Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/eXcQTJbrXozTeKAzDqeuNqeJXS8.roa
File: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (raw, json)
Hash identifier: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=
Subject key identifier: 79:77:10:4C:96:EB:5E:8C:D3:78:A0:33:0E:A7:AE:36:A7:89:5D:2F
Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial: 019487C4C36FED951D53D8FC6D25CCCD6DAE
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/eXcQTJbrXozTeKAzDqeuNqeJXS8.roa
Signing time: Tue 21 Jan 2025 07:30:06 +0000
ROA not before: Tue 21 Jan 2025 07:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211970
IP address blocks: 212.126.113.0/24 maxlen: 24
212.126.115.0/24 maxlen: 24
2a04:2dc0:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:c4:c3:6f:ed:95:1d:53:d8:fc:6d:25:cc:cd:6d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Validity
Not Before: Jan 21 07:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7977104c96eb5e8cd378a0330ea7ae36a7895d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:2a:b3:8f:3a:64:9c:24:09:f2:12:80:c2:
48:29:71:13:7a:20:06:ed:8f:7f:5b:5a:b7:ef:5e:
5b:df:1e:ae:95:da:b3:5b:57:d9:51:23:0e:81:f2:
b6:56:1e:58:22:62:5f:ef:70:af:2a:f5:38:ae:34:
f9:8a:76:a6:f4:86:b3:e7:ac:45:37:61:8e:6b:e6:
85:22:74:a5:67:2f:80:c8:e4:9b:83:85:1a:74:d5:
d3:a7:9f:da:d3:c2:e5:1c:d8:34:52:4d:8c:9e:62:
ec:fd:57:c7:25:87:cf:8d:4f:40:83:75:9b:59:c1:
11:44:23:64:b7:b4:7b:8d:84:8b:05:df:47:f9:fa:
e7:b3:17:dc:e8:b9:4a:93:9e:91:c6:b5:a3:d9:16:
8f:74:f8:96:91:fc:1c:20:c8:32:77:31:8d:1e:2b:
6c:b0:d3:51:ae:72:b8:ed:b4:83:45:e1:b7:78:cf:
79:bd:35:83:7f:da:c6:fc:63:1c:e2:d7:78:42:e2:
c0:9f:ef:77:68:2f:be:69:1d:2c:22:7e:11:1f:92:
b4:8d:5c:b7:64:34:4b:49:ea:73:d7:fa:99:80:3a:
84:d3:67:4f:a0:f1:cc:76:13:11:15:54:61:a5:87:
86:ea:df:b7:96:4c:01:24:c4:1f:54:8b:b7:8f:a6:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:10:4C:96:EB:5E:8C:D3:78:A0:33:0E:A7:AE:36:A7:89:5D:2F
X509v3 Authority Key Identifier:
keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/eXcQTJbrXozTeKAzDqeuNqeJXS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.126.113.0/24
212.126.115.0/24
IPv6:
2a04:2dc0:18::/48
Signature Algorithm: sha256WithRSAEncryption
c4:d4:d6:78:c9:02:fc:eb:5c:74:9a:10:64:5c:a7:19:41:26:
bd:f3:4f:84:71:a9:30:8e:d2:39:10:bb:fd:4d:78:4f:ae:ca:
1b:20:f5:2c:2b:77:e5:ed:e8:73:7d:c0:a4:f0:fe:02:37:2d:
60:a1:22:a3:f7:c0:2d:3e:07:1f:99:3b:1a:97:3d:52:8e:2c:
32:0c:f0:fe:a7:e2:1a:f1:4a:06:58:d1:c3:7e:82:88:55:88:
24:c8:38:52:38:6d:6a:de:ca:a8:7a:82:2e:e3:96:12:56:f2:
4d:09:50:e9:42:4b:d8:78:95:95:98:0f:44:60:41:98:37:fb:
5c:9c:3f:ba:76:1b:79:1d:e0:b9:0e:29:49:f7:82:09:e3:74:
b7:d3:16:a0:cf:40:4b:0e:ca:fd:1d:86:1f:71:f8:61:60:1f:
16:55:37:16:5d:c0:2b:c1:66:ed:fb:ae:c1:40:bb:a2:b5:4f:
a0:fc:5c:a0:38:3a:ca:c3:1a:31:41:6c:65:60:94:5a:4a:40:
bd:89:32:51:00:79:a7:0a:97:f5:75:db:43:32:04:09:6a:de:
52:2d:e1:b6:79:24:de:7b:8c:c1:db:74:16:08:35:83:8d:b7:
9e:b5:80:f3:f4:a7:db:78:53:a6:44:32:9a:25:41:40:c0:4f:
d9:c6:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:41:46 2025 by rpki-client