Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eM1AMltl9-pspI3QCGOF_AIL35Y.roa
File: eM1AMltl9-pspI3QCGOF_AIL35Y.roa (raw, json)
Hash identifier: NCdTsx2Wap9KqbxSZSAfxZSaQAKED6KCKwBUV2zgi+I=
Subject key identifier: 78:CD:40:32:5B:65:F7:EA:6C:A4:8D:D0:08:63:85:FC:02:0B:DF:96
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019424449839BC2D40343BEA204A2E49BFA7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eM1AMltl9-pspI3QCGOF_AIL35Y.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142146
IP address blocks: 213.232.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:98:39:bc:2d:40:34:3b:ea:20:4a:2e:49:bf:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78cd40325b65f7ea6ca48dd0086385fc020bdf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:41:63:e7:63:c8:1b:de:25:5e:96:08:e7:
19:46:22:f4:fd:32:c7:5a:6f:4a:22:47:a0:24:e8:
17:e6:df:2f:68:45:4b:1e:3d:db:0d:e7:d9:76:d6:
b7:dd:5c:50:f2:06:7f:34:8b:a6:08:bd:58:cc:8b:
42:95:4a:cc:b9:73:9f:1d:3a:29:08:7c:27:ae:bc:
c8:43:54:ae:0b:81:04:e3:f7:a4:06:6c:34:f1:e3:
1e:fa:91:58:ce:24:94:62:b3:1f:ee:1d:66:d0:42:
49:95:7a:70:91:0a:e4:ba:b7:6e:c2:f2:5b:21:41:
d7:33:13:ec:f1:d1:88:a2:1a:e4:e7:3a:32:45:5e:
5d:77:53:02:a4:44:6f:2a:ec:71:77:4c:0f:c9:66:
00:69:68:cb:01:5d:fb:2c:c2:53:de:58:ef:e0:51:
9c:7b:94:0f:8f:d1:e0:88:a5:c0:b4:7a:d9:f1:16:
3f:7c:0b:cc:4e:4b:70:3d:a1:58:c4:57:eb:4f:28:
ff:ee:60:74:a5:25:3e:b3:33:53:31:8e:fa:cb:c1:
4a:4b:a0:67:47:7d:2a:ae:69:f4:9d:29:46:50:65:
9d:ae:e5:53:ec:88:f5:bb:64:03:4f:a0:16:ce:5f:
c5:30:6c:4d:85:5d:17:e6:d6:43:a9:f3:09:ee:85:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CD:40:32:5B:65:F7:EA:6C:A4:8D:D0:08:63:85:FC:02:0B:DF:96
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/eM1AMltl9-pspI3QCGOF_AIL35Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:65:50:d9:36:9e:14:2e:5e:62:ce:e9:21:83:40:8c:d9:
bf:10:13:cb:98:b1:ed:6e:7f:45:41:e8:2d:36:7a:74:53:25:
99:d8:25:6c:34:03:4c:b2:6d:6b:f8:7c:81:72:e7:56:de:bb:
6e:85:e2:bf:96:0d:c9:00:50:23:78:a7:eb:75:9e:e2:97:63:
80:85:28:0a:23:3b:01:db:00:2e:55:d5:27:09:31:b6:56:08:
57:99:7f:b9:ac:6d:96:63:93:d0:7e:2e:30:a4:4a:20:a6:c4:
dc:8e:0f:0b:7b:9b:ba:40:e7:1b:24:8f:f7:59:c1:6b:94:b6:
6e:e1:0a:22:43:a8:ec:4b:2b:55:a6:59:a7:7e:1d:81:ea:15:
59:78:0e:63:a3:75:a2:53:a0:dc:3c:27:1a:9c:82:94:80:4c:
08:33:0f:17:01:e7:21:1a:b9:a8:00:b1:91:84:2c:f4:ad:5f:
77:4f:aa:12:58:70:6e:10:da:c4:5d:7d:45:e2:98:ee:20:32:
8c:1e:46:91:4b:aa:15:fc:ce:75:bd:50:0e:18:af:1c:48:c9:
ef:be:62:71:9b:a9:9a:6e:f8:3d:97:41:9d:89:1e:8a:16:fa:
49:95:57:71:a0:ca:b5:f3:3c:ba:72:07:72:4f:6b:44:cd:b8:
75:57:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:48:44 2025 by rpki-client