Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Eb3nQCsubyrRRwgtef25b2tcJbQ.roa
File: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (raw, json)
Hash identifier: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=
Subject key identifier: 11:BD:E7:40:2B:2E:6F:2A:D1:47:08:2D:79:FD:B9:6F:6B:5C:25:B4
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0194D7405B3529F4C5516988E5DAD215AF6D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Eb3nQCsubyrRRwgtef25b2tcJbQ.roa
Signing time: Wed 05 Feb 2025 17:55:06 +0000
ROA not before: Wed 05 Feb 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46450
IP address blocks: 193.3.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:40:5b:35:29:f4:c5:51:69:88:e5:da:d2:15:af:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 5 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11bde7402b2e6f2ad147082d79fdb96f6b5c25b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:01:27:e7:87:86:b3:63:02:ac:52:61:d6:82:
fe:c6:0e:b2:8c:78:1a:51:1a:25:7a:c2:15:db:6a:
54:77:d8:0d:b7:cd:82:6a:3e:6f:aa:8b:2b:c8:90:
db:f7:77:13:68:ad:30:1e:7b:74:70:45:ae:b2:9e:
b2:a8:42:a2:52:f3:3a:46:01:99:4b:d1:9a:9a:c4:
a6:7b:63:b7:99:ff:7a:ca:4a:4e:6f:39:28:8d:40:
d9:49:89:7c:db:97:f2:9c:3f:ca:79:84:5d:ca:01:
ae:32:c6:53:38:7b:c0:e8:45:a8:bb:29:7e:ac:14:
78:d2:70:77:b6:ea:27:97:3b:82:19:4b:d2:c2:3e:
b8:a5:05:2e:1e:0f:2f:4c:c5:bd:b0:b8:bb:95:27:
7d:29:93:29:9d:b2:c3:ff:94:e5:05:6b:dd:59:50:
3c:98:09:e9:56:2d:bd:eb:12:e9:76:4f:33:51:44:
fb:97:24:1d:f9:cd:56:5f:76:83:ac:d9:91:fa:88:
8f:9a:4f:8b:2b:47:eb:00:45:7b:f0:05:ac:cb:08:
59:69:a9:bf:ab:5f:d4:b5:03:c1:2c:b5:2a:e5:44:
1d:78:4c:34:e0:bc:a1:94:22:9d:d3:5c:a6:cf:c2:
02:f1:a7:fa:69:53:66:2d:2e:03:51:d9:49:c1:07:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:E7:40:2B:2E:6F:2A:D1:47:08:2D:79:FD:B9:6F:6B:5C:25:B4
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Eb3nQCsubyrRRwgtef25b2tcJbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:70:99:b8:45:66:91:2f:8e:98:e3:59:c0:1a:7f:b6:b2:5b:
47:71:2c:19:d1:3d:03:6d:c8:1f:4a:73:6f:e1:28:64:73:9b:
a5:18:24:8f:59:40:57:63:ed:05:b2:3a:cf:3c:6f:f1:da:6b:
34:5e:da:00:e3:83:71:09:cc:b8:af:ab:36:26:d3:e3:fe:d6:
a4:83:6c:72:46:52:ab:aa:d0:65:af:37:20:cd:3a:03:8e:54:
b2:f9:6e:0d:59:97:b2:fa:ae:41:4c:8f:02:fd:55:26:7c:1a:
db:36:47:79:ef:c3:3a:6d:c0:87:ec:b7:03:9c:6b:ce:55:b3:
56:4e:a2:7c:34:2e:61:7a:10:9c:3d:60:f3:b9:52:15:e2:55:
5e:cf:a4:81:60:86:ce:1d:82:95:53:9b:87:10:d8:3e:23:1f:
58:cf:bb:86:68:fa:85:cc:fd:1c:d7:97:30:58:b6:e0:23:6a:
41:ce:f6:43:df:46:38:1b:74:fa:26:f8:69:dc:82:0c:6d:3e:
4e:ec:ed:3e:88:8e:66:97:01:81:a3:7f:cf:54:f9:82:08:5a:
69:2d:dd:37:fb:86:63:31:ea:c9:eb:74:4a:62:c5:7c:12:e8:
69:27:2d:ff:42:ed:db:04:47:1e:ac:43:27:d8:4f:bf:63:97:
0a:8b:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:16 2025 by rpki-client