Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eVrGw7hI0glJq7pXSKd7cFjvOOg.roa
File: eVrGw7hI0glJq7pXSKd7cFjvOOg.roa (raw, json)
Hash identifier: SZffzRaRPYbBzwR2bcZ03C7C26H8PMxiQFQ86nqo4RE=
Subject key identifier: 79:5A:C6:C3:B8:48:D2:09:49:AB:BA:57:48:A7:7B:70:58:EF:38:E8
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 0194B570F6D72274048A576E92A223446305
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eVrGw7hI0glJq7pXSKd7cFjvOOg.roa
Signing time: Thu 30 Jan 2025 04:21:06 +0000
ROA not before: Thu 30 Jan 2025 04:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:70:f6:d7:22:74:04:8a:57:6e:92:a2:23:44:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Jan 30 04:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795ac6c3b848d20949abba5748a77b7058ef38e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:88:6e:7f:53:f4:a4:ce:9f:72:f4:e5:ec:
35:4a:17:90:2d:24:59:d2:a4:cb:26:16:77:8f:13:
13:c3:55:26:8c:29:09:a1:44:a6:aa:de:f5:74:1e:
a4:62:2d:25:5b:b2:fe:d9:a0:64:84:6d:99:e4:da:
bc:40:a6:bb:74:8f:0a:59:dc:8a:5e:0a:ab:80:0d:
15:52:93:5a:6f:64:0f:cf:58:42:d3:98:33:39:dd:
9f:ef:4b:b7:5a:e5:00:37:e0:93:04:24:74:9e:5c:
d3:92:b0:7a:76:c1:e3:78:16:ed:28:cf:3b:3c:98:
ce:fe:a6:fe:bf:be:03:f7:a7:6d:62:53:87:7f:8f:
9f:f0:2d:a4:97:9f:20:69:6c:55:56:f5:53:33:8f:
8f:90:58:f6:9d:e5:58:22:28:1a:6c:db:31:6c:00:
3f:20:0f:10:69:d2:41:f0:0f:8a:b2:8a:02:8e:a6:
3e:1b:18:27:1d:58:fe:22:4e:26:8f:19:00:1d:ae:
fb:c6:b3:b9:78:34:4f:c2:47:8f:3a:16:f1:a1:a1:
57:23:67:d6:de:62:73:e8:33:2b:ee:78:de:bb:d6:
24:37:e7:c2:61:fc:61:84:6c:63:67:d3:d6:9c:ce:
db:8d:4e:e3:8e:6d:cc:3f:64:b7:6c:a8:4a:d8:28:
d2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:C6:C3:B8:48:D2:09:49:AB:BA:57:48:A7:7B:70:58:EF:38:E8
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/eVrGw7hI0glJq7pXSKd7cFjvOOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cc:9b:72:4c:13:1e:a7:3d:d4:e6:65:c6:30:18:07:47:71:
62:9e:e6:96:af:a5:e4:3b:8e:87:31:98:64:58:86:d4:f8:5e:
cc:89:43:d1:07:4b:b1:4c:23:e1:62:4c:dd:df:ca:07:5f:57:
73:90:a7:bc:a2:c0:af:d5:ea:8b:70:fb:2c:97:ba:f8:4e:61:
e5:2b:40:2f:ea:b7:54:89:dc:2b:c9:e4:08:87:0b:82:6a:c8:
ae:06:b6:fc:35:16:32:42:ce:a0:57:21:af:1b:bc:40:eb:be:
40:f2:0f:50:d7:70:45:08:86:43:59:47:48:60:5c:84:26:ad:
a1:6f:99:89:d0:fd:b6:7c:44:43:92:7e:52:66:f4:55:22:a6:
4b:c4:4e:be:ed:b0:92:95:80:16:29:ab:55:64:db:36:cf:48:
8f:ba:32:1e:8c:10:de:70:20:49:8f:d7:68:72:bf:7f:ab:f6:
2e:1d:75:9d:83:ea:61:b1:51:df:56:97:43:3a:be:a7:cd:88:
c2:57:a5:69:22:0f:45:7c:7a:93:d5:b6:9b:5f:ec:c4:83:cf:
00:3c:d9:ae:da:b2:dd:5c:08:5d:11:19:d9:56:b1:db:c5:31:
2c:05:cb:2f:9e:df:88:57:31:40:21:8a:aa:1f:79:fe:8d:c2:
f0:f1:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:21:01 2025 by rpki-client