Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa
File: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (raw, json)
Hash identifier: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=
Subject key identifier: 11:A6:6F:60:7D:98:1A:23:B7:EC:D6:75:6C:61:47:92:61:1D:31:CC
Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial: 019734F67B0FF2F9B6C6C2B083AEFDEAEB2C
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa
Signing time: Tue 03 Jun 2025 08:44:17 +0000
ROA not before: Tue 03 Jun 2025 08:44:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48854
IP address blocks: 94.137.128.0/20 maxlen: 20
193.223.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:f6:7b:0f:f2:f9:b6:c6:c2:b0:83:ae:fd:ea:eb:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Validity
Not Before: Jun 3 08:44:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11a66f607d981a23b7ecd6756c614792611d31cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:be:9f:8a:a2:9e:12:ab:5f:51:3f:31:27:
e8:1a:e9:0c:af:e4:e1:9e:d3:81:5d:8a:8e:b9:3a:
b3:1a:66:58:dd:c8:09:bd:fc:ad:86:01:2f:0e:cc:
7b:66:b7:1c:6c:e7:25:f2:8d:e1:30:d6:cd:a7:b9:
11:f7:63:e9:01:58:82:e7:ee:c0:5e:cb:08:cb:64:
ad:17:18:2f:da:f8:5a:20:d4:02:29:85:3f:e0:70:
02:d3:9d:be:86:52:9f:8b:b6:65:50:bc:35:fe:77:
21:27:57:2c:e7:07:76:39:d1:29:e4:bf:0f:54:79:
35:83:9b:69:98:dc:5a:d5:24:9f:d4:25:f2:93:61:
6e:f9:e4:51:97:b8:a1:9a:b2:ff:0a:72:36:fb:a4:
65:f1:dd:ae:5d:4a:3a:c0:72:1f:05:7b:fb:64:84:
c5:14:de:c0:05:e0:ac:a5:d6:c2:5b:e6:2f:d6:45:
1d:d5:03:ee:10:08:b7:08:5a:75:59:77:11:1c:e0:
c4:02:de:de:34:00:17:64:8c:e9:97:63:48:a4:fb:
8f:36:ae:d6:78:8e:ae:ed:34:c5:1e:f2:f3:58:79:
e3:4d:49:a8:e1:f5:5b:22:09:b2:53:93:6b:ae:2f:
28:b7:be:38:7d:1d:c7:52:13:2c:12:02:9b:61:06:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:6F:60:7D:98:1A:23:B7:EC:D6:75:6C:61:47:92:61:1D:31:CC
X509v3 Authority Key Identifier:
keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.128.0/20
193.223.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:fc:72:7e:e1:46:56:b9:1c:3f:8f:a9:f9:88:f3:04:91:f9:
f7:fd:5e:7d:a2:31:55:62:af:4e:86:9c:f7:d0:ea:86:23:70:
2a:3e:72:d6:a7:4d:0b:32:a2:45:76:e6:45:ab:e3:b1:b0:b2:
74:da:5e:58:18:55:e7:f9:12:b7:24:73:c7:fb:d3:c0:50:8e:
c6:8b:f6:ca:6e:53:67:a2:c9:6c:bc:12:a6:88:45:94:1f:4e:
65:65:7b:08:66:6a:3a:33:f4:73:6b:d7:fe:04:b3:b3:a0:b4:
59:b1:62:42:6d:06:85:3b:38:6b:f0:68:04:6c:35:f8:91:a0:
bc:2f:ec:ed:7c:18:06:82:d2:91:2e:98:81:67:8f:d7:a9:1c:
8b:b1:9a:90:03:c9:bd:c3:09:df:96:28:ae:5f:5d:49:ea:b7:
e5:f2:66:76:e7:53:e0:6d:f8:78:55:da:ff:ca:92:60:fc:55:
b1:c0:c7:b0:77:14:5b:cf:7e:19:6b:84:75:62:bf:a2:62:1a:
c6:7a:0d:c5:8b:3b:4a:50:8a:f6:b0:97:4e:d2:30:4b:f5:54:
85:73:ee:93:08:d8:ce:cd:09:e3:e9:61:d3:49:ad:ca:c3:2a:
78:97:3c:ef:76:0e:16:1f:20:da:6f:4e:b4:cf:b4:55:51:a5:
70:ad:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:06:15 2025 by rpki-client