Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa
File: eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa (raw, json)
Hash identifier: Ij7xKzGQVqQU38kvjmTNToko/fNpur4SF9xRWlCB2/Q=
Subject key identifier: 78:FF:FE:B9:11:97:46:98:B8:5A:13:1B:5F:B8:E1:07:D6:97:77:98
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 019421B1BCA065B2D88A09829561ACEEA0E5
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212549
IP address blocks: 185.203.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bc:a0:65:b2:d8:8a:09:82:95:61:ac:ee:a0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78fffeb911974698b85a131b5fb8e107d6977798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:ab:d8:96:68:d0:fb:14:e5:62:c2:3c:9d:
b2:f7:b9:bc:e2:a4:83:f6:96:c5:06:53:6d:d0:aa:
6f:2c:b6:07:53:7d:e9:67:51:00:61:b6:f0:22:68:
0b:17:df:1e:2a:56:3b:33:f7:1d:b2:aa:32:38:c2:
d3:46:03:e2:b8:14:5c:81:eb:21:4d:ac:e8:44:42:
02:2a:91:6f:c3:3f:ad:98:74:ee:40:e8:82:39:d7:
3b:27:8d:79:73:b6:2c:3f:98:77:5f:b9:65:27:11:
31:b4:fa:d2:28:ed:2b:1a:1b:79:0a:41:d7:05:e6:
80:44:61:dc:d9:ce:67:1d:46:b2:e8:9b:2e:88:f9:
45:e3:85:cc:66:7c:b1:fa:28:69:20:2f:aa:d1:c1:
ea:71:af:c8:ff:dc:90:48:0c:9e:e4:31:aa:9a:39:
bb:da:e1:65:c6:15:a7:75:b5:86:c0:c1:eb:a4:73:
d0:6f:4b:81:94:26:63:7a:99:61:df:58:a6:9d:aa:
0c:59:06:4b:12:25:5b:33:1b:36:85:60:40:f0:f7:
84:53:64:d7:1f:ca:0b:2d:58:5b:e4:cd:28:7d:57:
0c:c7:cf:13:02:29:7c:7a:18:a4:1b:e1:a6:1f:f3:
32:ad:02:92:61:b8:87:7f:77:45:e4:24:6e:62:0f:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:FE:B9:11:97:46:98:B8:5A:13:1B:5F:B8:E1:07:D6:97:77:98
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/eP_-uRGXRpi4WhMbX7jhB9aXd5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.89.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f4:32:1c:79:92:5b:fb:5c:42:bf:02:b3:f8:14:c0:c1:9c:
cd:19:a0:ad:66:74:43:39:c5:ca:6b:d6:5f:f2:5a:6c:df:80:
cf:bc:96:2b:e9:3f:08:c1:4c:ee:00:7c:57:80:88:6a:1d:99:
78:80:8c:6c:5f:55:6d:0a:8e:c6:ff:5c:ca:d7:23:2c:ca:87:
ef:dc:58:49:4a:9b:82:52:49:ec:cc:2e:0b:e1:40:96:bb:b6:
94:b2:74:df:f0:88:0f:73:69:63:f3:82:60:1a:3e:7f:b4:db:
76:26:b3:99:21:04:7c:7c:5a:fb:6f:03:70:12:10:b9:89:3f:
23:2b:64:32:03:ea:88:a2:95:14:3f:9a:02:83:b8:2c:37:4f:
69:34:a7:94:7b:6f:a7:37:7c:b6:e3:32:9d:4b:1f:8e:cd:f0:
c1:0d:26:87:89:41:84:1d:d7:7e:0d:93:18:dc:32:d6:b3:b9:
77:61:50:2f:b1:66:75:fe:54:84:51:9d:29:e8:7a:9c:75:6b:
5c:16:15:7a:80:e1:88:d2:be:67:0f:af:c2:a6:c6:15:f1:e2:
d7:f3:b2:60:64:08:5d:1f:5b:73:e5:8e:87:49:ac:e1:23:36:
82:80:88:f0:21:7c:ec:ee:c0:e6:ba:89:9c:d3:d0:49:25:96:
b9:59:8a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:28:09 2025 by rpki-client