Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EBLalMVv7icxdLENL0Fp7duTpbE.roa
File: EBLalMVv7icxdLENL0Fp7duTpbE.roa (raw, json)
Hash identifier: N4iZMILKe1pMlsxtbXLIxltuGI+w4It7V2DiykOt4Fc=
Subject key identifier: 10:12:DA:94:C5:6F:EE:27:31:74:B1:0D:2F:41:69:ED:DB:93:A5:B1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0196D8696F1858550EF95492C87892D477EC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EBLalMVv7icxdLENL0Fp7duTpbE.roa
Signing time: Fri 16 May 2025 09:25:10 +0000
ROA not before: Fri 16 May 2025 09:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56971
IP address blocks: 188.215.31.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:69:6f:18:58:55:0e:f9:54:92:c8:78:92:d4:77:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 16 09:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1012da94c56fee273174b10d2f4169eddb93a5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:2c:bc:bd:e1:d6:83:4b:26:0e:3a:aa:6f:
56:f6:87:82:b7:94:a4:c7:b0:5d:37:35:60:e2:77:
c2:9a:78:04:82:86:84:27:63:b0:ce:ba:27:7c:f6:
68:c2:77:77:85:34:62:ba:eb:fa:4a:c2:f3:08:80:
5c:eb:4e:3b:9c:10:1b:24:f3:e9:55:d0:5a:06:31:
a5:97:34:81:aa:37:01:01:13:4c:9b:1d:6d:0a:13:
9a:96:4d:5f:b5:66:eb:ec:43:ab:7e:5b:69:88:1c:
ea:04:51:1f:61:73:e6:c2:ba:a9:b2:38:54:45:23:
6a:71:82:0e:62:61:98:9f:c0:62:7d:1e:df:ae:91:
c6:86:11:6b:e8:e1:4e:ba:9d:58:a9:0f:85:da:1b:
f4:80:07:bb:ce:b9:38:44:9c:1d:1b:b6:c8:4d:46:
7e:56:97:1d:e3:9a:79:d2:41:ae:5a:e1:0d:a3:ed:
85:66:cf:a5:05:0d:a6:54:99:ac:63:3a:89:82:09:
04:75:4d:ac:85:1f:1a:53:08:39:84:08:ee:70:d0:
85:c8:b0:37:6c:dd:8e:10:97:8c:5f:ac:22:7f:ec:
ea:54:f6:2f:4b:90:61:1c:fe:9c:75:cd:df:e8:14:
08:09:b4:b2:92:3a:46:e0:1d:6f:cc:bd:28:66:dc:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:DA:94:C5:6F:EE:27:31:74:B1:0D:2F:41:69:ED:DB:93:A5:B1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EBLalMVv7icxdLENL0Fp7duTpbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.31.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
53:83:ae:99:cd:c9:ac:31:b8:ce:ed:a4:ae:aa:f9:05:ee:86:
f9:43:48:a2:da:6a:0a:8d:6b:33:a0:15:47:87:3e:a6:aa:04:
74:76:b0:9d:31:3e:07:18:e7:bd:15:34:db:61:aa:ee:02:eb:
ea:af:9c:a7:04:9e:4b:bd:84:8a:b0:ab:2a:76:70:e2:dd:49:
c8:99:d3:65:f5:63:f5:2b:9e:a5:24:9f:f0:70:58:14:92:7c:
e7:e1:fa:4b:28:2e:05:d3:7b:ec:07:fc:c8:b9:49:55:da:14:
7e:0b:6a:03:23:ef:72:c1:ae:d9:44:53:56:5d:fb:c2:e3:f1:
a4:bb:ca:99:b5:a6:56:b0:6e:3e:18:b3:aa:29:16:9f:15:90:
75:4b:f3:df:1b:f3:94:38:5d:c2:ee:6f:f9:e5:a9:18:3f:10:
ba:99:cd:34:2c:2e:4f:b2:8a:5b:68:cf:13:86:a1:8d:f2:37:
5c:6f:0d:08:d6:99:dc:44:3f:eb:80:91:a7:51:c8:2b:6e:a7:
58:19:95:df:c7:ad:96:08:77:b7:a8:74:d2:06:5a:03:1d:32:
1b:f0:48:0b:28:44:34:30:5d:16:d2:d6:f3:ec:93:5b:2c:44:
68:8c:a4:d1:3f:ad:b0:2b:70:0e:96:c8:d2:9b:6a:0c:8a:b4:
02:cd:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:42 2025 by rpki-client