Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/EpL6n7YsTJUyCIMDB2XXj1UETF0.roa
File: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (raw, json)
Hash identifier: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=
Subject key identifier: 12:92:FA:9F:B6:2C:4C:95:32:08:83:03:07:65:D7:8F:55:04:4C:5D
Certificate issuer: /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial: 0194282833B9F016C22AA11466ACDCC9D4E9
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/EpL6n7YsTJUyCIMDB2XXj1UETF0.roa
Signing time: Thu 02 Jan 2025 17:55:10 +0000
ROA not before: Thu 02 Jan 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39007
IP address blocks: 86.100.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:33:b9:f0:16:c2:2a:a1:14:66:ac:dc:c9:d4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Validity
Not Before: Jan 2 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1292fa9fb62c4c95320883030765d78f55044c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:5b:d6:7b:c2:9b:08:b3:04:11:44:9a:c6:
24:2b:2d:b4:7b:aa:09:dc:70:02:6e:47:72:a5:c8:
81:96:f3:74:72:57:ba:39:74:21:60:90:5f:27:fa:
b2:fd:44:87:6a:93:1b:bc:5a:02:9d:9a:9b:db:f4:
d7:34:79:e6:20:74:a6:8b:e4:c5:18:17:aa:ca:fe:
df:62:d4:73:a5:46:b9:19:b8:f3:76:39:3e:df:52:
3d:99:cf:2e:87:c3:f6:a4:0e:c1:56:8a:47:70:29:
20:15:bc:97:70:2f:44:05:cc:06:43:7a:26:85:f3:
5b:84:c2:03:5c:77:c7:57:88:0b:e6:25:88:65:e0:
12:da:4b:6e:91:26:5e:4c:f4:b7:c6:47:17:13:e4:
bf:88:bd:e0:ea:ab:a6:41:14:ec:45:9c:fb:d6:5d:
cf:b6:32:f7:96:49:57:f1:0f:2f:42:8c:04:2a:9a:
d9:f7:07:0a:7a:09:9a:14:63:13:7c:fc:be:83:f3:
6c:42:0d:98:cc:e9:3d:84:f0:7a:a6:c0:f7:91:26:
94:0f:90:bc:fe:fe:b1:28:be:16:58:f6:36:b7:3a:
0c:3e:80:bf:87:71:5a:15:9e:1c:3d:75:db:b2:f5:
4c:71:55:e1:50:21:cf:a5:69:a9:5a:25:3b:8d:6c:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:FA:9F:B6:2C:4C:95:32:08:83:03:07:65:D7:8F:55:04:4C:5D
X509v3 Authority Key Identifier:
keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/EpL6n7YsTJUyCIMDB2XXj1UETF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:c6:7e:4d:2f:6d:fd:1b:cb:fa:8e:72:47:85:ab:5c:80:15:
01:7b:16:4f:e9:35:6e:43:91:79:03:ac:3b:b8:68:e0:0f:aa:
86:dc:31:26:bb:e7:11:9f:0f:30:b2:f6:bf:c0:ea:78:f6:5e:
2a:3d:68:c3:bf:7b:a2:9d:81:8b:61:a5:05:37:46:53:f9:ea:
b3:c4:41:7e:6c:1f:37:86:c6:50:eb:76:6b:d1:fa:24:e2:57:
c7:a2:f7:3e:06:aa:42:33:d3:49:0d:00:59:06:9e:8b:2b:1e:
6d:0f:f9:4d:c5:e0:4d:de:e5:1a:ff:5a:38:b4:64:7a:5d:83:
ad:91:26:c0:00:df:8c:1a:f4:5b:fe:9f:dd:9b:cd:0e:a8:22:
b7:0b:cc:d3:39:70:e3:af:b5:0e:a0:12:82:10:75:3f:20:65:
49:49:c6:7e:b6:2c:36:88:14:96:a3:ea:d1:38:15:61:83:9e:
99:a6:a8:a9:99:ea:43:42:e7:5f:49:3b:53:ec:a9:c5:57:92:
73:cd:45:f5:04:3f:d7:ba:b5:b2:a0:59:25:eb:7a:23:0d:b8:
c9:0c:4b:8b:75:4f:71:79:f6:86:0e:71:96:71:f0:54:26:81:
2f:88:f6:31:49:73:f5:1e:4e:77:92:ca:45:f3:38:b6:4f:cc:
10:63:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:11 2025 by rpki-client