Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa
File: EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa (raw, json)
Hash identifier: qhUzbtll1fZR91tCmRG4V9VmK3ep2kPWk4uvDeplZCU=
Subject key identifier: 12:F4:F3:2C:D0:09:E8:7E:EA:46:73:52:87:CD:A0:48:A8:8C:32:08
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019426D9714950F6A233C268BF8684AF5CE1
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa
Signing time: Thu 02 Jan 2025 11:49:32 +0000
ROA not before: Thu 02 Jan 2025 11:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 216.120.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:71:49:50:f6:a2:33:c2:68:bf:86:84:af:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12f4f32cd009e87eea46735287cda048a88c3208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:35:47:c8:53:af:c6:f3:98:0e:ba:4d:27:
cb:12:fe:a4:b0:82:98:3e:57:c2:4d:27:f8:ca:ae:
e3:0f:b1:bb:c8:e8:62:37:b2:67:74:ce:8f:fb:d9:
dc:54:f7:1c:c3:2a:24:b9:70:4f:b7:4a:58:8a:75:
cd:e9:ff:1a:56:4d:83:eb:81:bd:20:cc:ae:88:8b:
ef:c8:2a:b9:ab:77:3d:b4:d7:11:02:eb:15:bc:3b:
02:b9:00:e2:90:3c:56:ba:3b:0b:44:53:2f:8d:d4:
75:bd:76:1a:77:23:18:fa:6c:76:b8:78:a5:a2:dd:
75:57:60:b5:e2:37:f5:74:9c:b9:9a:4e:28:b3:17:
03:39:3e:8d:e0:3d:ff:78:fe:c5:ba:bc:e8:65:88:
a4:f7:3f:a5:94:70:41:02:8d:f8:bb:eb:c1:67:7f:
32:47:48:98:b9:09:0b:cf:f5:3c:2e:87:ca:6c:cf:
b9:fb:7a:5a:43:90:7d:31:67:59:b2:52:7b:ff:59:
ef:c0:e8:11:ab:84:03:6f:4e:a2:b4:94:98:02:70:
ef:86:e0:38:6e:fc:23:22:b0:fc:2d:cd:b5:17:dd:
04:4c:8e:8f:b2:59:24:b3:53:6c:d3:56:4a:ce:26:
55:64:f3:4f:b6:3a:17:33:31:45:d4:95:1b:22:c0:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F4:F3:2C:D0:09:E8:7E:EA:46:73:52:87:CD:A0:48:A8:8C:32:08
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/EvTzLNAJ6H7qRnNSh82gSKiMMgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.120.180.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:bc:b4:bc:a6:c1:60:6a:72:6f:75:8b:2e:99:cd:f2:77:b4:
e9:4c:22:14:42:d6:76:6e:aa:86:8f:67:3e:e6:a4:1a:77:df:
ca:6a:2c:72:26:52:74:7d:65:28:4b:91:a3:79:5d:0a:e2:cf:
d9:ea:7e:be:38:84:15:c3:89:1a:e7:ac:d4:8e:cc:2a:9f:f0:
95:d2:8c:6c:25:ab:30:b4:da:53:33:5d:9c:02:65:1a:49:d3:
d9:16:63:fd:f8:ab:fe:e8:75:f3:87:1b:a8:9a:da:e1:e5:de:
c2:10:79:0d:f1:88:ce:64:1d:29:94:99:a6:5f:7a:f8:3c:0e:
05:7d:fb:b6:fd:85:a5:ce:9d:dd:19:39:d8:38:db:14:27:9c:
b9:f2:fe:a7:dd:c2:50:4a:b2:84:dd:38:ee:69:76:25:2b:5d:
c1:66:19:a2:24:49:1e:fd:9c:60:f7:cf:a2:ab:8e:04:da:36:
37:4b:2d:9c:0b:fe:92:eb:3d:58:b8:d6:f3:eb:b6:69:c9:7f:
58:81:90:f0:af:05:a7:b7:03:77:16:d6:0c:e8:db:87:4b:63:
01:11:37:e9:69:84:3c:17:6d:9e:a5:66:04:f3:a0:0d:eb:39:
94:f1:24:f2:19:9a:28:22:50:6b:cc:00:13:93:2c:8f:47:71:
bc:da:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:14:57 2025 by rpki-client