b:af:9b:0f:c1:a2:b5:6f:d7:b6:cd:14:28:
73:80:f1:58:b8:32:d6:c2:07:7f:3b:a4:b6:e8:cb:
8e:b6:e3:90:a9:1e:d8:b5:6d:d2:6b:f7:9a:a7:7c:
ef:cb:eb:69:8c:ee:36:c7:2c:7e:67:d9:a1:9c:b7:
f5:c9:b5:43:8a:2d:ee:e9:01:ef:27:95:97:1f:59:
bc:55:df:87:cb:41:2a:51:6c:f2:30:8f:4b:d4:59:
ba:cd:f3:88:57:50:55:ec:00:fd:ac:6c:a9:cb:5f:
65:e2:55:79:ce:86:ce:0c:81:fa:f3:87:21:13:c3:
97:63:c7:88:55:39:96:3f:23:ae:f9:65:3f:a7:a9:
8f:b5:27:2c:3d:4b:0f:83:8f:fc:0d:10:bc:65:f7:
ce:c9:d8:ee:f5:12:99:a8:22:e5:26:a1:d3:a1:57:
ab:e7:9f:9a:f8:c5:6b:a8:8c:6f:f3:34:b7:1f:42:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:91:04:0C:EE:9A:BF:60:63:66:A5:CC:EC:F2:6E:0C:D4:51:75:D7
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/EpEEDO6av2BjZqXM7PJuDNRRddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.112.0/21
185.192.224.0/22
IPv6:
2a0a:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
2a:71:85:f4:5a:7f:9b:e4:f5:a1:1e:ab:7a:59:60:8f:bb:8c:
1d:de:45:26:4c:e4:5b:90:ca:19:84:96:36:72:49:5a:2f:b5:
25:10:71:a0:d4:df:55:87:89:47:ca:92:b1:0a:90:6b:bc:6b:
80:32:24:da:ce:0e:69:df:85:d6:6a:a8:83:97:e7:a8:11:59:
6e:bd:af:da:c2:ce:b9:3e:fd:ef:80:d4:b5:41:52:a8:ce:40:
88:2d:c4:17:51:97:59:10:6d:27:9c:b6:21:f0:18:2d:77:e6:
37:05:d3:75:6f:b7:68:21:08:68:f0:87:83:aa:92:51:6a:ee:
66:aa:2a:fa:ff:16:67:1b:38:75:12:e5:06:fc:10:75:21:97:
e6:06:9f:ec:f3:0b:07:33:83:04:f5:5e:f2:eb:ae:b1:e8:92:
55:c4:b9:cb:af:d2:15:a2:13:fb:d1:c3:72:3c:43:0d:3e:2d:
24:05:47:5f:2b:59:df:21:17:67:73:16:d6:d3:c9:ab:fb:76:
f1:50:f4:1c:37:94:78:e8:32:94:00:b8:ad:f0:85:92:8a:63:
cc:16:ce:5b:80:c3:4b:af:eb:8d:af:55:43:f0:dc:e5:a9:d9:
c6:f8:aa:4d:a4:54:8d:6c:e7:11:38:50:b1:aa:f5:18:16:e4:
5b:d3:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:28:03 2025 by rpki-client