Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Eh4WLAio5vgSCzFSqjuZ3eTxPXo.roa
File: Eh4WLAio5vgSCzFSqjuZ3eTxPXo.roa (raw, json)
Hash identifier: fmWbB27RuaNEShzhWTSPXmcXmlMTV7JJ1PkAVOizkWM=
Subject key identifier: 12:1E:16:2C:08:A8:E6:F8:12:0B:31:52:AA:3B:99:DD:E4:F1:3D:7A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019427469A079BA32EFC97C9E90DCDE0AD94
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Eh4WLAio5vgSCzFSqjuZ3eTxPXo.roa
Signing time: Thu 02 Jan 2025 13:48:45 +0000
ROA not before: Thu 02 Jan 2025 13:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8685
IP address blocks: 78.135.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:9a:07:9b:a3:2e:fc:97:c9:e9:0d:cd:e0:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=121e162c08a8e6f8120b3152aa3b99dde4f13d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:ad:77:9d:31:b8:ee:00:26:eb:ad:98:d6:
32:9b:fc:10:82:d3:86:0d:d6:93:be:2d:5a:af:72:
b3:c2:84:e3:b5:07:bf:f8:7f:21:d3:82:30:e9:b3:
05:f0:7e:dc:2a:73:e9:ea:53:3c:4a:3e:b6:d9:ea:
de:ac:7e:8d:44:ce:b8:d5:13:60:72:e3:73:27:e0:
78:2f:90:03:b4:fa:eb:4a:fc:ab:4a:9b:3a:66:a1:
99:72:8b:24:65:1c:da:83:66:c2:bd:ce:cd:f3:f4:
22:15:25:9f:80:5f:33:1f:77:96:9f:17:8d:c6:bd:
c5:ec:b8:21:00:1c:2a:ef:00:28:1f:4f:44:44:05:
3e:c9:d8:ff:75:a4:08:20:9f:bf:da:39:1e:46:8b:
ff:29:ed:14:2d:a2:ca:8c:f6:bf:5f:2f:1a:4b:c4:
b8:00:30:d1:b9:56:73:c9:7a:bd:24:21:29:05:c1:
be:5a:65:16:80:0b:f1:3c:eb:30:64:23:50:bd:34:
07:32:43:63:24:8b:5a:8d:1e:1a:b1:f8:fa:bf:60:
64:32:8c:5e:54:e3:cd:a8:a0:23:3d:10:bc:dc:a5:
dc:3b:b0:97:32:bd:7a:4d:d5:cc:3c:4c:e9:d6:b9:
e8:fd:43:20:f0:b5:c3:a7:e9:be:ba:36:68:f3:7d:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:16:2C:08:A8:E6:F8:12:0B:31:52:AA:3B:99:DD:E4:F1:3D:7A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Eh4WLAio5vgSCzFSqjuZ3eTxPXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.102.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b2:d3:ba:70:f2:44:9d:70:a2:d0:d2:d8:da:75:62:09:e3:
84:b7:2a:a8:f6:4e:fb:ca:ac:59:4a:44:78:0e:e2:23:32:38:
98:71:50:0e:37:80:45:6c:b7:cc:cb:01:f0:18:46:a4:0b:e4:
ad:74:83:3f:ef:33:8c:de:d3:be:30:19:9f:93:01:1a:03:e8:
3a:4d:f6:eb:11:81:17:33:76:45:f5:40:f1:b2:a8:7d:0d:f1:
d9:e4:6d:8a:b4:88:a6:2a:4e:fc:01:92:02:ca:c0:94:82:1d:
8a:9f:f4:ef:45:bd:fc:39:b1:c6:82:16:36:30:c4:75:68:81:
17:99:2b:c9:d4:73:3f:b4:c3:9c:19:7c:ef:5e:a5:22:e3:f0:
9a:54:f7:98:7d:24:94:d5:a1:69:2b:5f:47:a2:0f:60:04:dd:
4b:ac:c9:ff:f8:26:5c:fc:a9:46:87:af:70:e7:fe:eb:a3:e3:
3f:25:8b:2b:c1:b7:55:79:d1:ba:62:aa:76:2c:91:ab:15:7d:
ac:61:65:54:6d:9e:b6:5b:ba:73:5c:fd:f7:7a:ba:73:76:40:
77:b9:e1:7f:37:29:f4:a9:c3:32:4e:ad:2e:3c:c2:de:2d:f4:
b9:6a:5d:fa:26:37:6b:16:35:6e:71:03:bb:d0:18:b6:45:2a:
a8:2f:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:10:21 2025 by rpki-client