Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/EmdE4lFlfaABPtiZtlnbFIKNWhE.roa
File: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (raw, json)
Hash identifier: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=
Subject key identifier: 12:67:44:E2:51:65:7D:A0:01:3E:D8:99:B6:59:DB:14:82:8D:5A:11
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019425FDAAC8A8E8E94A5C63A700FCD3F290
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/EmdE4lFlfaABPtiZtlnbFIKNWhE.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57829
IP address blocks: 45.93.140.0/22 maxlen: 24
95.141.80.0/20 maxlen: 24
185.134.124.0/22 maxlen: 24
2a02:f58::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:aa:c8:a8:e8:e9:4a:5c:63:a7:00:fc:d3:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=126744e251657da0013ed899b659db14828d5a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:48:55:c6:7c:5a:1a:04:d1:21:c9:b0:ee:
2b:f8:89:c4:92:a9:9d:75:82:ee:5e:b2:56:63:0a:
34:f3:5f:32:af:bf:1f:cb:0a:13:5f:bd:45:3b:a4:
e8:61:70:75:70:ae:c4:68:3a:29:96:34:9d:63:06:
a9:a6:9a:33:07:6f:0e:ff:52:33:cc:3b:2d:f7:9f:
b8:0b:20:03:58:62:0e:dd:36:32:4d:ff:d1:57:13:
ad:04:44:8a:2e:6e:23:d8:04:23:5a:bc:f7:93:67:
91:86:b0:dd:23:b1:df:f4:7b:91:f3:d3:18:e6:a3:
c3:fe:a8:bd:b1:eb:af:7f:5a:44:c4:cf:c7:76:3b:
0f:d3:7c:c1:5c:44:6f:6b:92:ef:b1:ef:3c:85:af:
b0:c2:a5:e7:78:00:15:14:6a:dc:90:ed:7c:ef:54:
9c:fc:97:8c:0a:64:0b:44:3e:e9:e5:3e:a4:93:09:
c6:e3:02:e6:ac:f0:c3:16:65:58:c7:a5:40:ae:52:
38:a0:2d:f7:4f:ff:c5:b5:c1:b6:cf:93:99:49:ba:
4d:26:89:b0:72:dc:2f:f4:37:61:81:a5:63:fa:63:
55:89:54:4c:bf:d7:91:54:2f:03:91:4f:09:9c:bb:
46:00:27:dc:25:22:42:7d:33:ca:1f:bd:25:db:df:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:44:E2:51:65:7D:A0:01:3E:D8:99:B6:59:DB:14:82:8D:5A:11
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/EmdE4lFlfaABPtiZtlnbFIKNWhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.140.0/22
95.141.80.0/20
185.134.124.0/22
IPv6:
2a02:f58::/29
Signature Algorithm: sha256WithRSAEncryption
60:b6:7e:3b:ea:68:0e:d7:41:ca:1a:45:aa:37:e0:19:1e:63:
21:32:ac:32:9c:8b:9b:17:e0:f2:db:06:ff:93:cc:f2:0a:ce:
1a:6d:f6:13:50:e4:90:c1:7e:01:93:df:3b:eb:27:df:cf:8f:
ac:5a:cd:87:85:db:97:63:ce:27:42:17:4f:2a:d2:ed:e8:ab:
b6:ad:05:5b:1c:c3:12:35:1d:c1:03:e1:4e:c9:f5:57:6a:70:
41:68:3c:b5:c1:af:d4:47:50:cb:47:2c:fd:2b:8e:53:8b:6c:
bf:cf:bd:b5:c5:42:da:d5:2a:d4:c7:a4:d9:fc:db:78:0e:5d:
37:a0:52:75:3a:65:99:99:29:f8:2f:c8:45:14:47:ee:ab:96:
21:38:88:41:60:9f:bd:08:87:b9:3b:3e:f2:d9:79:12:7f:32:
75:2a:93:16:69:4b:8c:f8:a8:b5:36:51:a0:64:43:43:f1:fb:
c1:18:d6:c5:1e:8f:80:9c:ad:16:56:c4:e2:f8:86:22:d2:f2:
5d:09:2a:36:83:56:32:14:25:1e:c1:32:05:c2:3a:98:1a:58:
74:71:37:fb:07:ff:58:f0:a9:3f:5f:18:63:a2:bf:9e:f0:a8:
59:05:88:63:28:cd:fd:f4:3f:82:db:fc:a8:19:5e:0e:23:39:
2f:b4:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:18 2025 by rpki-client