Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa
File: ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa (raw, json)
Hash identifier: 0x7RKzsX7jR4DuJ9t+glZtV4k9Tiu2posJrN6U758NM=
Subject key identifier: 11:11:E0:0A:A2:E3:24:2B:FE:5E:F6:83:56:36:00:8F:C3:F5:CC:AB
Certificate issuer: /CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Certificate serial: 019426D9C80CFF592E861C039DFFE627C8C7
Authority key identifier: DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35703
IP address blocks: 77.75.208.0/21 maxlen: 21
193.160.156.0/23 maxlen: 23
193.227.204.0/23 maxlen: 23
2a00:e48::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c8:0c:ff:59:2e:86:1c:03:9d:ff:e6:27:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da024b9c63db5c1a1cf4c5581dbe5b381cb95087
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1111e00aa2e3242bfe5ef6835636008fc3f5ccab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fd:83:9c:70:07:c0:ce:9e:5c:08:6b:68:23:
41:93:1d:78:4c:9b:83:1a:ad:9e:60:4b:6b:b1:18:
33:3a:be:cb:3d:d5:31:6b:54:7f:3d:54:5f:94:12:
44:3c:29:3b:95:c3:59:74:be:a5:4e:76:38:aa:d2:
dc:f5:cf:25:df:04:07:5f:ab:67:ee:4f:37:83:84:
eb:75:9a:94:05:a0:f3:8b:9d:5c:4e:7a:a7:da:d6:
8e:5e:52:01:55:02:c3:b2:0d:2b:c8:88:38:6c:f5:
a5:dd:cc:dc:8f:12:81:2d:a9:ac:61:4e:84:57:2f:
9d:36:e6:63:6a:74:ce:7e:31:97:93:6a:d6:40:c0:
d8:2c:d6:94:18:6c:ce:6f:32:8e:d4:b4:24:65:fc:
2a:94:7c:b5:f3:7e:01:17:a3:3e:d9:98:fb:49:30:
25:48:a1:82:e3:28:6a:23:fc:74:08:b1:e6:dc:7f:
73:61:dc:5a:8c:14:f0:3d:72:31:22:d9:3f:43:3e:
87:4f:c9:a0:c9:6f:26:dc:7f:a4:94:d1:c8:24:0e:
d7:02:c2:01:15:ef:e3:1c:d6:43:aa:5d:9c:c6:6c:
a7:62:72:6a:79:16:27:f6:f6:bb:ee:61:4f:b7:82:
e4:26:c5:f5:2a:41:a0:28:18:ee:73:28:57:f0:e0:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:E0:0A:A2:E3:24:2B:FE:5E:F6:83:56:36:00:8F:C3:F5:CC:AB
X509v3 Authority Key Identifier:
keyid:DA:02:4B:9C:63:DB:5C:1A:1C:F4:C5:58:1D:BE:5B:38:1C:B9:50:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gJLnGPbXBoc9MVYHb5bOBy5UIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/ERHgCqLjJCv-XvaDVjYAj8P1zKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5d7cda-0a98-43ac-9136-712b1a7968e6/1/2gJLnGPbXBoc9MVYHb5bOBy5UIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.208.0/21
193.160.156.0/23
193.227.204.0/23
IPv6:
2a00:e48::/33
Signature Algorithm: sha256WithRSAEncryption
48:fb:ab:be:27:fe:dc:0d:52:7c:02:7b:b1:49:ae:9a:93:47:
29:4d:96:48:8a:6f:e6:03:41:05:f9:36:27:2b:0b:54:97:75:
21:e9:12:94:ef:10:fd:41:e3:b3:8d:35:79:e4:b1:68:5c:0d:
0e:e8:00:9a:d4:87:4f:3b:f8:62:5a:42:c4:24:0b:4e:05:19:
7c:d7:bc:ac:a5:14:97:49:c7:28:79:b6:cb:13:38:b0:a2:f2:
f4:a4:9b:15:95:de:8e:5a:8e:b5:3e:50:f7:91:6d:d2:4e:ff:
91:7b:7c:0d:91:a0:9b:cc:34:0f:83:21:4f:e5:a6:ce:87:64:
a3:fa:24:82:b2:10:34:db:4b:5f:c8:fc:08:8a:7d:94:01:45:
76:2d:4e:4f:4c:07:7d:d1:9d:dc:c7:ed:ee:a6:01:2a:42:9f:
7b:45:c8:01:37:77:b1:52:ec:d5:95:6a:de:ef:a8:49:60:3c:
6b:74:51:44:04:e8:ee:61:2a:fb:37:55:8b:2c:59:0b:6d:46:
8d:f1:45:2f:78:ca:65:f3:a7:b1:c1:5b:8b:c5:d8:a9:51:cf:
bb:c5:46:f5:f5:db:be:8a:06:f5:3a:93:c6:19:57:42:45:8a:
0e:6c:65:ca:03:90:7b:c6:d5:4c:8f:01:0b:f4:a9:7d:0a:81:
d6:e6:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:40 2025 by rpki-client