Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EB2TK7Kl1_U9G680gxkKAmpjGp4.roa
File: EB2TK7Kl1_U9G680gxkKAmpjGp4.roa (raw, json)
Hash identifier: kgiFTDRrvUC7IWGnYTR3Mzqi96aLc0f21YS8F6+YYy4=
Subject key identifier: 10:1D:93:2B:B2:A5:D7:F5:3D:1B:AF:34:83:19:0A:02:6A:63:1A:9E
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B571069BB74835AC61F623375DF04B
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EB2TK7Kl1_U9G680gxkKAmpjGp4.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8084
IP address blocks: 94.31.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:71:06:9b:b7:48:35:ac:61:f6:23:37:5d:f0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=101d932bb2a5d7f53d1baf3483190a026a631a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:7c:45:a9:09:27:96:d3:cf:d0:77:94:b1:
72:aa:7b:45:69:57:04:df:e6:15:f2:81:e6:d6:35:
28:08:31:47:60:a4:11:84:1d:ec:b3:2c:8e:2c:f9:
90:0d:2f:cd:d3:5c:3b:1f:46:c0:4b:87:3e:ce:9f:
d1:da:4f:41:03:f0:76:9c:b2:ae:86:56:94:86:7c:
de:fd:f6:29:e2:2f:12:a9:ac:15:b2:fc:7c:7d:77:
58:dd:ee:47:1e:25:9a:7c:f0:2a:e8:6d:a0:81:42:
a5:03:d7:6d:60:cc:de:37:9e:9e:6f:a1:f4:4a:8f:
cd:c2:95:2e:e4:20:df:79:a5:2b:f6:52:2d:7c:0d:
8f:4a:07:d7:2c:1b:10:e0:e0:dc:e0:f1:e2:b3:19:
7c:4f:47:e5:fc:6e:52:8c:ce:d7:8c:78:91:d3:b9:
a9:ad:c0:99:dc:ee:fc:38:56:80:d3:67:9d:81:e7:
3a:7f:e3:4b:ea:98:6f:5f:75:ff:7e:c4:59:35:34:
9e:59:dc:10:a9:35:4c:6b:d1:1d:74:c5:7e:42:40:
3b:9f:1a:30:d2:36:dd:8e:7a:a7:fb:07:95:15:6a:
77:26:a7:a7:e6:82:fc:79:34:53:d6:d3:d1:55:2a:
cb:69:05:f6:44:1b:f2:ed:b6:54:fc:4e:a9:5e:c8:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:93:2B:B2:A5:D7:F5:3D:1B:AF:34:83:19:0A:02:6A:63:1A:9E
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/EB2TK7Kl1_U9G680gxkKAmpjGp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.58.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:a6:bb:8d:de:d5:75:09:d4:db:f9:1f:05:59:02:c3:9b:85:
2a:67:98:9e:66:e2:4b:1a:63:c6:0a:c1:b5:00:1e:77:cd:52:
7f:63:3d:64:6c:7b:5f:77:ce:d1:7d:57:75:48:da:5c:51:dd:
3e:58:58:1c:5b:c2:a3:58:20:c6:85:db:e6:a4:fc:ee:b5:01:
56:41:22:d4:5b:92:8d:eb:c2:7d:28:3e:f4:a1:8c:07:3d:14:
8c:71:97:21:1d:76:ef:81:7a:4c:43:fa:f3:eb:b5:ed:67:00:
ee:b1:c4:34:74:e6:a2:80:95:70:e4:c7:f6:61:0b:c6:37:81:
7d:8f:84:9c:80:47:3a:92:8e:4d:55:b0:1e:4a:6c:30:38:91:
f3:7d:5b:c3:50:09:17:93:49:3f:48:97:1a:c6:6e:58:0d:6e:
cc:97:73:92:c0:4a:d9:b3:3d:3e:b8:4f:f4:f6:b0:58:49:2d:
00:24:c0:24:9e:9d:2e:ac:98:32:8e:ed:7b:0a:a4:21:09:0f:
6c:3f:e3:e0:2a:75:76:3e:a9:b8:15:b6:78:7b:33:d4:ad:ee:
44:1a:df:43:93:0b:26:a4:69:d8:bf:b9:0a:54:ac:70:31:d0:
63:22:0c:21:28:a3:5e:ef:14:0d:8f:25:5f:fd:5c:e1:4d:f5:
85:96:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:27 2025 by rpki-client