Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa
File: EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa (raw, json)
Hash identifier: 1z7kJSxRufE+Rr3Vk/FEsQraw1poJT+1o6mmpJ+VP7o=
Subject key identifier: 11:E1:F9:C1:3E:96:77:6B:91:59:F8:4A:09:84:45:99:7B:58:53:21
Certificate issuer: /CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Certificate serial: 0194258F889340CE747B882AA34A9B6EDA86
Authority key identifier: B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21454
IP address blocks: 80.252.224.0/20 maxlen: 24
185.173.236.0/22 maxlen: 24
185.173.237.0/24 maxlen: 24
188.214.198.0/24 maxlen: 24
195.74.75.0/24 maxlen: 24
2a10:5340::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:88:93:40:ce:74:7b:88:2a:a3:4a:9b:6e:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e2dc2340c5309b63eba23cfbe7eed11b74af47
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e1f9c13e96776b9159f84a098445997b585321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:f1:a4:64:87:88:0a:c3:b3:cd:a8:3c:c0:
81:c2:0b:f8:f9:4c:06:f0:24:33:f4:16:33:65:83:
c4:64:64:73:1e:2e:61:68:39:96:d0:6c:ae:3a:e9:
d6:23:e1:2c:c0:5c:fa:e9:dd:20:d5:28:11:31:81:
e0:11:23:4f:88:cc:b2:03:8a:dc:fb:87:76:52:d3:
9a:1e:a9:3f:26:a9:22:0e:f0:fa:29:36:b7:c0:7c:
27:f6:4f:ed:78:2c:c8:ed:9d:11:68:d7:95:26:cc:
6f:1b:25:2c:06:88:4d:bd:90:58:37:c0:6b:14:91:
3c:f7:04:33:e8:97:fb:11:f8:62:a0:6a:7d:1e:33:
90:ab:24:34:10:bb:f4:1a:ef:d4:21:76:13:65:21:
80:0f:09:58:ca:c7:f6:98:b0:b3:44:d5:92:2d:d3:
03:a7:bc:6e:b1:48:b7:95:f7:c0:77:f0:95:da:f7:
7e:36:73:31:79:3d:4a:7c:55:49:e4:a1:ed:5c:0f:
11:27:b0:9e:b9:86:ac:8d:8b:41:34:32:47:6b:45:
46:de:1a:1b:91:2c:42:13:35:f1:bc:e6:c0:ac:eb:
66:fe:cd:13:0f:39:26:73:0a:9e:f9:4e:57:f1:43:
00:be:c3:2f:aa:c8:5d:e7:87:24:12:31:77:fa:c1:
0b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:F9:C1:3E:96:77:6B:91:59:F8:4A:09:84:45:99:7B:58:53:21
X509v3 Authority Key Identifier:
keyid:B9:E2:DC:23:40:C5:30:9B:63:EB:A2:3C:FB:E7:EE:D1:1B:74:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueLcI0DFMJtj66I8--fu0Rt0r0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/EeH5wT6Wd2uRWfhKCYRFmXtYUyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/6f99d2-ad05-4cfc-9a5e-9cbedcec86d6/1/ueLcI0DFMJtj66I8--fu0Rt0r0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.224.0/20
185.173.236.0/22
188.214.198.0/24
195.74.75.0/24
IPv6:
2a10:5340::/29
Signature Algorithm: sha256WithRSAEncryption
2c:1a:18:5a:e0:fb:ae:b0:af:5f:1b:80:69:d7:ac:ec:01:3b:
f9:f9:2c:3a:f1:7a:2d:e9:d6:d5:dd:5c:42:a8:68:5a:3c:b8:
17:23:db:c4:3b:43:b9:00:9a:c9:79:67:2c:23:ff:b7:87:86:
99:c0:32:37:d3:b7:51:a8:02:39:53:86:65:ee:52:0c:4e:0f:
39:ee:40:39:f0:a8:1f:6c:cb:9e:01:97:d0:4e:93:e6:e7:82:
4d:10:f5:78:2d:59:1a:3f:f1:d5:e0:6a:64:5a:6b:c3:fc:66:
e3:58:7b:c2:65:b2:0f:fc:8e:32:7c:f5:9c:bd:03:31:e1:92:
7b:eb:dd:ad:72:cf:50:e8:22:cc:6b:38:54:ca:14:a4:69:24:
00:bb:21:c0:c8:97:f1:60:fd:bb:8c:f7:c1:5f:2e:39:1c:8d:
62:08:d8:4f:f7:ae:f3:0f:0f:64:78:5e:59:b6:7a:3a:77:80:
50:33:ac:cb:6c:68:cf:77:c8:d3:73:6a:48:12:2e:2a:58:2d:
bd:52:18:31:0c:a3:85:d6:5f:0e:40:63:6f:bb:87:12:d3:bf:
70:e7:ec:30:8b:98:c1:34:74:04:b7:ef:8d:61:cd:17:89:e5:
3e:05:e5:c9:0b:7f:88:72:e7:05:be:63:1a:48:39:11:9c:0a:
57:69:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:45:53 2025 by rpki-client