Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/el5qFDMV5hMW1NAGRbmjGI68Zeg.roa
File: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (raw, json)
Hash identifier: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=
Subject key identifier: 7A:5E:6A:14:33:15:E6:13:16:D4:D0:06:45:B9:A3:18:8E:BC:65:E8
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 019425FDAAA4DB14E9F334471D1A1C2031C9
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/el5qFDMV5hMW1NAGRbmjGI68Zeg.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39444
IP address blocks: 46.30.200.0/21 maxlen: 24
185.204.104.0/22 maxlen: 24
185.204.106.0/24 maxlen: 24
2a03:2680::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:aa:a4:db:14:e9:f3:34:47:1d:1a:1c:20:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a5e6a143315e61316d4d00645b9a3188ebc65e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:94:05:fe:78:0e:8e:08:f8:6d:d2:22:da:
4f:b3:73:3c:bb:f6:01:21:66:b1:b5:3c:a2:9c:1a:
1a:a4:4d:6a:45:65:d5:5e:bc:76:8f:fc:b2:5c:9f:
f0:07:a2:11:67:a5:f7:65:75:0f:4a:ad:41:79:5d:
c2:ce:ab:c9:cb:f0:5f:5a:7c:e6:f8:0e:51:45:84:
60:71:5a:39:02:ca:2a:55:ec:b5:4b:11:c3:81:37:
35:0d:fe:7e:53:40:69:64:90:c1:d0:5f:72:26:d6:
95:11:62:37:df:0e:63:30:2c:13:89:24:d7:23:87:
3e:38:e6:06:9e:98:ca:a6:e5:39:fd:07:a2:20:62:
2d:70:70:4e:a9:98:9f:81:30:d7:77:c0:98:d9:72:
56:99:70:79:b9:70:22:c2:4a:5e:ed:de:6f:c7:af:
b5:f1:a9:6b:1d:3c:aa:8c:74:2b:9f:9c:d0:80:c7:
71:0f:19:06:0c:d8:eb:0b:97:4e:f6:e4:2b:a0:f6:
ab:d1:61:01:6f:1c:69:b9:08:2f:da:d2:ce:ee:0d:
da:5f:a5:f1:81:df:00:dd:cb:8f:0d:47:c6:8a:c9:
ed:29:ec:52:60:76:71:43:8f:bb:ef:81:d6:61:0b:
6e:e9:cb:fb:f7:6f:12:24:ee:21:c7:1d:d8:0b:15:
0a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5E:6A:14:33:15:E6:13:16:D4:D0:06:45:B9:A3:18:8E:BC:65:E8
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/el5qFDMV5hMW1NAGRbmjGI68Zeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.200.0/21
185.204.104.0/22
IPv6:
2a03:2680::/32
Signature Algorithm: sha256WithRSAEncryption
01:e5:6f:80:21:a2:d7:c2:6c:f3:63:8e:48:27:8a:b3:cb:11:
49:04:fb:09:44:09:a6:46:59:61:dd:1c:bd:e3:35:0b:fe:c0:
01:a5:2f:38:f7:2f:3b:50:de:04:f8:32:9d:bf:8b:0b:e0:b3:
52:41:30:1f:ed:92:2f:2b:d5:00:08:75:96:dc:2a:9e:f2:94:
d2:97:a8:a4:8b:81:d0:b9:06:8c:98:ed:af:e8:16:7b:e6:0f:
8f:0c:64:48:1f:0d:e1:b4:f2:44:39:96:73:45:2a:c0:f7:cf:
72:c7:40:f7:80:55:c7:e5:4c:ba:72:c0:a8:3f:6f:e0:5f:2d:
2e:61:65:09:5f:1d:69:af:8d:9e:eb:7a:d0:e6:85:85:22:2a:
d6:59:e5:11:af:d3:c0:85:21:1f:ee:b4:ad:be:cf:4a:15:73:
18:5d:f3:2b:f8:fa:64:22:16:24:38:3c:70:c3:d4:ea:8b:9c:
d1:d3:d7:eb:09:b5:77:65:8e:4b:ee:72:7f:96:9c:7e:9a:c6:
9b:b7:b0:20:1f:ba:d3:b3:a1:a3:f0:8f:26:a5:85:22:56:03:
f0:d0:11:3d:54:aa:2b:f2:06:09:5c:c8:68:1b:2f:25:90:39:
7e:b5:1a:4b:11:c2:cf:fd:73:fd:e6:de:15:0a:a4:38:18:70:
20:99:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:39 2025 by rpki-client