Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ethcODOgY_YKJ1d66LjrxzHbTVc.roa
File: ethcODOgY_YKJ1d66LjrxzHbTVc.roa (raw, json)
Hash identifier: laPLYBB26BdDYnG1uSNifPQM2luIB4Ti0YbHVqjNaeE=
Subject key identifier: 7A:D8:5C:38:33:A0:63:F6:0A:27:57:7A:E8:B8:EB:C7:31:DB:4D:57
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 019427B57940795B473468537C780CE1E26E
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ethcODOgY_YKJ1d66LjrxzHbTVc.roa
Signing time: Thu 02 Jan 2025 15:49:51 +0000
ROA not before: Thu 02 Jan 2025 15:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197106
IP address blocks: 94.31.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:79:40:79:5b:47:34:68:53:7c:78:0c:e1:e2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 2 15:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad85c3833a063f60a27577ae8b8ebc731db4d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:22:d3:d6:8a:92:f7:99:87:85:f2:aa:46:
d4:c9:8f:1c:09:8c:d1:a0:fb:64:da:30:ad:75:8c:
a8:37:8a:1d:d8:a1:8b:a0:d0:ad:97:3f:3c:f2:c6:
45:04:d8:17:84:64:57:af:0e:ca:87:72:8a:dc:43:
4d:aa:51:e6:a9:9d:9d:fb:ed:3d:f4:11:1f:8a:20:
92:48:d3:d7:58:c7:5a:b9:a2:4a:92:9b:82:1a:9b:
03:89:25:47:23:b1:c5:c1:90:ad:fa:c5:81:ec:32:
24:19:10:48:ce:34:47:3a:3d:64:d3:5c:a3:23:9f:
f2:1a:2a:c1:2e:33:8d:dd:33:c7:e9:52:e7:99:b7:
67:7b:fa:3b:51:9e:2b:09:80:1d:20:3b:85:fa:72:
4c:0f:6f:d6:8c:af:0a:f3:26:99:0b:a5:ba:40:83:
b9:9c:17:0a:80:7a:71:f1:9b:bb:0f:cc:82:96:38:
5b:71:d3:46:5b:63:10:2c:91:18:68:57:88:7f:73:
e3:73:a7:59:cf:28:a6:ff:70:ad:c3:9a:c1:c9:fb:
fd:2a:0b:c0:d0:b0:4d:6c:ed:7a:57:33:4e:f3:94:
55:ec:1e:db:3c:48:8f:cd:34:a1:4b:d7:91:56:da:
19:8a:12:86:ef:5c:88:56:77:a3:5c:15:75:c9:bc:
50:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D8:5C:38:33:A0:63:F6:0A:27:57:7A:E8:B8:EB:C7:31:DB:4D:57
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/ethcODOgY_YKJ1d66LjrxzHbTVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:27:a8:91:aa:98:69:aa:a7:59:04:7d:46:f0:1f:08:8c:1d:
80:6e:97:a1:81:c1:72:35:d8:ae:e1:f0:8a:95:2a:9e:af:d2:
af:b4:66:bf:4f:36:95:a1:e3:b9:80:1e:4e:dc:6c:21:42:0e:
42:8b:a2:83:d2:32:ca:16:51:b2:eb:27:c1:06:bf:66:4d:f8:
e7:0d:63:6a:20:56:24:e4:d1:e2:09:67:17:c8:3f:08:b7:18:
db:fa:ef:7c:a6:43:f5:58:88:1a:3a:ce:f6:49:29:70:73:20:
e4:71:c1:35:69:80:e0:54:d5:04:7b:7e:5d:81:c5:b3:a9:eb:
56:21:62:40:0d:e4:fb:8d:6a:11:b2:df:be:5a:bc:c5:d3:ec:
e5:47:27:44:3c:aa:3c:e2:7d:95:12:ac:74:dc:20:9e:69:74:
66:67:86:6a:54:35:1b:3b:29:ba:7a:84:80:d0:a0:3b:ff:10:
a8:57:76:9c:34:7c:3c:db:67:cf:c5:dc:56:4f:4b:87:5b:79:
34:e1:2b:c5:4a:fc:0a:65:27:ce:15:e5:40:66:a2:ae:1b:55:
f2:3c:d0:aa:ba:11:24:0d:5f:21:cc:be:fa:6b:63:37:7f:d6:
3f:ca:d0:1f:ce:db:ae:51:89:56:da:25:0c:27:e0:bd:04:59:
2f:e5:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:26:14 2025 by rpki-client