Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa
File: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (raw, json)
Hash identifier: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=
Subject key identifier: 12:21:08:40:27:3F:A8:C7:AB:E2:53:89:9D:20:EA:45:CB:83:D4:B7
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 0195F615F86B93232451430FD393DF6A486F
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa
Signing time: Wed 02 Apr 2025 10:39:49 +0000
ROA not before: Wed 02 Apr 2025 10:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48988
IP address blocks: 88.218.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:15:f8:6b:93:23:24:51:43:0f:d3:93:df:6a:48:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Apr 2 10:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12210840273fa8c7abe253899d20ea45cb83d4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:95:67:59:a2:a5:46:5c:81:8c:f0:97:e4:
db:7b:7f:03:68:37:1a:f6:9d:0f:89:6d:e5:79:fa:
ac:59:60:b7:3c:de:4d:14:db:0b:9d:7f:b4:b2:cd:
f7:04:29:ad:ff:2f:f8:99:df:b4:c3:e4:5a:c9:be:
e4:0b:db:66:d5:2a:e6:08:97:03:f4:25:21:c2:f5:
f3:e3:5f:5b:a7:e4:04:9c:e1:33:95:24:89:1b:1e:
2b:17:c8:bb:0f:56:f0:7a:87:9e:a1:cc:e0:27:4a:
3d:29:f3:00:de:b6:50:d4:68:6c:d2:4a:e8:fa:c9:
6d:89:5a:5a:e5:15:38:c1:f7:8b:29:ac:91:05:d2:
3b:ce:02:6c:88:fc:73:73:39:36:87:25:f4:b5:2b:
03:e8:29:3a:a7:01:28:94:14:be:d2:00:79:d4:d6:
f9:f5:f3:13:6d:42:3e:a3:b5:99:7c:c3:94:f8:71:
19:2c:d7:8f:44:b0:fa:fd:0b:71:39:d3:f3:de:56:
39:8e:ae:da:c6:f1:ec:73:d3:f1:09:fe:c5:70:89:
b5:a3:46:cc:99:a3:57:cb:88:6e:a6:d7:09:5e:5b:
ea:93:f9:12:7a:85:3c:66:a3:82:38:d3:33:4f:bb:
b6:b4:53:9f:60:75:08:1c:9c:f9:e2:97:57:ac:16:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:08:40:27:3F:A8:C7:AB:E2:53:89:9D:20:EA:45:CB:83:D4:B7
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.68.0/22
Signature Algorithm: sha256WithRSAEncryption
16:63:55:f4:ae:60:b2:49:4d:6a:95:a6:5b:24:9d:c1:c3:e3:
03:46:85:f7:52:f0:0d:19:47:39:6f:81:6c:46:6c:62:f8:eb:
44:7a:43:6e:8d:a6:46:0b:24:1a:2c:f5:ec:22:05:c4:aa:c3:
0c:23:96:06:6c:09:9a:0c:df:23:ee:73:f1:19:49:9e:3c:ad:
3d:cc:89:9a:3e:22:5b:b1:de:e1:d7:03:36:ca:ff:bb:5e:9a:
f2:4c:06:24:43:81:5f:af:7d:6b:5a:2c:10:91:0d:cb:37:52:
e4:56:9e:e6:fd:89:88:5c:7c:fc:80:bd:bb:91:7a:3b:81:db:
1f:25:77:5b:ab:57:30:05:ad:3e:fc:1f:ac:e4:de:a0:10:00:
d7:1e:a3:28:98:4e:fe:10:1b:4e:54:54:cc:9c:56:02:89:c2:
d5:15:66:10:b8:e3:d1:5e:cd:57:7b:07:79:91:62:7d:d7:6f:
b0:a9:20:f0:27:b1:71:1d:f4:61:7a:7b:4b:38:63:98:91:86:
a7:38:43:f1:8c:84:74:4b:8d:e5:b2:5d:6d:6c:a8:17:d6:67:
3d:c7:84:24:5e:7d:0b:2d:f3:2e:4b:00:25:0e:09:51:c8:7e:
a8:9b:05:35:4b:71:20:60:9f:2b:71:68:11:ae:1d:62:fe:98:
fd:76:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:48:03 2025 by rpki-client