Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eExfBs_eCEzndtF1BbwaXdhLX-4.roa
File: eExfBs_eCEzndtF1BbwaXdhLX-4.roa (raw, json)
Hash identifier: 9FAGFgqiCHMDuYiQg0Tdo1HwzNX/JtDFJTlEf+kOf3E=
Subject key identifier: 78:4C:5F:06:CF:DE:08:4C:E7:76:D1:75:05:BC:1A:5D:D8:4B:5F:EE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4BA233F351827DC631980933C655
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eExfBs_eCEzndtF1BbwaXdhLX-4.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60298
IP address blocks: 2a12:bec0:2a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:a2:33:f3:51:82:7d:c6:31:98:09:33:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=784c5f06cfde084ce776d17505bc1a5dd84b5fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:ae:b4:d4:c7:55:0e:c2:f3:62:1d:9e:eb:
82:3d:68:44:01:6b:f6:65:3d:da:a4:ad:ee:a7:b5:
92:77:13:07:d6:f2:63:c3:fe:c7:86:57:fc:fa:c1:
7e:a5:5e:ac:06:5f:12:eb:fa:82:fd:46:12:de:ec:
16:b5:9d:9a:12:f4:2a:e4:da:ae:6f:ed:07:b5:22:
eb:76:91:4d:9e:40:39:a1:44:a4:0b:c3:23:2b:5f:
53:69:c7:36:a8:6b:7c:d7:c3:b9:98:68:39:2d:1f:
a7:52:45:57:d5:80:10:da:1d:48:17:bf:32:40:cc:
4f:d0:31:56:b2:f3:93:ee:80:bc:7e:34:73:9b:8a:
ba:28:1b:d8:29:45:d7:e6:ef:07:c4:e6:1b:eb:e7:
aa:d7:15:37:28:1c:8a:9f:43:52:8d:15:9e:ac:36:
1c:f1:f5:50:33:95:62:55:d0:e7:7f:ad:fd:b2:0b:
a2:5c:f0:1b:de:e5:3e:81:71:fb:79:78:f4:24:59:
f0:51:71:2a:29:b4:eb:8b:4f:76:d9:ba:93:6f:1a:
f5:e1:a0:44:52:f7:26:a4:59:27:13:28:4e:79:61:
7c:47:d7:af:5c:de:eb:39:32:1f:4e:09:4c:78:63:
d5:0f:e2:ae:01:d7:a0:b0:4e:4a:14:19:3b:6f:71:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:5F:06:CF:DE:08:4C:E7:76:D1:75:05:BC:1A:5D:D8:4B:5F:EE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eExfBs_eCEzndtF1BbwaXdhLX-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2a0::/44
Signature Algorithm: sha256WithRSAEncryption
49:ba:f7:15:34:ef:dc:87:4d:b0:fe:71:99:93:0a:13:5b:95:
6c:ad:62:d9:ff:da:b4:a9:a4:4d:a7:30:2f:bd:65:76:5b:f1:
f8:db:e9:cf:f6:52:bc:a9:d2:9a:9d:6a:73:6b:48:40:d6:9f:
2b:80:04:7a:8c:86:d0:19:78:33:46:eb:8a:92:eb:eb:18:bd:
59:32:07:20:eb:f9:20:fd:a9:18:d4:c4:7a:32:0d:2c:1b:ec:
80:a4:80:cc:0c:64:ef:ba:76:bb:45:be:6a:aa:7d:f8:72:1d:
3a:15:ca:e3:f2:70:7a:55:25:3e:9f:84:8a:e9:3b:1f:61:6b:
ef:05:31:44:d8:d6:4a:83:c9:e7:24:b1:ac:13:de:fe:48:17:
3f:7d:01:52:f9:ec:3f:93:1b:16:ad:6a:d0:28:84:d4:47:4e:
b8:e1:e1:a5:88:9b:6c:8c:0f:ea:45:dd:19:22:3e:14:ff:bf:
4c:5d:79:73:39:68:5d:3b:3a:e8:8e:6f:15:73:cb:cc:3e:b1:
91:e0:06:73:e0:70:e8:92:47:d5:31:54:0f:02:c1:af:c0:bb:
ac:52:64:b7:d7:1b:20:c6:b2:20:b3:d3:4d:ea:b5:83:d5:d7:
87:9e:b3:b2:60:4d:da:d4:92:9d:4d:fa:0a:4d:7c:8a:dc:70:
be:d2:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:26:07 2025 by rpki-client