Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/EOCWiGvbLbC8SrTdZuW8112GldA.roa
File: EOCWiGvbLbC8SrTdZuW8112GldA.roa (raw, json)
Hash identifier: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=
Subject key identifier: 10:E0:96:88:6B:DB:2D:B0:BC:4A:B4:DD:66:E5:BC:D7:5D:86:95:D0
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019420D6629B7CBA16D4E183E3CC5304380F
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/EOCWiGvbLbC8SrTdZuW8112GldA.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9031
IP address blocks: 94.105.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:62:9b:7c:ba:16:d4:e1:83:e3:cc:53:04:38:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10e096886bdb2db0bc4ab4dd66e5bcd75d8695d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:67:19:61:83:69:19:d6:a8:2a:99:47:24:
a0:52:f2:35:53:7a:77:fa:5e:18:18:e8:90:c1:7b:
fa:d0:9a:6a:82:75:22:e0:bc:bb:55:6f:b7:f3:e2:
13:74:af:a8:fa:13:e6:26:7c:09:da:7d:82:7c:ad:
7c:3a:86:36:b1:eb:08:0f:d2:3a:60:bc:b7:cf:b3:
87:4c:77:d3:64:4a:52:34:93:55:8c:bf:d5:6e:1f:
60:8b:44:3d:45:fd:f9:7f:dd:99:91:d4:e0:73:06:
64:e9:3d:67:94:f3:36:86:7d:23:43:cc:cf:0f:93:
e0:c7:b4:73:73:3c:98:c8:d8:21:74:5d:b7:1b:24:
07:9b:e2:bc:f8:2c:f5:18:54:2e:35:29:7f:7b:2e:
77:86:0e:3d:1e:f7:55:ce:8d:ab:16:49:c9:e6:2d:
82:f7:71:21:7e:26:27:94:8d:fb:a9:2c:67:2a:c6:
c4:da:84:e3:00:7d:7e:40:c0:9b:b1:b7:23:88:53:
4a:ae:eb:9c:86:3f:8a:ea:8a:97:55:c4:f1:2d:0c:
09:90:f7:e4:7a:39:1e:f0:db:1e:8b:d8:4b:92:fa:
3e:c3:cc:0c:9b:a1:c8:c4:47:f5:0c:17:e2:2e:4f:
9e:23:a7:e9:7f:74:d3:29:08:e6:71:20:cf:c0:e7:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:96:88:6B:DB:2D:B0:BC:4A:B4:DD:66:E5:BC:D7:5D:86:95:D0
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/EOCWiGvbLbC8SrTdZuW8112GldA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
52:10:05:dc:d2:31:1d:a9:17:d6:6e:3e:ce:9b:fc:39:26:a5:
16:d9:d9:b3:bf:65:c0:96:f1:57:ec:23:71:3f:9e:34:a7:ec:
5a:18:9a:f1:c5:31:6a:33:f4:1d:d8:e9:76:59:33:39:ce:a8:
6d:f9:bd:54:3a:b6:76:6e:8c:a5:41:01:c0:23:68:72:57:e1:
f3:34:af:4f:96:c7:76:8d:20:92:08:41:d7:19:04:99:43:b1:
03:3e:2b:48:00:d9:86:af:a9:a2:9b:54:1b:09:10:5d:86:8b:
bf:3f:bd:c4:ec:c0:7e:e8:1b:24:6d:bd:c8:51:57:0d:b4:a3:
31:57:3c:3c:a0:b6:a3:0b:3c:45:53:1b:dd:c4:15:5e:a0:5e:
ac:76:aa:5d:11:64:7b:2a:ed:44:b1:22:36:64:18:1c:e9:09:
ec:8c:73:03:f4:5d:20:6a:64:66:ba:65:b9:62:48:5d:40:69:
8a:b7:a9:0e:bc:88:39:13:c7:16:20:d8:e6:2a:ce:fd:8f:11:
76:81:da:64:f9:f0:03:a5:d9:1d:8d:7c:30:cb:90:38:05:e4:
4c:91:74:c2:40:90:d3:8d:54:b9:3c:66:d1:3b:10:b2:10:07:
8d:c4:b4:53:1f:13:70:e1:d0:53:9b:2e:48:91:42:36:46:d9:
f0:b5:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:10 2025 by rpki-client