Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa
File: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (raw, json)
Hash identifier: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=
Subject key identifier: 11:BB:D7:AB:81:0C:F2:10:20:4A:41:A2:14:B4:6A:69:8F:86:D0:45
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458803AD02917700E85540C4A19203
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47540
IP address blocks: 188.247.128.0/24 maxlen: 24
188.247.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:88:03:ad:02:91:77:00:e8:55:40:c4:a1:92:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11bbd7ab810cf210204a41a214b46a698f86d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:4d:d2:7d:fd:aa:3f:68:4b:ea:af:aa:a6:
ee:54:9f:72:1b:05:3b:a5:78:1c:6f:07:37:a5:60:
b2:e3:19:d4:cd:63:86:fd:00:d7:bd:e7:17:35:a6:
0c:e6:ed:02:3a:53:26:e3:3a:b7:ba:5d:fe:aa:d4:
06:9b:31:cf:7f:29:4e:a4:06:5c:d4:27:d4:3c:0a:
8f:16:7d:2e:b3:57:d2:92:19:5a:62:82:c7:48:a7:
4c:5c:f4:49:9b:50:4c:53:c4:39:bb:28:7e:b7:cd:
d6:3c:9c:60:a7:e8:1f:49:67:e7:dc:8a:26:49:09:
8e:be:d2:f2:e6:6e:8c:cf:1e:58:82:5e:b3:3d:d0:
6a:b5:66:9d:23:5f:ca:37:e8:b3:ae:63:f2:3b:d6:
b5:49:97:a4:78:cf:6c:80:1e:ac:ff:a1:6e:a4:e7:
b5:f1:d2:24:db:2f:d2:55:bd:55:5e:c0:04:ef:92:
54:3a:75:98:76:5d:80:8d:e3:91:46:df:ad:39:2e:
69:45:45:81:f0:4a:69:b6:23:4e:80:22:24:f4:16:
2a:31:12:89:d1:14:2a:98:9f:77:c4:8e:00:83:14:
6e:ee:33:ce:2b:f9:98:03:88:49:39:dd:e1:88:79:
62:44:9c:75:0d:ec:20:8e:6e:b9:4c:a7:15:35:37:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BB:D7:AB:81:0C:F2:10:20:4A:41:A2:14:B4:6A:69:8F:86:D0:45
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.247.128.0/24
188.247.135.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:73:37:21:7f:da:bc:97:fa:77:36:ec:57:7b:b3:21:a1:3e:
d3:f1:dd:b4:4a:f9:59:f1:c6:5b:b7:b4:5a:4d:08:0c:8a:5b:
3b:96:e0:0d:7e:c0:38:1a:ba:d2:73:fd:3d:3a:97:c7:ba:a9:
a9:ef:60:99:58:50:14:63:dc:da:61:83:bf:f6:8c:37:e6:6a:
54:5e:ad:e8:2b:1a:64:fc:0a:16:ac:28:c1:88:93:a4:6c:a9:
5b:eb:26:ae:48:0e:99:45:a3:63:27:02:d9:7c:bc:f6:10:ef:
17:ad:d3:54:40:02:af:f4:75:9f:96:a1:21:66:33:d3:43:36:
04:51:4b:0c:00:6f:66:a4:77:c6:ad:2b:c4:97:a3:4f:53:b6:
5d:00:e9:d6:8e:e8:18:14:ce:37:44:cf:27:15:1c:dc:a7:c4:
78:24:34:29:2d:12:7d:56:1e:8b:1d:4d:7b:b9:a7:43:14:e8:
db:bc:6d:97:25:1a:d5:a8:54:6f:59:9f:73:67:4a:4e:dc:62:
1f:cc:df:1b:cb:d3:55:50:7e:a7:9f:4d:92:d0:26:30:fc:2e:
49:9e:2a:83:47:43:f0:bb:68:62:2a:1a:72:11:06:6a:99:58:
97:e3:f4:cb:65:c1:df:29:57:c6:c1:aa:09:c7:22:cf:03:6f:
38:7a:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:08 2025 by rpki-client