Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa
File: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (raw, json)
Hash identifier: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=
Subject key identifier: 12:67:96:8B:44:B3:41:BF:A0:25:13:35:AF:91:F0:43:75:09:70:36
Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Certificate serial: 019425218E6347486FB45C4E283AB6CBA82B
Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212926
IP address blocks: 88.135.70.0/24 maxlen: 24
2a07:e8c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8e:63:47:48:6f:b4:5c:4e:28:3a:b6:cb:a8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1267968b44b341bfa0251335af91f04375097036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:eb:1e:68:25:16:2e:40:48:0b:26:95:15:
dd:93:dc:bc:2c:38:b9:01:78:1c:f4:23:25:2d:5b:
9f:fd:8f:13:78:72:ff:d7:c0:c7:01:e4:94:53:33:
dc:6c:f4:c2:c0:f6:d1:3c:ee:4c:37:ae:91:a5:0e:
f2:81:34:a1:37:f9:bf:4f:25:3c:13:b7:1e:00:5c:
d8:67:2a:fd:62:74:9d:d4:84:72:6d:48:1d:af:a4:
11:19:45:20:5e:f3:54:82:28:7b:d5:b6:c1:f3:ce:
eb:d5:17:bf:a9:3d:a5:1f:1d:0e:cf:85:57:bb:4e:
be:a4:1f:06:fc:0d:45:45:ea:0a:cf:41:ca:e3:e2:
9a:8f:30:39:39:b2:62:f1:db:c8:a8:9c:cb:e0:26:
2c:99:9b:38:2c:3c:b8:02:9e:38:02:c5:59:4e:11:
11:27:9a:74:1e:74:39:df:2c:59:34:e4:d6:32:a8:
7b:5b:e8:e3:fd:a4:e9:11:0a:b2:1d:5f:f0:84:a9:
ef:f3:18:f7:67:3b:bc:42:4c:f6:6a:d5:9b:c2:86:
50:6b:9c:51:20:99:2c:30:0a:50:60:d1:39:73:14:
86:98:bb:ba:c5:bb:9e:93:15:9e:c5:b8:b2:22:46:
89:b2:d1:0d:78:c1:c5:00:4e:74:08:d7:c0:08:1f:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:96:8B:44:B3:41:BF:A0:25:13:35:AF:91:F0:43:75:09:70:36
X509v3 Authority Key Identifier:
keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.70.0/24
IPv6:
2a07:e8c0::/32
Signature Algorithm: sha256WithRSAEncryption
ad:be:57:f8:22:ef:31:6c:23:f9:bb:c9:e6:3d:e6:f3:ac:53:
10:02:2a:2c:35:53:f5:7f:59:db:47:ea:9c:bb:5b:82:26:a1:
72:3e:e9:42:3d:79:63:e4:30:83:17:de:52:b6:d8:a4:df:e2:
47:33:1c:d0:0c:37:af:6b:ba:19:00:87:ab:c5:8f:2c:6e:81:
7b:0f:03:68:2f:91:24:b1:97:4a:32:c1:3d:1c:1b:4e:85:06:
3c:21:56:1f:0f:46:4b:4e:ca:83:c2:9a:b7:6f:18:31:1e:e5:
52:68:46:11:4f:c8:5a:8c:51:33:9b:8e:ee:0d:fe:6f:8e:4a:
9f:6e:41:1a:ba:c0:7a:0c:0b:52:a6:e0:26:e4:27:23:47:73:
bb:83:4d:eb:cf:c6:fb:69:1d:91:43:66:ad:dd:04:8a:31:9a:
12:7d:01:e3:24:fc:14:a0:d1:ff:04:8a:75:e1:be:44:cf:b1:
19:55:80:f2:52:9c:92:34:f1:d0:fa:3e:df:7c:05:f3:8e:ac:
5e:ba:98:e5:7d:2c:35:81:9b:72:4c:9c:ee:ad:03:f8:c4:b1:
9d:e2:90:04:46:41:2b:45:2c:03:54:a8:39:32:03:09:6d:fc:
e4:85:d8:68:73:f2:98:9b:79:1e:89:4b:48:11:33:16:0d:ac:
18:be:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:19 2025 by rpki-client