Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/EiGZtAu9plqsBeiA66w6CIaKbMQ.roa
File: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (raw, json)
Hash identifier: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=
Subject key identifier: 12:21:99:B4:0B:BD:A6:5A:AC:05:E8:80:EB:AC:3A:08:86:8A:6C:C4
Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial: 019420D5FF185AEE5382728F7BD94EB5CEDE
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/EiGZtAu9plqsBeiA66w6CIaKbMQ.roa
Signing time: Wed 01 Jan 2025 07:48:02 +0000
ROA not before: Wed 01 Jan 2025 07:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.124.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ff:18:5a:ee:53:82:72:8f:7b:d9:4e:b5:ce:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
Validity
Not Before: Jan 1 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=122199b40bbda65aac05e880ebac3a08868a6cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:03:58:17:2d:5e:3a:fd:e4:9d:dc:14:11:
0f:33:aa:92:c8:d8:4f:cb:2c:6c:73:1c:8a:2a:b7:
fd:8a:35:e8:92:7c:01:ab:a0:03:0d:e0:88:e0:06:
ea:d3:55:14:05:9c:45:e7:41:27:ee:7b:da:c5:df:
ed:f8:54:c8:6a:28:b0:30:e4:96:20:74:d0:10:24:
d0:6d:76:7c:c0:1c:25:0f:d8:c8:cf:96:a6:11:34:
d0:4b:46:8b:f6:40:cf:fe:49:79:b6:e9:04:c5:2a:
71:22:b9:3e:25:c4:08:a6:4e:75:82:23:d4:9e:0e:
c4:31:20:3f:1b:8f:45:41:19:5f:62:79:b0:6f:78:
16:2d:54:af:20:82:af:22:cd:97:36:3e:fe:14:5d:
94:93:ac:26:8b:5f:f2:5b:aa:e7:70:56:aa:b3:ad:
81:7a:11:e9:c8:d4:bc:86:62:03:34:7f:59:3f:6f:
14:77:e8:a1:81:20:b3:b8:91:ac:c4:5d:09:81:19:
57:fe:90:7a:51:9f:7c:1d:5f:92:29:6c:f8:d3:56:
ba:8c:de:66:d1:97:a6:73:84:f6:89:67:c7:c2:b2:
fb:8c:c0:e1:d7:6f:75:48:5b:7c:ce:14:66:16:04:
b5:7f:c9:b3:f3:31:5e:cb:bf:5c:97:dc:66:2c:4c:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:99:B4:0B:BD:A6:5A:AC:05:E8:80:EB:AC:3A:08:86:8A:6C:C4
X509v3 Authority Key Identifier:
keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/EiGZtAu9plqsBeiA66w6CIaKbMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f5:f4:48:f1:05:7f:d7:ee:51:96:ff:4c:19:bf:72:ca:33:
20:b2:fd:90:a8:43:94:2c:13:8b:f5:2b:7c:cb:bd:cc:0b:8d:
3e:ce:7a:c2:ba:65:42:b1:08:61:f9:0e:2f:08:15:51:2e:b7:
f1:d9:86:dc:07:94:48:72:b1:ad:b9:2f:c1:10:d1:04:6f:f4:
07:85:40:03:3c:9a:49:40:8a:68:15:70:48:86:02:58:77:0b:
1e:dd:1c:fe:8d:02:43:ae:ac:b6:e8:cf:27:f7:ef:bd:f6:48:
7f:78:53:fb:f7:b8:9d:68:b3:1b:c4:6a:76:77:48:0f:7d:36:
12:bd:a5:12:fd:e6:3f:66:f9:72:7a:64:fc:09:6a:19:c2:92:
a0:f0:06:a5:43:75:2f:bb:a9:4d:bc:63:8d:57:5c:5b:f5:78:
f7:32:1a:ab:5a:f3:00:fa:72:8e:9c:e7:bb:8f:24:f3:31:cb:
83:af:84:c4:b7:f6:db:f3:66:83:56:66:81:ae:63:21:89:c1:
61:49:0b:0b:2b:a8:ab:b0:41:e2:61:ec:0d:d6:e5:52:08:20:
e2:c2:56:e0:66:ec:f8:8a:c6:37:d6:60:38:42:b0:e3:f5:4b:
e0:3d:07:a8:98:48:46:5d:6e:6a:96:43:39:2a:ee:a1:b0:ed:
a9:b3:08:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:46:48 2025 by rpki-client