Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/eBm4FcENh4mdv8uF5hjrhyaeTNk.roa
File: eBm4FcENh4mdv8uF5hjrhyaeTNk.roa (raw, json)
Hash identifier: Ler7/mk93wlcxw6BHOT02mce04EHfQvKLLwFRXlVbjM=
Subject key identifier: 78:19:B8:15:C1:0D:87:89:9D:BF:CB:85:E6:18:EB:87:26:9E:4C:D9
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 01941F8C9FD0ADA14F3EA63EBAD08C331581
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/eBm4FcENh4mdv8uF5hjrhyaeTNk.roa
Signing time: Wed 01 Jan 2025 01:48:17 +0000
ROA not before: Wed 01 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49872
IP address blocks: 109.122.192.0/24 maxlen: 24
109.122.193.0/24 maxlen: 24
109.122.194.0/24 maxlen: 24
109.122.195.0/24 maxlen: 24
109.122.196.0/24 maxlen: 24
109.122.197.0/24 maxlen: 24
109.122.198.0/24 maxlen: 24
109.122.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9f:d0:ad:a1:4f:3e:a6:3e:ba:d0:8c:33:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Jan 1 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7819b815c10d87899dbfcb85e618eb87269e4cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:61:c4:61:eb:e2:d1:9d:3d:b5:54:c2:86:
dd:ed:2c:0f:a8:61:e2:29:34:a5:86:4a:7a:53:6e:
40:8e:3e:41:bd:1a:b5:94:1e:d2:1f:79:93:0f:23:
72:c7:35:fc:f6:f9:f5:35:0e:9d:71:7d:3f:20:e0:
2a:18:65:d8:af:62:8f:2f:db:d8:30:97:93:67:03:
78:72:af:41:41:be:d3:58:27:88:06:b7:99:75:a3:
22:76:55:13:39:65:6d:cd:10:1e:f4:c4:41:65:57:
bb:81:83:ea:b8:c4:b4:0b:02:99:a1:22:01:21:71:
11:15:b8:b1:c8:db:b8:76:d1:cd:fa:18:f5:97:82:
71:56:58:06:c6:96:c0:33:66:04:45:a7:f7:e0:3e:
e9:4b:91:2c:9f:6c:1d:b8:ef:b1:ff:9d:14:42:87:
75:d3:61:91:a3:84:35:55:16:4d:7f:91:a7:04:5c:
ee:bb:ca:6d:1b:c6:61:73:06:40:8d:15:e2:7c:7d:
cc:a4:a3:71:47:ed:97:76:dd:1c:4a:65:c7:40:22:
59:4d:04:7e:98:9c:ff:55:4e:bf:42:38:03:9f:8d:
ac:76:e6:73:cd:1b:be:b4:28:dd:74:5e:d0:28:f7:
5c:47:b5:8e:ce:7a:88:2a:f0:7b:3e:4a:38:3e:47:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:19:B8:15:C1:0D:87:89:9D:BF:CB:85:E6:18:EB:87:26:9E:4C:D9
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/eBm4FcENh4mdv8uF5hjrhyaeTNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.192.0/21
Signature Algorithm: sha256WithRSAEncryption
53:5d:31:13:66:30:c0:c9:e4:9f:9a:5a:e7:dc:4e:6d:ca:ba:
1a:42:1d:06:66:b1:b8:0f:5a:8f:64:ae:48:ac:c8:94:91:a0:
b5:e2:c4:90:d6:e2:9e:3e:2e:d6:a9:04:c3:2c:63:1e:86:c0:
1c:b1:0a:9d:50:76:02:cb:a3:1a:42:16:40:cc:b3:df:6f:c1:
d3:4a:ea:99:34:7e:fa:48:c6:60:9b:f6:68:de:e4:cc:67:b9:
85:10:69:ee:d1:c2:94:1b:2e:23:34:40:e5:ed:2c:04:98:66:
39:37:46:e7:9f:bd:01:4b:68:53:9d:67:d2:24:68:e2:49:da:
30:0a:32:4a:0b:7e:cf:06:74:b7:3c:f0:d1:14:3f:b1:b1:7b:
c8:7a:f1:62:39:88:36:49:42:b4:4b:6f:3d:c0:72:89:ee:f0:
36:f6:84:75:19:1b:f1:34:89:5f:3d:2c:31:d2:d4:a5:2b:e3:
77:4a:80:77:03:6d:ca:a4:ae:ea:74:05:14:91:17:21:13:78:
bb:6d:a1:8a:55:1f:17:8f:54:c1:66:3e:f6:81:9e:76:5c:c4:
81:56:60:55:0a:27:8c:bf:52:5a:95:50:9a:27:5f:40:e4:10:
93:b4:37:59:7e:2b:05:bc:9f:46:13:fe:06:c7:a3:89:a6:27:
cb:17:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:41 2025 by rpki-client