Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/eK7sZ1D_OT19uO-hHprpcrVXcWU.roa
File: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (raw, json)
Hash identifier: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=
Subject key identifier: 78:AE:EC:67:50:FF:39:3D:7D:B8:EF:A1:1E:9A:E9:72:B5:57:71:65
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 01958E408D2F276377BAA1481BB55C9F7CFF
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/eK7sZ1D_OT19uO-hHprpcrVXcWU.roa
Signing time: Thu 13 Mar 2025 06:45:49 +0000
ROA not before: Thu 13 Mar 2025 06:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202844
IP address blocks: 109.205.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:40:8d:2f:27:63:77:ba:a1:48:1b:b5:5c:9f:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Mar 13 06:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78aeec6750ff393d7db8efa11e9ae972b5577165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:4b:15:d4:c2:df:66:a1:79:74:52:f9:fb:
3c:c7:18:c4:68:e0:e3:a0:55:5e:b0:a3:02:33:22:
57:c3:c2:05:09:3b:ad:87:7f:cd:85:e9:3b:0b:78:
ac:c7:0d:f7:f6:27:74:58:b0:f2:95:fc:d6:b3:dc:
c5:c5:e0:bd:6a:b0:81:1c:b9:85:f3:7b:05:ae:c0:
e2:47:7f:e5:7c:c1:9e:4c:f4:42:d4:8d:95:97:85:
46:87:20:ac:8b:8c:f9:46:37:7c:d6:d0:ba:c5:d3:
6a:88:90:61:5a:2f:cd:b5:d0:5e:5a:24:1a:4a:92:
04:4f:a0:75:67:be:20:29:77:45:70:69:05:e5:89:
ce:1c:42:3d:f3:34:6a:4b:cc:15:9d:ba:14:3f:34:
54:ae:2a:34:79:c9:a9:ac:65:3c:09:b5:ff:41:eb:
bc:e1:a4:63:db:b0:37:b2:91:3d:b7:8a:49:02:55:
a5:4c:8c:81:14:74:a9:70:7f:e8:64:c9:8b:ed:8d:
d7:b7:9d:13:8b:fc:67:f7:b3:a9:ae:06:04:0b:0a:
7e:30:bb:44:73:b8:41:57:a7:bc:b7:97:4f:c9:ab:
1c:58:fb:d5:e9:43:ec:bf:a4:80:78:8d:27:80:f6:
ea:cf:f3:ad:d7:fd:63:33:96:de:21:24:e7:3e:f4:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:EC:67:50:FF:39:3D:7D:B8:EF:A1:1E:9A:E9:72:B5:57:71:65
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/eK7sZ1D_OT19uO-hHprpcrVXcWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:ad:ba:95:e4:37:6d:cb:a1:5d:c9:8a:b3:29:62:35:b7:75:
56:4d:4a:39:49:79:9f:33:42:21:93:3c:6c:98:aa:89:77:46:
40:49:bc:f9:c6:27:bb:ec:ee:a9:37:31:59:ee:d2:5a:4f:6f:
12:29:bb:5c:5a:08:70:94:02:87:f1:a7:7e:59:28:81:0b:d2:
03:f8:20:3b:cc:cd:e7:b7:63:5c:2c:15:d0:57:cd:cf:59:ca:
43:1d:20:6f:5a:55:d1:30:b8:11:f4:1c:43:f2:c6:34:22:d4:
dc:52:fb:3a:b7:df:5b:c9:2f:4c:96:73:19:af:af:99:ca:e8:
ef:fb:e2:5b:4c:f1:ca:89:1d:6f:cf:a6:88:7a:28:a8:36:3b:
ea:45:db:c8:b0:3a:c2:42:7a:6f:46:50:3f:81:f0:84:77:46:
46:f3:47:50:ef:56:6d:ea:90:33:7b:3c:a8:79:95:3e:a3:90:
c3:ab:36:3d:7e:2a:13:27:e0:ff:e8:f4:38:8a:af:34:5d:66:
e5:91:ea:d4:cb:7a:0e:1b:3c:2b:5d:18:03:0e:f1:1a:2f:ad:
ad:05:9a:0b:b1:77:bb:d5:5e:ae:8a:ef:d4:99:26:c3:ed:7d:
dc:f7:59:5b:fe:5a:6a:d3:74:c0:e4:a1:d8:cb:b7:2f:d5:7a:
d5:b2:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:26 2025 by rpki-client