Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa
File: eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa (raw, json)
Hash identifier: 8CvMQ0zbnR8EYLyVhO1PKSoAxhchZeehbyPRq5i/WLw=
Subject key identifier: 79:37:9B:4F:65:C6:B3:3D:D3:47:A3:F6:63:C1:73:BF:F4:6C:DF:75
Certificate issuer: /CN=3816e19b24a7e8cff189fabac28852cd8748a380
Certificate serial: 0194266C3421E1DD2BCA25EC1D25E9322773
Authority key identifier: 38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 85.194.248.0/22 maxlen: 24
185.33.45.0/24 maxlen: 24
185.33.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:34:21:e1:dd:2b:ca:25:ec:1d:25:e9:32:27:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3816e19b24a7e8cff189fabac28852cd8748a380
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79379b4f65c6b33dd347a3f663c173bff46cdf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:f6:98:fb:40:e9:dd:86:4c:8f:59:25:27:
50:de:fe:de:5f:c2:f5:51:ed:b2:fa:f4:b3:fd:b4:
cf:50:d3:28:ae:c7:e5:ad:c7:ea:3c:66:9a:d1:e3:
4f:0e:51:f6:72:36:e8:3b:ed:e5:11:4a:8c:13:0c:
28:5a:2c:6a:b7:55:58:1d:ff:94:7d:27:80:37:60:
41:e7:92:67:14:b2:d4:fc:ec:0f:b1:4a:83:f1:6b:
d1:04:8a:dd:ef:4a:96:51:26:44:6e:a5:9b:f6:0d:
a6:e4:45:e8:a9:bc:12:1c:6b:86:5f:af:f1:46:9a:
93:b0:81:c5:61:66:95:24:2b:e7:de:26:62:11:b1:
25:94:f9:9b:43:93:c3:57:13:a5:92:73:61:d3:5d:
24:e4:2a:29:f5:47:41:6d:44:f7:ef:f6:55:f4:19:
49:4c:33:3d:2b:d7:d8:2e:63:82:d9:01:99:d5:c4:
90:c8:90:45:26:72:37:b4:4d:c7:ca:4e:5c:c9:94:
de:7f:ec:ec:23:15:7a:b2:f6:53:ff:5b:1d:b0:23:
01:99:3d:06:80:26:89:fa:c1:9a:55:ff:bd:37:11:
e7:79:27:06:47:c8:b6:54:a2:09:19:e3:e7:cf:80:
2e:b8:cb:ea:9d:34:4a:88:d2:81:bd:a1:cf:d2:98:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:9B:4F:65:C6:B3:3D:D3:47:A3:F6:63:C1:73:BF:F4:6C:DF:75
X509v3 Authority Key Identifier:
keyid:38:16:E1:9B:24:A7:E8:CF:F1:89:FA:BA:C2:88:52:CD:87:48:A3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBbhmySn6M_xifq6wohSzYdIo4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/eTebT2XGsz3TR6P2Y8Fzv_Rs33U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d61275-e00a-4bfb-be8a-16b36d0801e9/1/OBbhmySn6M_xifq6wohSzYdIo4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.248.0/22
185.33.45.0-185.33.46.255
Signature Algorithm: sha256WithRSAEncryption
51:2c:da:67:7d:19:84:79:e2:55:4e:95:54:3b:65:81:a9:25:
e6:ff:b0:99:ac:f5:a9:ad:69:01:37:5d:57:51:3d:a8:9a:4e:
c8:4f:c6:08:9a:18:4d:f5:dd:ee:c4:cb:b3:5d:3f:92:38:71:
63:96:fb:35:91:50:b7:e6:6d:1e:f7:e5:0e:e7:de:cd:89:0a:
e2:16:6d:af:0c:8d:82:e4:55:13:f4:43:1d:28:bc:89:02:33:
25:ad:67:33:b8:79:84:d7:67:fc:cc:4f:f4:1c:ac:9b:26:10:
a4:c5:f5:b6:2d:4a:9e:b0:96:6c:54:4e:85:04:7d:53:f4:63:
f7:c6:34:b2:57:71:aa:6f:1e:6c:43:ea:aa:10:87:d3:26:9c:
a6:d3:2c:45:68:c5:22:04:0c:76:01:eb:87:98:85:19:62:e6:
d1:87:67:58:2e:55:a3:6e:e6:54:47:dc:07:14:75:79:41:32:
78:ca:53:64:1d:f3:64:fb:b4:8b:dc:ee:e8:cb:25:6a:42:67:
63:a2:73:84:b2:89:77:cf:9b:5d:60:2d:4c:a7:69:7f:af:25:
90:ff:4c:4a:8f:70:76:04:b3:c2:d8:ae:49:ae:65:12:e6:60:
96:dc:b2:e0:32:a5:59:2c:2a:7d:ad:c3:d2:02:55:f4:ff:3e:
36:0e:e0:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:15:12 2025 by rpki-client