Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa
File: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (raw, json)
Hash identifier: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=
Subject key identifier: 12:E9:2D:B2:64:7A:1E:F5:E6:DA:6E:58:B0:2E:56:CA:8E:5E:73:0E
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 0194FE7B2B94722C35D252EDD1EC8B414E9D
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa
Signing time: Thu 13 Feb 2025 08:44:32 +0000
ROA not before: Thu 13 Feb 2025 08:44:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44843
IP address blocks: 31.207.66.0/23 maxlen: 23
31.207.66.0/24 maxlen: 24
31.207.67.0/24 maxlen: 24
31.207.70.0/23 maxlen: 23
31.207.70.0/24 maxlen: 24
31.207.71.0/24 maxlen: 24
152.89.134.0/24 maxlen: 24
178.236.128.0/21 maxlen: 21
178.236.128.0/24 maxlen: 24
178.236.129.0/24 maxlen: 24
178.236.130.0/24 maxlen: 24
178.236.131.0/24 maxlen: 24
178.236.132.0/24 maxlen: 24
178.236.133.0/24 maxlen: 24
178.236.134.0/24 maxlen: 24
178.236.135.0/24 maxlen: 24
2a02:1710:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:7b:2b:94:72:2c:35:d2:52:ed:d1:ec:8b:41:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Feb 13 08:44:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e92db2647a1ef5e6da6e58b02e56ca8e5e730e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:2a:53:4a:8e:af:93:ad:3b:1b:56:7c:aa:
89:96:87:7b:e8:ba:86:41:29:76:74:4b:fe:e1:d2:
18:34:8a:7b:8d:ba:88:8b:03:54:dc:7c:c2:12:19:
ca:6f:57:50:11:a5:f7:a3:90:c4:af:f6:3b:c4:71:
59:03:28:bc:a5:ef:38:4d:c8:ba:70:88:8e:ad:5b:
bb:ad:66:1f:fe:ca:e3:a6:03:4d:f4:9f:33:8e:c2:
5b:9c:f1:0a:d9:2a:1f:78:94:9a:eb:00:a6:bb:7c:
b5:2e:54:7e:82:1a:28:64:c5:ae:4b:9c:5d:4c:b7:
32:f8:2b:f2:eb:4e:69:07:17:c9:e1:a4:fc:a1:3d:
b4:90:4a:79:b4:aa:08:70:fa:d3:0f:c8:54:91:52:
8e:94:ff:b1:83:72:01:5e:97:86:ed:49:c5:02:e2:
49:2e:31:5b:d3:67:cd:b0:a1:8b:1f:cd:75:f1:7b:
7f:50:6b:75:ee:34:dd:3e:5d:a9:e0:a3:79:b9:5c:
7c:7d:ad:f1:cd:61:10:ff:d5:bf:7a:56:06:f6:ca:
40:27:4e:db:7c:42:22:45:5b:16:c3:1d:9e:06:1b:
6d:c0:09:31:cb:9c:e4:c7:c0:61:19:7b:ef:b8:8e:
51:3c:39:ff:46:57:d3:1e:7d:77:f7:44:da:9b:51:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:2D:B2:64:7A:1E:F5:E6:DA:6E:58:B0:2E:56:CA:8E:5E:73:0E
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.66.0/23
31.207.70.0/23
152.89.134.0/24
178.236.128.0/21
IPv6:
2a02:1710:4::/48
Signature Algorithm: sha256WithRSAEncryption
62:2e:07:9d:13:8a:5b:88:fd:31:ff:67:9a:f5:90:d6:19:a2:
5f:0e:0e:f3:5e:15:ab:db:d1:b6:95:6f:65:f9:db:88:7a:8b:
72:ea:19:3a:75:6e:86:cb:e8:bc:85:f7:60:6d:18:3e:df:48:
d0:7f:44:7d:ba:72:0b:80:8e:8f:aa:fb:1d:70:6a:6f:e2:fe:
b5:9a:53:76:01:6f:09:4d:06:7c:ca:c4:ab:93:f4:43:04:0f:
82:db:a2:3e:44:34:dd:39:e1:53:3d:0a:f1:7f:15:8a:ad:29:
dd:a4:5c:d5:a1:bc:77:2e:b4:82:4f:18:5c:95:dd:95:44:a5:
4e:b9:b0:36:73:93:72:56:75:1f:2a:28:1c:eb:4e:39:7b:da:
2d:9e:98:8b:9d:15:6d:bc:c3:e2:4e:89:7a:76:1e:e5:98:a5:
90:a2:b1:b2:85:0a:82:2d:8d:fc:7b:59:a2:7d:dc:5a:8b:b4:
d5:19:63:d9:dc:3b:0b:77:13:ca:a8:0f:70:f5:8a:7b:b4:2a:
e2:22:ab:63:a0:b6:14:c2:41:25:c7:ce:a9:1d:c0:9a:6d:fb:
ac:d8:5f:e1:5a:e9:15:cd:13:ad:30:68:dc:19:b3:fb:d3:f8:
11:cf:7b:02:bd:6f:a7:28:ac:f4:e0:51:b7:70:99:cf:72:4e:
3b:05:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:01:17 2025 by rpki-client