Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eobitmCPSS93nZyZrt6H4tzwfb0.roa
File: eobitmCPSS93nZyZrt6H4tzwfb0.roa (raw, json)
Hash identifier: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=
Subject key identifier: 7A:86:E2:B6:60:8F:49:2F:77:9D:9C:99:AE:DE:87:E2:DC:F0:7D:BD
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01941FFA6D5B560DB380D248E0C5F9B650D0
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eobitmCPSS93nZyZrt6H4tzwfb0.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 45.131.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:5b:56:0d:b3:80:d2:48:e0:c5:f9:b6:50:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a86e2b6608f492f779d9c99aede87e2dcf07dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:75:7e:95:a1:59:cd:71:c0:94:a9:f0:4f:
37:cd:97:13:04:5a:53:95:06:dd:4c:f8:c4:f0:f1:
49:57:8a:8a:69:44:3b:18:e5:3d:c1:30:e3:91:1d:
e7:06:2f:97:62:16:55:87:3e:ee:51:08:9e:33:10:
35:fb:7a:01:07:ca:6c:f8:ce:f2:34:b5:b6:59:cf:
56:0d:52:b4:a7:9d:8c:e7:ed:48:05:5d:ce:fa:8a:
ef:3f:37:7e:13:25:a7:38:52:3b:5b:54:33:69:cf:
b9:44:81:39:fe:1b:75:8e:dc:60:1e:fa:b2:1a:a6:
f7:bf:8a:74:63:b3:25:ce:69:25:95:29:79:0b:88:
a9:64:d6:5c:6e:f5:9a:31:ad:0c:65:22:9d:d5:18:
e6:9b:db:da:2c:43:d4:e4:4b:fd:58:bd:38:18:07:
a3:e6:04:fe:29:9d:fc:ad:6b:18:b0:be:b6:98:38:
24:45:8c:5d:ac:7d:1e:30:f0:91:4b:dd:c8:61:41:
33:45:4e:17:24:b8:1f:f2:df:da:ca:a9:59:b4:73:
9a:67:7d:01:66:cf:65:3f:e8:0b:db:41:fa:e0:e6:
3e:ed:1f:5f:ec:62:cf:2a:37:c2:7d:b4:ef:8a:65:
73:e0:ba:5a:ab:db:6e:f0:8e:20:00:ce:d4:75:d3:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:E2:B6:60:8F:49:2F:77:9D:9C:99:AE:DE:87:E2:DC:F0:7D:BD
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eobitmCPSS93nZyZrt6H4tzwfb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.193.0/24
Signature Algorithm: sha256WithRSAEncryption
11:82:6d:7a:99:86:c6:e3:ab:19:42:21:74:52:c7:b5:3a:75:
d5:8f:5d:7c:cc:5f:35:0e:1f:72:b4:cf:23:e2:75:21:0e:36:
9c:fe:98:de:42:ea:b7:2f:92:51:df:1e:9f:64:8c:35:74:d4:
ae:c1:38:53:e6:0a:b9:14:af:a4:41:b7:eb:b9:93:96:72:60:
8f:47:b3:1b:81:7b:a2:4c:57:ea:47:23:5c:49:6f:a2:30:31:
94:55:c9:12:e8:47:38:66:dd:46:46:bd:7e:6c:36:b0:aa:d3:
58:24:f5:6f:70:8c:bd:bc:54:5e:1e:32:a3:99:88:de:d7:dd:
61:41:ae:bb:22:c7:a3:f0:30:61:a9:8f:4d:b4:f6:05:32:3c:
1f:f5:5c:9a:ea:c8:5d:f9:6a:02:39:f6:a0:45:a3:fb:24:ea:
02:cb:97:c0:3e:37:aa:9e:1c:a8:a0:75:6f:bd:38:56:58:76:
44:a0:19:36:8a:68:9a:b0:ee:4d:2d:f3:cd:b8:9a:01:c1:fb:
f8:d0:ad:97:93:7f:64:fd:5a:64:7a:5f:b0:fd:f7:4a:97:a5:
93:6c:e4:a6:ab:91:94:5c:e3:a9:74:93:d2:11:f6:c1:7c:2b:
49:93:fe:a4:bb:ce:4d:50:cd:66:8e:d4:cf:8e:9e:d6:e7:d3:
9d:ee:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:55 2025 by rpki-client