Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/Et3EjfyShVqsXEJ0-il-9h75pBI.roa
File: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (raw, json)
Hash identifier: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=
Subject key identifier: 12:DD:C4:8D:FC:92:85:5A:AC:5C:42:74:FA:29:7E:F6:1E:F9:A4:12
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 0194274888F94C31EF7127C395639B49DC87
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/Et3EjfyShVqsXEJ0-il-9h75pBI.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 45.148.4.0/24 maxlen: 24
193.104.211.0/24 maxlen: 24
193.104.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:88:f9:4c:31:ef:71:27:c3:95:63:9b:49:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12ddc48dfc92855aac5c4274fa297ef61ef9a412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:5b:71:d1:18:7b:a2:1e:1d:ef:7b:bb:55:
88:d0:e8:39:5f:82:8c:53:63:b6:18:0d:34:da:6a:
03:b0:a1:48:8b:0a:34:db:96:fd:52:1d:39:1f:b8:
24:ac:92:6d:fe:b2:b8:89:cb:40:a9:37:49:11:c0:
33:9f:95:d0:8d:07:37:7e:81:df:65:bf:1c:1b:f9:
08:2e:ab:57:dd:c4:ce:5f:c5:e4:9b:c8:40:0f:75:
ea:81:7c:94:7a:51:41:83:87:91:39:94:61:54:a6:
ad:e6:11:cb:03:57:91:d7:87:d7:51:13:55:21:c5:
aa:37:86:b4:5f:42:07:7d:d2:26:55:bc:17:4c:a3:
79:09:a5:87:89:c6:2d:c1:96:1e:19:b5:e2:b8:57:
c8:cb:58:c7:bb:1a:d7:7d:32:5a:aa:49:6b:9e:ed:
70:b4:f4:b7:f2:74:7d:3d:a9:e2:8f:55:f9:4d:c8:
59:bb:98:d7:cb:51:ca:44:a4:a8:46:16:a5:1f:2f:
de:51:09:c8:fe:cf:da:e3:95:cb:61:18:15:f3:fc:
4e:0d:d4:b4:f3:db:b9:29:6b:c4:3a:d6:1b:02:45:
dd:21:55:91:96:65:51:92:50:fa:02:fd:69:46:3c:
d0:1b:d3:e8:7d:35:79:d3:45:e8:4f:ed:b4:fc:72:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DD:C4:8D:FC:92:85:5A:AC:5C:42:74:FA:29:7E:F6:1E:F9:A4:12
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/Et3EjfyShVqsXEJ0-il-9h75pBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.4.0/24
193.104.211.0/24
193.104.222.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:cc:98:f6:ef:17:21:f8:94:3d:3d:42:20:b1:41:4f:e9:63:
ff:d0:a9:eb:8a:39:d6:65:56:ee:42:f0:c8:1d:d9:b3:16:2f:
82:f3:d5:09:35:91:87:59:db:87:8f:e3:0c:7f:d9:d2:c2:b0:
2b:ca:5b:13:ee:b5:d8:da:58:27:c4:d9:d5:75:0a:61:11:24:
e1:a8:26:3b:2b:30:fc:02:63:d7:52:34:a2:5b:ef:42:8f:87:
b6:b3:b4:ef:2d:24:42:8e:3b:e9:07:09:ea:ff:45:84:cb:6e:
17:77:f5:3d:df:53:cd:66:e6:73:30:e6:9b:e2:14:0f:88:d3:
e4:a7:7b:7c:4b:9c:89:f6:e5:2d:cb:d8:5d:16:57:39:e4:f8:
a6:29:fa:e8:fc:b5:99:bd:84:30:b5:c9:f0:0a:a3:03:5f:ea:
12:db:b9:c2:95:1b:3c:5f:a3:a6:19:ae:f8:c4:dd:3d:82:4e:
83:31:5f:c5:62:cf:b6:98:43:4c:81:3c:1f:f0:07:a9:c3:38:
bd:b2:f8:cb:55:fa:55:ca:b9:26:b9:86:aa:e5:9e:04:92:6e:
bf:75:48:6a:a9:40:77:d7:45:bb:bb:47:1c:42:85:9e:cf:0c:
62:53:51:35:ed:55:1e:4c:67:e4:de:d8:fd:b8:29:79:45:67:
f0:d3:b6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:14:50 2025 by rpki-client