Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/em928uE801tncexTsiwdYgbCyFs.roa
File: em928uE801tncexTsiwdYgbCyFs.roa (raw, json)
Hash identifier: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=
Subject key identifier: 7A:6F:76:F2:E1:3C:D3:5B:67:71:EC:53:B2:2C:1D:62:06:C2:C8:5B
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CFEE6E9127613EE4775DBAC1A24C
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/em928uE801tncexTsiwdYgbCyFs.roa
Signing time: Thu 02 Jan 2025 17:50:23 +0000
ROA not before: Thu 02 Jan 2025 17:50:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35238
IP address blocks: 86.63.224.0/19 maxlen: 19
91.91.0.0/16 maxlen: 16
2a00:a580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:cf:ee:6e:91:27:61:3e:e4:77:5d:ba:c1:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6f76f2e13cd35b6771ec53b22c1d6206c2c85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:98:b8:00:37:c0:af:6b:65:2f:16:35:0c:
ad:f3:9a:39:a8:06:d5:41:c3:ce:44:1d:94:6f:5b:
92:58:fe:37:90:2a:61:20:d7:69:1d:3e:3f:da:70:
94:50:29:52:09:8f:88:4f:09:44:e6:a7:c6:c6:e8:
51:56:b1:a8:81:f6:05:55:46:eb:82:18:0d:4e:ee:
c7:fe:bf:78:08:1c:24:08:5e:73:40:1b:85:32:75:
d5:e7:c8:8d:c9:76:d8:86:04:6c:bc:7b:b4:b6:97:
58:12:46:41:c1:cb:84:a9:c8:91:5c:85:a8:00:33:
5e:0d:2a:40:ce:55:03:8b:95:33:8f:bc:d5:d0:61:
a1:a2:7d:9b:c0:b8:6c:6d:25:ee:fb:ce:9a:64:b8:
c4:53:e2:9e:0c:12:64:45:0b:bd:c6:eb:af:23:24:
83:e3:dd:89:45:54:5e:f9:cf:d0:a1:a1:49:e2:dd:
43:90:a5:b4:39:2f:bc:aa:0a:b5:c9:b9:25:65:b7:
d4:ac:6e:6b:63:17:cf:17:41:ea:e2:cb:af:55:65:
31:58:16:07:63:3b:5a:f5:1e:3d:bc:21:b5:3b:c8:
8e:3e:47:20:a0:e3:a9:5e:4c:c0:65:9b:cd:10:81:
37:1b:b3:5b:1e:f5:15:5d:d2:05:dc:5f:4b:89:ff:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:76:F2:E1:3C:D3:5B:67:71:EC:53:B2:2C:1D:62:06:C2:C8:5B
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/em928uE801tncexTsiwdYgbCyFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.63.224.0/19
91.91.0.0/16
IPv6:
2a00:a580::/32
Signature Algorithm: sha256WithRSAEncryption
a1:a7:b5:b4:c4:d1:41:87:fa:b8:83:13:8d:65:67:b6:cc:9f:
cf:a7:c2:08:fb:5f:69:00:75:b3:08:b5:68:da:9a:40:f6:61:
15:00:cd:bd:99:92:48:c7:f1:59:54:20:42:aa:ef:3f:15:bd:
6f:15:44:7f:e4:96:90:46:92:30:54:73:9a:9b:e5:84:4d:75:
f9:56:ea:2f:9b:b1:69:77:f0:92:6c:a6:05:72:08:e8:38:a8:
3c:bd:e1:f0:91:85:03:41:9e:78:93:78:0c:48:c1:27:41:a5:
69:e2:dd:08:35:75:a9:a9:4a:3d:97:1a:64:61:d1:07:3e:45:
18:3b:0e:7d:fb:ed:fd:46:74:be:81:9b:62:5b:05:82:51:f8:
20:43:70:fd:5e:62:99:4b:aa:e9:0b:57:88:ab:f1:02:52:5e:
49:dc:fc:17:36:7d:ea:68:46:9a:41:10:f6:5c:2b:3d:2b:b3:
87:a1:b5:58:1d:25:0f:54:0b:a9:bc:42:00:49:e3:e8:a8:91:
85:75:de:8d:94:7f:5d:b4:22:96:89:d8:e7:59:ba:f7:27:59:
ff:8a:30:87:22:c6:86:8e:b2:8a:6a:69:e0:8d:22:6a:df:83:
71:0b:84:66:ee:0c:61:ae:ab:82:a5:a9:2f:cb:29:8f:81:9b:
33:40:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:37:43 2025 by rpki-client