Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EpRJDz8P6osqvrK8zMyhg_LcXr4.roa
File: EpRJDz8P6osqvrK8zMyhg_LcXr4.roa (raw, json)
Hash identifier: XDCx1T8JuZOGC2YHJ8r1GBQZm+MkPoDi0KXUdMnPz0A=
Subject key identifier: 12:94:49:0F:3F:0F:EA:8B:2A:BE:B2:BC:CC:CC:A1:83:F2:DC:5E:BE
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01941FFA7BDE7321BEA1C822DC1C2AEDC928
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EpRJDz8P6osqvrK8zMyhg_LcXr4.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51699
IP address blocks: 194.28.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:de:73:21:be:a1:c8:22:dc:1c:2a:ed:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1294490f3f0fea8b2abeb2bccccca183f2dc5ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:dd:31:03:35:19:71:07:7f:a7:49:6a:76:
91:29:af:87:06:8c:6b:49:41:8c:bd:9c:69:03:99:
f9:3f:fd:ca:ef:74:4b:fa:71:fc:07:75:50:1b:37:
a7:43:cc:47:9e:5c:a9:75:d2:d4:11:7e:36:e2:a3:
31:22:74:bd:1d:40:ce:7e:fa:31:1d:e6:1b:f0:da:
48:c8:16:63:81:b4:41:67:4a:e8:7a:47:07:37:08:
2f:fd:30:ec:79:ed:25:39:4b:81:c9:89:22:fa:f6:
e1:5c:12:a0:55:12:56:b2:a3:26:62:c5:a9:da:57:
e6:6f:0c:d6:9c:0d:40:64:00:16:f9:d2:2c:1a:83:
5e:b6:67:6a:34:c5:2c:0b:e9:93:17:72:86:93:68:
3e:f6:27:3f:cf:3e:e7:d0:fd:28:5e:98:3f:a1:de:
47:70:e1:ae:86:1c:c2:ca:49:18:fd:75:8d:95:8c:
67:b3:e1:7c:8e:b4:73:9e:f0:f4:de:7f:1e:bc:77:
0e:31:04:a9:68:2f:8a:9a:1f:3f:be:d3:43:69:58:
1d:13:48:48:21:86:e8:6d:0b:7e:af:64:d1:20:eb:
e5:83:c3:71:a2:27:61:f4:7f:0b:4b:35:ee:a5:d1:
0e:19:58:ce:1b:83:04:17:45:15:65:3b:b7:81:a8:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:49:0F:3F:0F:EA:8B:2A:BE:B2:BC:CC:CC:A1:83:F2:DC:5E:BE
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/EpRJDz8P6osqvrK8zMyhg_LcXr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.96.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ab:e1:2b:85:90:00:63:d2:8b:ed:a2:93:43:ad:3c:9d:3f:
c9:a5:99:47:e8:51:99:98:e3:2b:80:35:b4:13:29:3c:bb:6a:
10:2f:bb:57:fa:ec:c1:4e:6b:fa:c8:8a:30:04:9c:f6:78:5f:
b8:75:7f:9d:58:84:23:7c:03:f9:4d:76:a9:77:f1:d5:37:56:
6a:36:dd:99:08:fc:79:f5:de:6e:cf:77:13:b7:88:4c:bd:a3:
ff:b8:55:57:ff:a5:33:71:dd:52:9c:4c:8e:71:c8:83:11:8f:
28:40:46:59:73:3e:ef:47:f9:d2:a1:63:18:93:0b:3b:33:e9:
4e:ae:e2:85:57:07:eb:82:f8:17:66:d3:e0:0e:04:71:ae:51:
7f:44:82:a4:be:53:de:01:e6:63:6e:79:d3:b1:47:73:a3:b7:
1c:25:bb:94:dc:07:79:8e:89:80:1e:be:e6:a7:65:66:75:b4:
45:46:75:3f:8f:a8:e1:f6:9b:4f:10:dc:d2:ff:c8:9b:47:09:
55:1a:63:62:a9:ec:89:3e:ca:cd:bb:1c:e8:b0:77:fb:f3:7c:
6f:20:dd:4f:e5:6f:7d:83:9c:1e:7b:74:45:88:4b:0e:e1:0f:
d9:28:01:c5:ad:f7:f0:ef:d3:df:0c:22:5c:2b:3d:72:97:64:
d0:d8:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:21:59 2025 by rpki-client