Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/EojBLE-kejfyfqtsbOflpbWdQR8.roa
File: EojBLE-kejfyfqtsbOflpbWdQR8.roa (raw, json)
Hash identifier: RAQIxXhtS5DacFq9O32LjkXlaDp6cgdHs91Xbraog08=
Subject key identifier: 12:88:C1:2C:4F:A4:7A:37:F2:7E:AB:6C:6C:E7:E5:A5:B5:9D:41:1F
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 0194F0C1CEA595AAD53D677CA003573381E4
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/EojBLE-kejfyfqtsbOflpbWdQR8.roa
Signing time: Mon 10 Feb 2025 16:47:00 +0000
ROA not before: Mon 10 Feb 2025 16:47:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214466
IP address blocks: 2a14:9400::/29 maxlen: 29
2a14:9400:230::/48 maxlen: 48
2a14:9400:1337::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:c1:ce:a5:95:aa:d5:3d:67:7c:a0:03:57:33:81:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Feb 10 16:47:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1288c12c4fa47a37f27eab6c6ce7e5a5b59d411f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:15:9b:4b:85:75:29:1e:20:3a:a2:03:23:
6d:db:94:63:72:a5:a5:ef:13:f8:7f:51:7d:bd:83:
f1:74:74:27:d7:49:0d:5d:8d:6b:cf:46:e7:42:62:
b8:55:80:15:64:99:78:41:42:01:70:5c:fc:ef:3a:
ad:09:dd:78:88:72:22:72:6c:53:54:e3:ed:70:7c:
c6:67:87:6e:f8:77:d8:27:c1:b0:98:f5:f4:a6:e0:
0c:9a:5e:2f:3f:ea:8e:b8:63:00:bf:ea:f8:4f:89:
94:07:bc:39:f4:6b:16:db:f3:99:cc:8b:13:68:88:
0d:b5:26:7b:d0:f3:ce:3a:ba:5b:62:0b:ea:3b:de:
ef:3c:ed:02:a6:81:c7:12:81:cc:da:b0:9d:8a:d9:
02:0b:e2:31:24:74:0c:e7:fa:3d:a9:9d:60:ea:f0:
27:b9:50:84:41:fe:c7:ae:d2:11:47:6e:e8:a4:a6:
8c:8f:0f:0d:d0:70:45:7b:b6:56:09:5f:bb:09:5e:
5f:ea:dc:1d:6b:ad:31:70:01:0c:23:a8:08:6b:6c:
34:34:1d:d1:07:64:9f:88:dc:17:93:2d:d3:50:29:
f9:7b:f5:a2:73:cf:a6:25:34:ad:6e:2d:59:87:e2:
c2:0e:04:15:db:e8:08:11:da:c3:5d:bf:a7:08:86:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:C1:2C:4F:A4:7A:37:F2:7E:AB:6C:6C:E7:E5:A5:B5:9D:41:1F
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/EojBLE-kejfyfqtsbOflpbWdQR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400::/29
Signature Algorithm: sha256WithRSAEncryption
36:43:74:b8:15:fe:01:f7:57:1c:26:0c:21:e8:d8:41:ae:5c:
76:b1:5b:d0:6f:7c:eb:ff:f8:3e:6e:d1:3e:65:22:c1:9f:1a:
6d:81:22:87:f5:ea:bc:a4:6f:9a:ae:72:25:a3:87:59:c0:34:
84:b0:79:bb:fe:5a:9f:27:74:7d:99:1d:8f:34:03:49:b1:af:
79:91:c4:75:8b:66:90:b6:46:2a:71:68:84:f9:42:4d:92:7a:
78:09:3b:37:19:e0:5e:d4:a7:e9:d8:65:ba:25:27:56:26:7d:
00:e5:13:cc:88:a1:39:aa:fb:f3:25:d6:5a:11:46:42:e1:12:
ae:e4:6d:c4:41:15:99:51:5d:92:b7:15:f2:d7:54:7b:40:9f:
aa:02:df:5d:aa:d1:a2:d6:46:bf:c6:36:35:9d:57:0c:db:b9:
9a:55:b8:c3:c7:7d:24:20:ea:00:17:d2:57:a5:2a:ea:4f:bf:
e8:27:e8:e6:01:75:eb:f2:4a:72:a8:cb:ac:99:ed:dd:07:45:
f2:0e:01:cb:5b:89:4c:8a:77:f4:cd:9e:af:69:f8:e3:1a:ea:
86:6d:cd:2b:3b:90:21:d6:a5:11:74:b9:72:7d:9e:ee:cf:54:
1d:3c:7e:76:6d:cd:fc:cf:07:92:32:1f:b5:ea:57:e9:9f:dc:
4c:1c:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:10 2025 by rpki-client