Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/EhS_t00Vd2N4yBBekZRViCgjDaQ.roa
File: EhS_t00Vd2N4yBBekZRViCgjDaQ.roa (raw, json)
Hash identifier: +9onLzE9VkgXcYyEZZS9Jbjh7+D5DBJlucLpX3ZpybU=
Subject key identifier: 12:14:BF:B7:4D:15:77:63:78:C8:10:5E:91:94:55:88:28:23:0D:A4
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BFAD76B26A42F9AF1A18DEFEE898D
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/EhS_t00Vd2N4yBBekZRViCgjDaQ.roa
Signing time: Thu 02 Jan 2025 09:49:58 +0000
ROA not before: Thu 02 Jan 2025 09:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209292
IP address blocks: 85.31.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fa:d7:6b:26:a4:2f:9a:f1:a1:8d:ef:ee:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1214bfb74d15776378c8105e9194558828230da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:32:a0:16:4f:f5:f3:34:3f:7e:73:58:c2:
15:e1:dc:82:fa:e2:ce:2b:44:0e:f5:39:01:42:be:
60:4a:ac:01:ac:1b:e7:4f:08:38:f0:2f:c5:49:38:
80:fa:bd:b9:f2:68:ec:cd:72:e8:e5:ec:3a:23:09:
c5:de:03:2f:bb:05:16:27:c3:63:7e:42:8b:57:11:
3d:61:4a:27:da:58:f7:d0:19:cc:9a:00:d7:bb:93:
54:f7:68:a0:44:cb:37:1c:a7:bd:07:59:2c:15:69:
d2:8f:b3:db:33:1d:7c:57:6b:f6:61:19:b6:ec:f0:
5a:82:9a:1f:32:a2:23:db:9f:4c:70:75:fa:b6:af:
1d:5a:2e:40:7c:84:52:34:d0:a9:ec:1f:31:bf:48:
ce:2b:f5:69:7c:c1:03:8e:88:c9:23:3f:88:5d:94:
91:05:25:b2:b4:48:df:15:9c:7c:03:48:25:16:1c:
9b:85:85:e6:d1:26:bd:0b:c6:fe:dd:e0:df:af:0d:
dc:97:19:5a:bb:83:64:9b:37:4c:f6:a9:20:54:a8:
27:27:38:2f:60:54:14:7f:63:ae:3a:da:94:50:68:
46:48:b6:ef:6a:6c:58:44:11:e4:90:0e:4e:3d:28:
b2:e2:d9:0c:f3:14:39:e4:22:b9:56:fa:32:e6:24:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:14:BF:B7:4D:15:77:63:78:C8:10:5E:91:94:55:88:28:23:0D:A4
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/EhS_t00Vd2N4yBBekZRViCgjDaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:91:d8:a3:6f:9a:4b:10:8a:1d:cf:59:b9:75:16:4a:b5:58:
41:39:77:f9:26:f5:c1:a0:d1:00:5c:a9:e6:e8:7d:87:4d:34:
65:e2:ca:9f:0f:28:d4:8e:50:ed:d9:e3:2d:8f:47:05:cd:66:
16:f7:5b:99:07:15:5e:7d:d8:fd:5f:9e:56:45:a0:0a:56:07:
41:8a:b0:e7:5c:10:2a:7f:f4:ee:1c:30:db:c1:4c:7e:25:16:
da:64:1b:8c:72:c8:3c:ff:cb:4b:ab:be:3d:03:d2:8a:8b:49:
b5:ca:93:d9:1b:87:9e:3a:be:90:72:5a:da:bb:c5:30:bf:04:
f0:db:d5:75:36:a7:4c:99:a6:5f:03:fc:02:27:a1:29:41:7f:
b1:b3:bd:45:f3:9a:7d:0f:88:11:af:d1:90:52:2d:cf:fa:43:
38:34:e8:72:e0:0c:30:ed:9f:65:cc:6f:45:be:4e:00:18:0a:
32:c7:9e:9a:ee:03:57:8d:7e:62:06:a0:f5:8b:cc:66:53:68:
ca:8d:4c:27:c9:27:b4:28:7e:ed:f8:43:2a:49:b2:38:6d:f3:
12:1c:04:02:43:62:a5:2e:3f:b8:4a:f9:ee:a8:8f:da:81:5b:
5b:ae:95:1f:a5:6f:5d:bd:3f:24:a6:82:c9:d7:69:5d:76:3b:
14:07:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:48 2025 by rpki-client