Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/eUHjJwuDj8xNwMB_4iM9TrMswPo.roa
File: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (raw, json)
Hash identifier: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=
Subject key identifier: 79:41:E3:27:0B:83:8F:CC:4D:C0:C0:7F:E2:23:3D:4E:B3:2C:C0:FA
Certificate issuer: /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial: 019422FB8301FA59C08032F1C4387BE1E9D5
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/eUHjJwuDj8xNwMB_4iM9TrMswPo.roa
Signing time: Wed 01 Jan 2025 17:48:15 +0000
ROA not before: Wed 01 Jan 2025 17:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48029
IP address blocks: 185.208.76.0/23 maxlen: 23
185.208.76.0/24 maxlen: 24
185.208.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:83:01:fa:59:c0:80:32:f1:c4:38:7b:e1:e9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Validity
Not Before: Jan 1 17:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7941e3270b838fcc4dc0c07fe2233d4eb32cc0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:97:ac:02:20:0d:d9:ee:b9:bc:c1:be:9d:
eb:06:1e:23:95:b2:67:ce:59:ac:11:1d:f3:99:5f:
3f:b1:92:69:f7:0a:45:9b:e7:0f:6d:b9:ac:c3:cc:
69:64:82:38:a8:05:42:92:4a:13:f5:e4:4c:32:cb:
77:c9:ae:6f:76:67:44:78:b1:e3:e3:b0:fa:71:4e:
68:da:b2:e0:1d:ec:24:80:fb:66:e2:68:82:90:b7:
78:df:6d:91:c8:86:fd:42:11:ae:5d:4c:e0:c1:60:
55:56:75:85:84:34:28:d6:5b:cd:bc:9c:1c:37:c9:
ca:65:df:fe:35:fa:2f:5f:2a:70:ff:d6:19:13:aa:
bd:7e:72:72:be:02:ff:f5:e4:5b:aa:f0:49:bb:b1:
5b:23:d8:33:8f:9a:76:f0:ab:07:b7:64:34:8e:6e:
51:4e:36:85:ed:cd:52:f6:b3:08:6c:73:8d:9b:97:
e1:9f:bd:a1:ec:dc:36:59:cd:c0:3e:7e:66:6e:60:
aa:04:ef:1e:0d:b6:81:0a:9e:44:16:9b:ec:be:30:
73:33:dd:b6:5a:0c:8c:18:44:39:d8:57:70:d3:6d:
dd:70:1e:8f:3e:d7:3f:6b:cb:3b:fc:aa:67:17:ea:
62:8b:88:c2:c1:e0:d2:dd:e2:44:10:b4:e3:b4:61:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:E3:27:0B:83:8F:CC:4D:C0:C0:7F:E2:23:3D:4E:B3:2C:C0:FA
X509v3 Authority Key Identifier:
keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/eUHjJwuDj8xNwMB_4iM9TrMswPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.76.0/23
Signature Algorithm: sha256WithRSAEncryption
51:f1:ec:f5:88:1c:55:35:56:f2:ed:dd:bc:7a:53:27:91:47:
ec:d2:61:dc:cb:2f:53:29:ac:76:33:87:ea:44:2d:1d:41:93:
86:50:5e:eb:4c:81:15:9f:60:ec:b8:2f:76:03:3c:6b:e1:27:
09:0c:05:53:a1:6d:c5:67:d3:f0:1f:8b:53:e4:18:62:55:10:
ff:57:d1:83:4f:da:02:d3:a2:d9:76:e2:e0:82:49:11:9b:cd:
b9:74:b1:7b:bf:38:de:be:56:77:e2:2a:50:55:f9:9f:0a:01:
af:54:e8:7b:0d:9d:8d:ed:b1:29:e3:44:6a:56:44:46:d0:5b:
67:e6:dd:55:84:49:07:1f:ef:3a:81:ea:2b:81:66:a4:c1:0f:
b8:d7:22:5d:66:5b:08:75:2b:4d:61:e3:2e:56:5f:c9:a9:00:
34:e8:54:5f:37:79:9a:ff:e2:ad:63:24:6c:11:a6:03:94:87:
17:31:8f:da:9a:94:0d:20:13:1b:09:8f:b7:d6:7c:74:46:39:
3a:e1:ff:00:7d:98:06:4b:3a:2f:5e:ba:81:e9:bf:6c:6f:f0:
dd:83:42:3c:3a:27:b7:e7:86:de:9f:41:3a:03:c1:dd:12:27:
c5:fc:56:ab:25:53:10:55:b4:25:31:c9:a6:95:bc:6a:24:eb:
1f:d9:30:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:54 2025 by rpki-client