Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pxErwoucWB8yQbaQqe1v45Sxb10.roa
File: pxErwoucWB8yQbaQqe1v45Sxb10.roa (raw, json)
Hash identifier: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=
Subject key identifier: A7:11:2B:C2:8B:9C:58:1F:32:41:B6:90:A9:ED:6F:E3:94:B1:6F:5D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01942220325A99D450F815E2D10B13CE4184
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pxErwoucWB8yQbaQqe1v45Sxb10.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203163
IP address blocks: 78.40.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:32:5a:99:d4:50:f8:15:e2:d1:0b:13:ce:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7112bc28b9c581f3241b690a9ed6fe394b16f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:68:eb:bf:46:6f:fb:33:d7:28:4e:47:94:
68:18:06:c9:da:9e:39:a8:25:43:cd:2e:92:24:8e:
39:98:dc:f6:33:0e:94:3e:4a:ce:22:ca:cd:ca:2b:
21:11:0b:89:dd:a3:b0:41:28:22:c4:a6:01:aa:cf:
dc:97:dd:0c:8a:41:6f:5a:77:a5:f5:13:f3:78:b2:
44:0f:2a:c2:fe:74:2c:49:c2:a4:79:f0:d5:b8:f2:
22:fd:ac:9f:0d:21:6e:7b:02:e1:1c:09:af:02:92:
88:1c:14:bd:94:67:59:18:57:39:4a:00:c7:72:f6:
1c:53:a1:a4:51:ec:55:6a:33:a5:4d:a9:1a:40:de:
8b:5e:55:2f:8f:5a:05:9d:e5:67:a9:b5:bf:4d:92:
42:26:7f:f8:a2:c1:23:94:cc:3e:cd:f6:6c:ab:8d:
81:4c:80:1b:66:c9:e1:72:ea:ad:15:69:01:12:30:
83:85:b3:b2:b9:a7:03:1c:0c:f9:62:64:eb:4d:78:
d8:a9:58:c9:14:00:e7:eb:56:5c:2d:db:dc:f2:f0:
91:5b:65:e5:30:8a:16:4f:69:03:74:3b:62:f9:13:
8f:7b:a4:ff:a4:d7:53:7b:cc:0c:f1:d3:64:bf:f9:
61:2b:a8:d1:c3:f4:cd:9e:51:f0:70:ce:0c:fd:0b:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:11:2B:C2:8B:9C:58:1F:32:41:B6:90:A9:ED:6F:E3:94:B1:6F:5D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pxErwoucWB8yQbaQqe1v45Sxb10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:af:60:4e:9f:3b:34:d5:60:23:69:4b:ab:2f:db:af:e3:ca:
55:7c:22:91:b2:be:7c:f2:f9:33:c3:34:a5:a4:57:93:3b:0a:
4a:a9:82:60:c9:85:8e:02:e5:d9:cf:ca:10:ba:bc:2b:f1:d7:
ea:14:ad:5c:f7:fb:be:50:10:5c:d7:bc:cc:3e:e0:75:e5:7b:
20:5c:1f:84:91:e0:80:81:6b:af:cb:83:bf:c8:a4:40:ac:1a:
d3:9c:86:83:9e:64:24:27:6a:3e:55:ab:10:53:6a:41:84:e7:
de:f5:05:10:cf:09:d4:62:8b:da:b9:ae:f9:e6:a9:91:5b:7c:
68:c2:cb:84:5b:df:80:09:c2:54:09:06:6e:76:ab:54:ee:a0:
5b:fa:91:d9:88:84:61:98:05:f5:91:a4:13:b5:7d:46:e0:cc:
19:b8:39:f8:89:3d:ac:1c:ea:6d:ec:7e:23:87:8a:ed:0e:90:
13:59:5f:a2:9b:0e:55:7b:be:06:b1:42:a9:d9:9b:8e:a7:4e:
7a:a0:d9:b0:91:81:80:84:db:be:15:8f:cf:b2:84:1d:d7:cf:
59:21:a1:11:b6:b1:f3:22:97:ab:d1:47:23:85:02:d3:b1:12:
a8:12:68:52:11:03:1b:fd:86:c8:76:13:a7:44:08:b0:57:21:
c7:9a:6a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:01 2025 by rpki-client