Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ElpdsCAHWnrspf_BQqwQgScgsBo.roa
File: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (raw, json)
Hash identifier: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=
Subject key identifier: 12:5A:5D:B0:20:07:5A:7A:EC:A5:FF:C1:42:AC:10:81:27:20:B0:1A
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0196F72F4FE90A89FE77F4F94FE41640066F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ElpdsCAHWnrspf_BQqwQgScgsBo.roa
Signing time: Thu 22 May 2025 08:49:55 +0000
ROA not before: Thu 22 May 2025 08:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44213
IP address blocks: 213.137.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:2f:4f:e9:0a:89:fe:77:f4:f9:4f:e4:16:40:06:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: May 22 08:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=125a5db020075a7aeca5ffc142ac10812720b01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:dd:a9:a7:c3:35:62:62:31:a0:1e:41:d0:
5f:d9:39:87:9b:b0:e5:82:0d:96:9b:e6:93:28:1c:
f4:6c:97:57:92:22:1d:23:26:86:67:68:6d:fa:c5:
c3:46:cb:3a:c2:36:02:bc:2b:a7:14:17:bd:e9:cd:
86:5f:38:17:1e:d2:ea:72:5d:aa:0a:fc:8b:44:4f:
69:2e:0c:a9:78:8d:d5:b9:ce:93:94:55:ce:02:74:
ba:3f:cd:6f:da:8f:88:3c:1f:45:db:fe:dd:77:cb:
be:4d:fd:ce:39:d1:9e:1c:0e:0a:d9:9e:87:01:93:
10:26:6f:e6:39:81:b4:e8:90:f0:9e:b9:cb:a6:0f:
d6:5d:56:32:6e:d0:0f:c6:fd:4a:b9:6c:ef:22:74:
4b:09:26:f2:fb:7f:25:06:2d:01:39:fb:c9:a4:ea:
b8:ff:76:28:dd:75:76:f6:a8:18:5b:77:21:10:0a:
23:ff:b2:ab:73:33:a5:48:07:1f:af:57:fb:ec:63:
29:93:6f:68:65:7b:f2:a4:bf:7d:79:af:1d:d1:de:
35:0c:4e:5b:a3:42:01:7b:78:ef:23:bf:c1:a8:3e:
d6:be:e3:57:e4:fb:fd:6f:84:f5:e7:e2:47:9f:c9:
c8:55:a9:cf:5d:0d:66:9d:cd:d1:ff:5b:65:d2:a1:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5A:5D:B0:20:07:5A:7A:EC:A5:FF:C1:42:AC:10:81:27:20:B0:1A
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ElpdsCAHWnrspf_BQqwQgScgsBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.137.82.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5d:f2:1f:b0:d6:10:f1:8a:b0:f5:b2:cc:4b:e3:68:8c:58:
31:47:87:40:a6:f7:4c:f5:90:12:ec:3f:9f:72:d6:9e:79:84:
80:b2:7f:9c:c8:64:22:dc:2e:f8:e3:68:96:97:03:bc:94:24:
b4:72:b8:4e:44:5c:a2:87:88:35:e5:0d:2f:08:43:b9:97:50:
c4:dc:c1:bb:01:d3:cd:96:14:6d:87:e5:1b:60:4a:7c:a9:bc:
2a:0c:04:e9:da:f0:3a:02:7a:81:2f:17:f1:b4:dd:aa:d3:84:
da:fb:58:56:a1:c5:c7:ea:a4:7a:d2:2a:3c:39:81:e8:16:f4:
7b:55:68:85:44:a0:50:f8:23:b0:95:26:a6:f5:9f:34:81:14:
4c:b1:40:3c:02:09:63:e2:8c:0e:ef:65:a6:fa:4f:69:fb:52:
d5:bf:ce:f0:04:83:e9:46:ce:ce:7a:27:af:df:63:c6:7b:73:
23:75:ff:7f:23:a3:e6:7d:1f:5d:5e:26:1e:1d:17:44:f5:89:
bd:92:92:b2:6c:23:0b:f5:73:65:3b:64:57:ab:ae:6d:f5:be:
29:5d:59:55:ed:43:5c:9c:39:d1:e5:b9:c3:85:a3:81:8d:46:
1c:ba:eb:5a:dc:35:71:84:87:86:36:76:d6:7d:08:6d:76:ac:
7a:f6:d5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:15:53 2025 by rpki-client