Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/eshGAukJkuX-AE4GNhEXoHvgpDE.roa
File: eshGAukJkuX-AE4GNhEXoHvgpDE.roa (raw, json)
Hash identifier: 7j5r7WqFUsTR5UqjVZvqFAE2NplYIRbJ/EoqmowNsP0=
Subject key identifier: 7A:C8:46:02:E9:09:92:E5:FE:00:4E:06:36:11:17:A0:7B:E0:A4:31
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA728BA99D8D3434D72579BC8243F7
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/eshGAukJkuX-AE4GNhEXoHvgpDE.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12741
IP address blocks: 82.160.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:8b:a9:9d:8d:34:34:d7:25:79:bc:82:43:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ac84602e90992e5fe004e06361117a07be0a431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:75:c6:06:7b:28:22:fe:79:2a:95:45:4d:
73:53:8b:27:45:ec:97:d2:9c:78:2e:5d:8d:d8:24:
9e:85:f5:9c:b5:1e:6c:5b:71:c0:50:70:a7:d9:c3:
99:41:ed:b3:d0:79:6c:61:0f:c3:8a:40:a8:90:2f:
a3:66:56:d9:3f:65:b1:d6:54:9d:d2:10:26:79:5c:
7d:19:09:6c:2d:58:60:36:f7:50:62:e2:99:69:62:
8a:67:07:7a:54:6e:cf:dd:0b:fc:d2:b4:29:11:ba:
8f:43:6e:7d:d1:fe:0d:c1:5a:ed:40:e0:7e:81:1e:
42:ba:3e:15:02:8d:8d:25:9a:13:66:00:e6:36:90:
91:f2:d7:8f:d0:bc:1f:ed:1d:f0:f3:09:ee:9c:d6:
0e:86:32:62:9f:71:0b:8c:2f:88:f1:44:1c:1b:9f:
7d:9e:d4:f7:8a:35:67:af:fa:d7:48:04:6e:4b:78:
3c:5d:0b:50:72:a4:d0:be:dc:c9:9f:25:ac:ec:b8:
42:f7:38:1b:84:19:12:c2:69:c1:7a:63:4a:89:b3:
3e:ca:1d:fe:82:32:ec:5b:a9:f7:f6:d6:e1:46:38:
76:fc:17:06:82:90:16:cf:5d:79:a7:ab:66:27:ff:
b2:48:f7:76:ef:02:ef:92:e5:81:80:c7:b7:8c:3d:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:46:02:E9:09:92:E5:FE:00:4E:06:36:11:17:A0:7B:E0:A4:31
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/eshGAukJkuX-AE4GNhEXoHvgpDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.112.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6c:60:08:c6:c8:f3:5f:6f:fd:e0:8d:5f:bc:0e:1c:60:e2:
48:6d:be:c1:ba:4a:46:ed:51:53:89:f0:4f:a9:7e:2b:e6:d6:
e7:87:8e:6c:b4:f6:c3:2a:31:ad:c1:28:f0:92:24:91:3a:9c:
46:3f:70:6d:ed:95:e3:71:86:c9:9d:ce:5d:eb:0c:d9:c9:bc:
bd:58:6c:2e:b5:39:9e:56:b8:2a:62:0c:37:87:0c:a4:5c:c4:
29:f4:b8:41:01:55:34:17:65:55:c3:dc:ac:42:00:0a:5e:48:
6b:f1:49:15:0f:0d:9f:97:ab:f2:16:70:d6:61:75:67:68:61:
1b:6a:b9:76:61:03:1b:79:e1:06:9c:4f:a1:89:1b:0d:04:86:
f5:05:62:ff:6c:3a:0b:58:65:2a:b6:fd:46:36:8a:07:cc:5f:
56:f3:f2:2c:7f:72:0b:8e:05:fd:ac:03:bc:d3:4a:91:c7:7a:
01:a3:79:16:97:fa:10:8d:13:2d:21:2a:46:94:f5:fe:3a:bf:
8d:b6:07:ed:14:cb:81:66:18:e4:80:18:6a:1e:9d:18:55:ad:
f0:44:88:37:da:1b:d9:f1:78:d9:7c:88:5f:56:70:44:9b:17:
b0:cd:5c:b4:35:76:4e:2d:8c:2a:f4:48:da:b9:e5:de:15:dc:
75:53:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:06:01 2025 by rpki-client