Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eagdGfGJlmEZQGY_VHLxO8WUTq8.roa
File: eagdGfGJlmEZQGY_VHLxO8WUTq8.roa (raw, json)
Hash identifier: Qa/XODMcIs8RjiGQJgYDisZS+5jCHEU61E4SO+4K1Jo=
Subject key identifier: 79:A8:1D:19:F1:89:96:61:19:40:66:3F:54:72:F1:3B:C5:94:4E:AF
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0195003FE64E178FC6589143FE170167CC03
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eagdGfGJlmEZQGY_VHLxO8WUTq8.roa
Signing time: Thu 13 Feb 2025 16:59:02 +0000
ROA not before: Thu 13 Feb 2025 16:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 141.105.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:3f:e6:4e:17:8f:c6:58:91:43:fe:17:01:67:cc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Feb 13 16:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79a81d19f18996611940663f5472f13bc5944eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:31:5b:f8:fb:7b:e1:5b:52:6f:29:0c:ed:
1f:10:21:0e:7d:d3:59:f3:a5:fa:c2:01:96:e2:1e:
47:01:6e:8f:27:31:72:33:f4:70:d1:04:60:ec:ed:
02:93:0e:07:73:62:a3:ae:59:65:04:2f:8d:a8:7c:
44:e4:a6:8f:16:b2:f1:19:3e:45:92:a6:21:7f:59:
ea:93:7e:cb:28:83:72:2b:24:7a:27:36:75:2e:a2:
e2:03:6e:b3:96:b8:41:52:b2:19:24:6c:9f:9d:18:
23:76:43:6e:3b:f9:64:fa:e6:b7:4e:0a:67:5a:de:
1a:08:d6:dd:c6:49:26:23:c7:e2:da:c4:da:54:a3:
2d:8d:38:56:be:5f:c0:dd:f7:3f:e6:15:1b:37:9c:
a0:58:2c:4c:59:14:39:d1:72:0e:b5:3a:ff:36:e4:
a0:59:5f:7f:f4:4f:53:9b:da:38:bb:d1:6a:59:ff:
57:12:a4:f2:ec:35:24:08:d7:f9:91:9b:ba:1f:a9:
ae:71:71:6d:a3:3b:64:9d:07:6c:96:d2:54:5b:70:
17:96:af:b0:7d:46:87:4d:55:f9:68:69:24:6b:d3:
be:90:0e:5e:3e:68:19:e4:3b:4b:6c:df:41:a5:d5:
1b:87:9e:ea:04:85:49:a3:53:14:8e:7a:c0:9e:a3:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A8:1D:19:F1:89:96:61:19:40:66:3F:54:72:F1:3B:C5:94:4E:AF
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/eagdGfGJlmEZQGY_VHLxO8WUTq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.142.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:dc:5f:5d:a1:4e:ce:47:ac:ca:15:02:9d:42:2b:75:e7:ef:
d3:7f:ec:63:ac:bd:37:e5:9a:78:5e:79:16:c6:3a:3e:e3:84:
25:26:33:e3:06:52:eb:c4:c3:23:2d:04:ef:ce:08:c3:77:0b:
f1:94:a9:c6:1b:70:0e:d3:d4:68:2d:20:b7:5e:92:7e:a6:3f:
4b:ac:f9:3d:15:95:82:2e:44:bc:ad:e9:ff:42:dd:0d:c1:bb:
43:c3:e6:6e:be:1f:20:2f:fa:dc:ef:f4:ea:29:6f:01:d3:f1:
26:5b:9d:aa:b3:c7:66:19:85:ba:df:f8:60:71:d7:cf:12:87:
59:5c:84:3f:c1:27:c6:49:73:72:94:b3:cc:80:a4:b5:78:12:
9f:62:5d:4d:de:24:07:a8:99:07:0e:3d:76:16:e8:de:5a:21:
38:9d:08:8a:65:ca:78:57:af:2b:61:c9:d6:30:75:b3:c9:9d:
f2:c8:69:37:31:e0:54:84:f7:be:b6:9d:51:09:e0:d8:f3:a9:
b5:c3:98:db:34:13:1f:69:3f:16:8d:62:fa:9e:64:6e:a5:fc:
e6:f2:65:89:a5:13:96:15:ad:b1:b1:67:92:63:60:14:ee:7c:
99:cc:a6:a8:35:9a:95:e5:1d:01:a8:f8:6c:6c:38:15:cf:01:
0e:99:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:05 2025 by rpki-client