Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EztfE7ahTGyI03m5wjMxdTF4r4Y.roa
File: EztfE7ahTGyI03m5wjMxdTF4r4Y.roa (raw, json)
Hash identifier: m/s4koDaWiEOAQCLE7pDh94YYCArrZMJ/h+ZdgkDPPU=
Subject key identifier: 13:3B:5F:13:B6:A1:4C:6C:88:D3:79:B9:C2:33:31:75:31:78:AF:86
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 019426D8630DA6FE4D1B21182F604089E687
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EztfE7ahTGyI03m5wjMxdTF4r4Y.roa
Signing time: Thu 02 Jan 2025 11:48:22 +0000
ROA not before: Thu 02 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 37.49.148.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
176.46.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:63:0d:a6:fe:4d:1b:21:18:2f:60:40:89:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133b5f13b6a14c6c88d379b9c23331753178af86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:35:76:49:0b:46:39:2e:41:b1:d0:7b:e4:
24:c5:f0:1f:07:da:fa:ae:19:62:a4:bd:75:a7:a4:
66:6b:58:46:57:65:ca:17:41:db:90:07:55:af:cd:
c4:37:03:6f:60:5b:b0:e8:90:7f:54:f4:23:12:df:
b2:f1:a4:22:8d:5d:3d:c0:d4:f0:7f:9f:6a:89:93:
b0:fe:8f:11:c0:de:ea:79:ed:41:b6:6a:b7:56:3a:
86:a0:fb:1e:3e:2d:34:28:dd:d0:ab:c6:d4:e4:69:
aa:49:16:12:46:8e:71:fc:33:4e:0b:2b:3e:9c:c6:
34:4f:03:41:3f:8e:5d:a0:0e:c1:cc:13:76:2c:37:
87:50:d2:7e:8f:12:d7:bb:bc:99:44:14:8e:b7:d1:
7e:2d:66:9c:7f:76:7a:9c:c7:68:f3:ae:8a:66:f0:
3b:29:c9:4d:fb:76:68:23:c4:28:05:0a:8c:6e:67:
27:c0:55:b4:68:83:c7:36:0d:d4:76:e8:b5:e2:f4:
d8:51:8a:54:0b:49:94:02:db:5c:3c:26:7e:14:66:
41:4c:63:78:1c:ea:8f:9b:56:dc:c2:3b:af:18:5c:
54:18:9d:12:2e:e2:8f:10:c1:c4:af:a1:f3:3a:10:
90:90:97:c2:75:73:d6:89:4d:cc:9e:52:29:7b:67:
0c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:5F:13:B6:A1:4C:6C:88:D3:79:B9:C2:33:31:75:31:78:AF:86
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/EztfE7ahTGyI03m5wjMxdTF4r4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.148.0/24
94.74.158.0/24
176.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a3:3f:12:0e:ca:4b:f0:ea:5e:51:61:4c:44:c2:96:09:33:
94:27:e1:19:c1:f5:14:91:cd:00:41:6e:ef:92:3f:ab:38:b8:
77:62:6c:59:62:6e:e5:7f:61:0a:c7:c4:2d:77:16:dc:53:01:
ff:28:a9:74:40:83:a7:66:a1:ec:26:86:df:b6:56:f6:ad:61:
9a:aa:c6:62:67:49:88:73:99:44:2e:94:b2:ca:43:3d:0f:6c:
47:82:d9:a9:b0:8e:02:99:fa:64:d8:5a:3f:7c:af:e1:d4:5d:
09:ff:97:6b:40:97:e8:e9:5e:18:b3:77:b0:ab:1a:5d:32:c2:
5f:9d:23:9a:a4:71:a8:a6:bb:cf:37:5c:15:1b:3b:12:e1:05:
58:71:77:f7:44:69:ba:9e:4b:db:0a:92:8b:3d:bb:a9:f1:cb:
88:9c:62:57:8d:f3:5f:d5:93:fa:79:5f:b2:a5:17:d3:7a:49:
f8:60:3d:14:fd:4d:f5:ee:62:d2:21:68:da:bb:f6:0a:35:86:
35:8b:8b:ba:84:59:5f:c2:10:3d:2b:4d:d4:45:4a:38:38:fc:
14:6a:f5:dc:e2:07:63:5e:ca:48:e2:d4:46:77:06:47:d7:13:
30:02:1b:54:a4:f9:3c:a9:3e:48:4d:7a:a8:60:15:00:96:5a:
df:e8:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:12:35 2025 by rpki-client