Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa
File: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (raw, json)
Hash identifier: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=
Subject key identifier: 79:BD:93:B7:78:AD:46:CF:13:93:FF:7F:45:94:8E:07:B3:23:17:24
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0194222006415C23F30BFD3F454F51328348
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211705
IP address blocks: 46.38.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:06:41:5c:23:f3:0b:fd:3f:45:4f:51:32:83:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bd93b778ad46cf1393ff7f45948e07b3231724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:e0:16:08:fb:fc:9b:2d:dc:e1:6b:e3:13:
70:ed:7c:2b:7a:9b:ba:ea:67:43:75:67:dc:6e:fb:
c8:ff:28:a3:68:ac:bd:1f:94:38:17:9f:90:c4:9c:
56:fc:f7:1c:f3:f4:84:25:2d:f5:4e:03:3f:79:0b:
9e:66:41:dd:1e:a2:45:f5:c2:9c:4a:a2:b5:c5:d5:
c6:87:56:65:3d:0d:16:23:5f:77:e9:31:dc:66:72:
36:62:70:b1:d1:17:a7:95:74:da:49:94:61:c9:96:
86:75:bb:88:62:0e:54:b3:de:44:21:99:f0:d5:4b:
09:3e:1d:28:3b:df:bd:98:0c:ca:0b:d8:3c:03:ef:
c1:2a:d2:d0:eb:c7:a4:d4:d2:66:c1:96:7a:2a:d4:
e8:2e:43:30:99:50:8f:c6:59:df:5e:97:d2:27:fe:
52:c3:5f:8a:14:54:b3:a8:3d:54:16:25:d8:2c:d3:
28:d0:b7:41:41:cd:45:4c:d2:28:29:65:69:84:e4:
0b:20:85:ce:8c:90:0e:9d:e0:8a:3e:08:83:ec:46:
46:66:13:f5:75:d3:0f:0f:b0:42:65:fc:1b:dd:00:
c9:f2:9f:b6:f6:77:05:9b:9e:de:5b:30:a1:07:61:
be:e2:d5:86:50:02:ed:1b:c1:f2:05:11:d8:2c:be:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:93:B7:78:AD:46:CF:13:93:FF:7F:45:94:8E:07:B3:23:17:24
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.159.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a1:2d:86:e5:4a:c9:08:2b:40:75:59:b2:e3:c7:25:b2:30:
33:63:75:b8:be:19:5c:64:b2:48:e4:d5:ac:dd:69:d8:aa:82:
19:15:1c:4c:1f:28:20:4d:1c:c6:c5:76:bd:a1:1f:54:d1:16:
5c:df:ba:92:38:93:c8:0b:3f:fa:88:3b:be:78:4c:09:08:f7:
b4:d6:82:20:d1:f0:40:96:d1:0e:97:50:ee:3c:56:54:a6:5f:
a5:e7:02:66:65:b6:4f:92:e1:5e:53:c8:59:8b:df:d2:38:78:
8c:9c:1f:9c:45:60:be:29:3f:87:8f:93:c5:eb:39:bc:7e:68:
e4:42:5f:97:68:90:fc:4d:15:24:fa:b9:55:a3:a3:ce:8b:76:
a6:fb:c7:f9:e3:c0:62:f6:bf:b0:0e:26:48:b3:e5:71:95:f0:
04:2e:6c:8c:c4:ff:c2:1b:3d:71:6f:0e:bc:82:8a:20:18:f2:
1f:1b:4c:5f:0c:39:a3:62:70:16:0f:b9:93:c7:fa:6a:a7:78:
61:e9:35:ba:87:c6:e4:d4:d4:78:10:b4:1e:43:92:f6:0f:6d:
31:e7:61:0e:f9:a3:08:3b:8a:da:98:d8:b9:a9:a0:c4:0b:b9:
54:aa:cc:2b:57:aa:48:b3:43:ec:70:4e:5c:dd:22:09:49:38:
34:31:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:36 2025 by rpki-client