Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/69MEYRk3KHWNU6PZCeunEy7z-lo.roa
File: 69MEYRk3KHWNU6PZCeunEy7z-lo.roa (raw, json)
Hash identifier: VbFRQRlaweaM8YOATERuna7Y1deHDTFSxhzV5IruIz0=
Subject key identifier: EB:D3:04:61:19:37:28:75:8D:53:A3:D9:09:EB:A7:13:2E:F3:FA:5A
Certificate issuer: /CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Certificate serial: 019425FC1A7F3BBB10FB5D26171E2A1CEDD9
Authority key identifier: 90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/69MEYRk3KHWNU6PZCeunEy7z-lo.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60735
IP address blocks: 194.124.236.0/24 maxlen: 24
2a0f:3cc3::/36 maxlen: 36
2a0f:3cc3:1000::/36 maxlen: 36
2a0f:3cc3:2000::/36 maxlen: 36
2a0f:3cc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1a:7f:3b:bb:10:fb:5d:26:17:1e:2a:1c:ed:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9042e83976e35fe29a01d3c43a9bc5964b37b443
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebd30461193728758d53a3d909eba7132ef3fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ff:fd:6f:57:67:55:96:18:ee:75:d1:64:c4:
33:de:b8:b1:04:2f:19:aa:bf:65:de:d1:91:4e:00:
5a:0f:b6:1d:f3:c4:e7:76:d9:8a:46:80:5a:64:a6:
14:3f:7f:87:eb:ad:23:4f:70:10:a9:84:a8:f0:03:
1d:e6:8a:16:ac:75:58:03:6d:a2:7d:c4:7f:e3:d3:
98:db:b4:e4:27:95:f4:83:d2:85:2c:ee:5c:8a:72:
84:50:bf:70:d8:30:56:11:75:7e:04:a1:77:b5:62:
e6:92:88:ee:8f:b9:0e:f2:f7:0f:8b:55:0d:12:91:
cc:fe:a0:b6:47:33:5b:26:17:10:e5:83:95:f3:c9:
15:ac:d9:f1:57:b7:03:f6:17:53:fb:51:ac:0e:e4:
4f:d0:9a:0c:82:f1:ff:21:05:c8:2e:c3:a5:01:80:
2c:86:5d:6c:f8:ba:47:ce:05:b3:2f:fd:0a:b0:6a:
38:04:c1:b4:d4:ce:aa:6c:e2:c0:3b:05:e7:dd:98:
d7:d9:90:3d:9a:c5:1c:16:78:bd:bf:bc:9e:94:8f:
78:a8:d7:94:0a:e2:d7:04:a9:24:74:9c:c9:2c:43:
8f:c7:56:3e:3c:44:e3:d5:83:d5:92:14:cc:f7:17:
78:29:99:13:7e:03:9f:09:f9:e3:c5:c9:68:2a:6f:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:04:61:19:37:28:75:8D:53:A3:D9:09:EB:A7:13:2E:F3:FA:5A
X509v3 Authority Key Identifier:
keyid:90:42:E8:39:76:E3:5F:E2:9A:01:D3:C4:3A:9B:C5:96:4B:37:B4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kELoOXbjX-KaAdPEOpvFlks3tEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/69MEYRk3KHWNU6PZCeunEy7z-lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a87b6e-d842-4c0c-881b-210940da177b/1/kELoOXbjX-KaAdPEOpvFlks3tEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.236.0/24
IPv6:
2a0f:3cc3::-2a0f:3cc3:2fff:ffff:ffff:ffff:ffff:ffff
2a0f:3cc6::/32
Signature Algorithm: sha256WithRSAEncryption
2c:c0:54:a5:04:d6:00:f2:8b:63:f6:b3:1e:b2:1f:18:28:23:
cb:da:07:54:df:0a:89:ec:be:07:17:25:67:34:d0:47:6f:a6:
57:e6:f2:9f:b3:b7:b5:e1:93:de:9a:e6:be:96:91:35:0f:c6:
e8:a7:f6:a2:29:48:48:18:ee:8d:bb:94:0a:ee:fa:6a:fd:a4:
84:dd:cf:d8:d9:df:ab:73:c6:f7:bf:eb:3e:b2:e7:bb:f4:9a:
f6:ca:f0:fa:5b:e2:6e:ab:de:87:74:6f:39:e6:a8:b4:e5:29:
a7:3e:7b:64:dc:76:ea:8d:75:22:71:00:6b:07:72:b8:9b:f8:
71:ed:75:6e:31:97:29:d8:5a:61:19:86:a8:8d:8a:95:7a:fe:
cf:b9:3b:48:c0:09:ce:bf:e8:8f:6f:d6:81:8f:af:1c:4a:0d:
4f:bf:6e:b6:35:25:e2:24:a3:8f:1a:e8:f2:16:53:13:1b:a1:
ca:87:db:8b:7e:8f:89:cc:c2:d4:39:3a:b1:74:df:51:60:e2:
9e:a5:75:aa:d8:7e:e1:90:d6:ca:ae:94:0e:53:52:e5:73:9e:
d3:31:a9:5d:b3:6d:e5:cd:96:d5:e9:4b:4b:63:50:fd:43:6b:
f9:b5:18:04:35:82:22:e0:d7:27:10:34:88:dc:11:77:82:1e:
3b:ce:5f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:12 2025 by rpki-client