Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/EcUvIL1_Dl5amyDKnInMArIAHbc.roa
File: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (raw, json)
Hash identifier: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=
Subject key identifier: 11:C5:2F:20:BD:7F:0E:5E:5A:9B:20:CA:9C:89:CC:02:B2:00:1D:B7
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 01942748180061B881F05B45E4EC7C7F6E1A
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/EcUvIL1_Dl5amyDKnInMArIAHbc.roa
Signing time: Thu 02 Jan 2025 13:50:23 +0000
ROA not before: Thu 02 Jan 2025 13:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 194.113.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:18:00:61:b8:81:f0:5b:45:e4:ec:7c:7f:6e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Jan 2 13:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c52f20bd7f0e5e5a9b20ca9c89cc02b2001db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:95:63:4b:43:fb:e0:b0:78:45:b8:17:ce:
d5:fc:7c:cc:58:d7:5f:6b:6e:fd:d3:b5:00:45:cf:
b6:6a:e5:46:3a:ff:ac:51:d9:2c:f1:5c:8d:cd:b3:
43:e7:4c:7e:da:63:5f:d1:54:4e:05:94:f6:35:13:
e5:bd:5d:65:d6:c0:d1:c3:1e:77:9b:98:6c:65:28:
b9:a6:5f:89:53:d3:7c:9f:61:9d:ff:e6:cf:ac:4e:
69:a5:cd:fd:5c:4c:ae:2c:d4:91:71:fa:41:9c:30:
f4:ef:80:d5:b2:38:d4:5e:64:6e:e9:50:b7:11:ea:
ae:03:0c:fe:9b:d8:4c:02:a2:c1:a2:d2:23:8d:36:
2e:88:1f:bb:a3:09:7f:02:d5:e9:70:24:8f:d1:33:
fe:53:ce:22:01:e7:4d:45:0c:a3:c4:5c:3a:47:68:
5a:e3:5d:96:9b:38:e1:e6:93:d1:92:3e:a0:15:22:
c8:3f:00:85:6b:16:cb:78:f7:b3:ce:95:e1:59:d2:
0b:9b:56:a9:96:89:41:00:70:b7:42:4b:45:5f:75:
50:e2:b5:27:54:ae:38:88:b4:ee:03:36:29:12:44:
8d:21:64:60:13:8f:90:a8:fe:33:a4:56:93:e6:1e:
0c:b4:14:bf:cd:84:4c:b0:48:e2:9c:da:08:dd:e0:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:2F:20:BD:7F:0E:5E:5A:9B:20:CA:9C:89:CC:02:B2:00:1D:B7
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/EcUvIL1_Dl5amyDKnInMArIAHbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a3:dc:9b:44:71:dd:33:c7:85:97:af:02:5a:30:ed:94:a8:
b0:1d:ef:0f:21:c0:4b:2b:21:de:3f:15:93:98:01:94:7d:c9:
1f:a1:1b:36:51:81:30:d8:85:1a:8c:1f:b3:f8:fa:96:98:1f:
ce:cd:46:4b:60:d8:40:0c:0f:bc:21:fe:8a:4d:8a:45:8a:e3:
0b:ed:00:9a:f4:3a:35:32:b5:fc:fa:f2:1e:9e:b4:b4:8b:ab:
4c:f3:3b:62:18:5e:b7:a1:2a:b3:fc:37:a2:6e:12:d0:1f:d5:
56:04:74:62:37:ef:e1:47:0c:98:d4:5b:f2:1b:4b:69:60:40:
1b:41:55:f9:9c:a6:c8:fd:84:06:a4:fd:52:0c:cd:53:72:80:
e8:b8:c8:f9:3f:99:66:18:79:e3:61:f0:21:b8:cb:c5:07:1a:
fe:77:56:c4:73:aa:db:f5:9e:09:dc:1f:a3:75:c0:ee:68:a8:
20:39:6c:e4:05:26:21:51:43:27:e2:c8:04:c9:09:ba:34:87:
9c:2e:14:2d:78:d1:18:97:82:8d:fe:99:f5:a7:9c:87:39:ee:
9f:60:00:c6:f9:f6:92:25:f6:fa:fe:14:5d:cf:ec:f9:d1:94:
6e:f6:fb:fb:5a:f4:98:08:9b:4f:f2:a7:69:88:96:68:f6:82:
62:fb:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:43 2025 by rpki-client