Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/eKYivdThEYNqXTARb0-te2VE2kI.roa
File: eKYivdThEYNqXTARb0-te2VE2kI.roa (raw, json)
Hash identifier: UvHTjONqnplM8Hb7ZC6ohM64r8xQixEce73idZxGGsw=
Subject key identifier: 78:A6:22:BD:D4:E1:11:83:6A:5D:30:11:6F:4F:AD:7B:65:44:DA:42
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019422202D2BCA71ADC743E26238EB530EBE
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/eKYivdThEYNqXTARb0-te2VE2kI.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48108
IP address blocks: 45.93.8.0/24 maxlen: 24
193.43.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2d:2b:ca:71:ad:c7:43:e2:62:38:eb:53:0e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a622bdd4e111836a5d30116f4fad7b6544da42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:70:e0:ee:cf:f3:6e:a4:7e:fe:98:18:3e:
5b:ff:5d:5a:0b:15:9c:57:f6:24:8c:e0:ed:8b:75:
5a:3d:ef:9e:47:00:d6:6a:20:76:72:74:8e:63:7d:
6d:c9:0c:ff:d5:e2:b0:01:ad:90:6a:13:8a:2d:02:
2a:a4:47:a6:61:59:de:b7:7e:6f:76:a4:1c:4f:a0:
d8:04:11:26:0b:81:f5:2c:b6:e2:3f:9c:28:c7:ae:
02:40:b1:b5:93:b7:85:1e:f6:44:4c:8c:70:b9:28:
38:5b:5a:f2:95:ed:e2:94:84:f4:4a:0f:84:6e:af:
53:ed:33:10:ee:7c:da:bf:7e:b4:aa:f9:8a:32:31:
97:1f:aa:16:e2:ea:60:53:f1:91:8b:de:0e:46:72:
ef:cf:b6:f2:af:92:6d:99:32:2a:34:53:a8:ef:07:
b4:80:6d:5e:dc:f9:8d:92:5b:7c:e0:63:4b:e5:cf:
a7:43:5f:cd:5f:f5:7d:73:7e:58:5d:e7:5e:b6:61:
e4:1e:6a:73:e4:aa:fc:3f:d5:86:c4:91:09:e3:b3:
2e:0c:3c:d5:5b:e5:9b:77:6d:5d:4c:92:ef:12:ee:
f0:3a:42:2b:84:d5:c1:c2:6e:3b:d2:f3:e4:5d:29:
84:7a:6e:34:ed:db:b7:90:ee:2c:df:a1:7f:a1:c6:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A6:22:BD:D4:E1:11:83:6A:5D:30:11:6F:4F:AD:7B:65:44:DA:42
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/eKYivdThEYNqXTARb0-te2VE2kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.8.0/24
193.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:60:34:0c:ad:6d:af:50:7b:fd:b3:c2:80:1b:b4:c4:2d:ff:
57:7e:49:9a:f8:99:8c:42:08:fd:af:8e:f4:f0:fc:3b:3b:09:
fe:5a:43:20:87:c9:43:79:89:da:6f:f7:58:63:55:5a:36:11:
23:32:1b:88:71:18:93:9c:8f:40:33:85:d2:ff:58:33:9c:7c:
e5:74:c3:7f:4c:8a:dd:3f:50:3d:03:7c:4a:07:4c:b9:4c:5a:
2b:de:c3:38:e2:0f:d2:e3:09:6e:7a:88:74:09:48:c7:02:16:
38:57:a3:a8:44:3d:2b:af:72:4d:33:94:ff:31:85:0b:45:ee:
7e:8d:f2:b5:3f:b4:06:ce:f3:a1:5a:65:00:88:f9:f9:54:60:
2d:a8:17:3c:d5:e2:50:7c:3c:e3:d3:aa:83:ed:a1:62:86:ad:
0d:9a:ef:78:d1:4c:6b:88:f0:81:db:d8:51:76:22:50:07:47:
b4:09:2b:45:2e:99:95:95:46:f2:4a:4d:47:9b:bf:0a:a3:06:
8e:c3:2b:89:eb:a1:3d:e9:d5:57:c2:20:ae:10:8d:43:59:a8:
0e:98:52:2d:d7:91:ff:23:0a:fe:77:16:de:9b:04:76:ad:91:
67:f8:39:15:5f:b0:52:b0:c1:8c:75:df:9c:c6:8e:4e:6d:37:
8a:e6:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:15:56 2025 by rpki-client