Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa
File: eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa (raw, json)
Hash identifier: oipT2bxgVMIIjaLCh5p0XGkacdhDbfRQ9fsmYqX5jVM=
Subject key identifier: 78:2D:8C:A6:19:02:1B:5B:50:FE:5F:C4:79:FF:AB:BC:1E:CC:18:98
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 019426D9F53B4B5422D3F3393BC0451319B4
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207928
IP address blocks: 194.153.76.0/23 maxlen: 23
194.153.76.0/24 maxlen: 24
194.153.77.0/24 maxlen: 24
194.153.102.0/23 maxlen: 23
194.153.102.0/24 maxlen: 24
194.153.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:3b:4b:54:22:d3:f3:39:3b:c0:45:13:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=782d8ca619021b5b50fe5fc479ffabbc1ecc1898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:2e:c1:6c:84:13:0b:08:31:62:df:d2:31:
d9:eb:3b:16:2a:ea:27:4f:6a:34:25:c6:20:17:54:
f2:ac:5e:4e:79:54:ca:b9:d2:67:bb:5c:80:72:95:
e6:22:8b:7f:de:4f:a9:cf:a4:5a:63:4a:99:76:af:
52:18:10:a7:e8:fa:59:08:65:33:c8:13:17:c4:2d:
05:4a:25:20:d0:9e:79:a4:f2:68:71:bc:08:fe:03:
bc:6f:0f:ed:18:4d:10:3f:cf:0f:73:b5:62:5e:2a:
24:58:ca:bf:cf:68:a9:66:79:13:a8:7e:d2:f4:3f:
05:fb:fc:48:ca:d0:4f:15:c5:97:a9:c4:a9:a5:6d:
4f:3c:c1:89:45:88:0e:b0:c4:5b:05:89:73:ee:f8:
ca:54:89:22:e3:b2:2c:06:c5:94:fc:56:04:ad:10:
c2:3e:28:4a:03:b5:62:a4:81:53:99:31:26:2f:53:
f1:e8:03:d2:e7:03:90:e1:70:da:0e:e7:af:2f:bc:
2e:0f:77:43:52:16:e2:96:92:7f:89:76:94:4a:59:
df:16:ba:3b:88:0b:bf:57:69:37:a8:58:f3:d9:c5:
13:a4:df:57:cc:cf:99:f0:b9:e4:e3:31:b3:7c:45:
e6:bb:86:b5:8f:7c:5b:8c:1f:38:3d:d5:46:db:1a:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:8C:A6:19:02:1B:5B:50:FE:5F:C4:79:FF:AB:BC:1E:CC:18:98
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/eC2MphkCG1tQ_l_Eef-rvB7MGJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.76.0/23
194.153.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:fe:9c:2d:5c:98:6a:f8:67:3a:a3:ec:bc:bb:99:c2:f1:77:
af:f4:8e:6c:ef:e5:e7:32:45:c9:74:55:c3:7f:0e:21:ab:8e:
09:f6:91:db:d8:75:dc:c5:7f:0e:e8:7b:90:79:10:54:b7:13:
7f:8a:ba:aa:26:23:1c:f1:e8:27:ac:a9:22:16:da:59:a5:14:
04:38:e1:27:e2:28:1f:43:ac:03:d8:a8:83:c2:24:39:c4:31:
62:de:c4:aa:61:e9:88:c0:54:e1:4a:5c:74:ff:04:a6:c1:b8:
fa:c7:d2:4f:19:b9:34:e6:02:c0:7d:d6:bd:4e:0e:e3:e9:25:
60:5b:42:46:6c:16:dd:15:f4:42:31:14:8a:92:23:90:f4:ff:
14:33:f2:2f:f0:cb:e6:d8:f8:74:1b:42:ae:08:51:8b:61:50:
6d:d2:95:1f:e2:f5:11:c7:bb:95:a4:f3:0a:b4:eb:b1:10:b0:
82:6f:7b:a3:2f:dc:ac:75:4a:25:29:af:22:62:47:d9:2a:39:
49:1e:c4:7e:86:20:17:29:14:1b:bb:73:da:f4:c8:aa:d0:5c:
43:39:e7:c0:2d:be:c0:d8:56:60:2b:56:b8:e6:18:46:93:db:
15:17:62:84:4a:e9:80:31:af:13:7b:ac:ac:6c:47:60:d7:9e:
8b:fd:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:38:51 2025 by rpki-client