Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/EDJJIlUMrCN3cPb4YyplYaUa4mY.roa
File: EDJJIlUMrCN3cPb4YyplYaUa4mY.roa (raw, json)
Hash identifier: xSeFXRQr0ff+ENa0I7t8r/hMXg9ue9s9da6FSArG9HI=
Subject key identifier: 10:32:49:22:55:0C:AC:23:77:70:F6:F8:63:2A:65:61:A5:1A:E2:66
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 019422FB7B3048DC859D43EF63F7050D51A5
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/EDJJIlUMrCN3cPb4YyplYaUa4mY.roa
Signing time: Wed 01 Jan 2025 17:48:13 +0000
ROA not before: Wed 01 Jan 2025 17:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 185.233.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 13:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7b:30:48:dc:85:9d:43:ef:63:f7:05:0d:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jan 1 17:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10324922550cac237770f6f8632a6561a51ae266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:fe:92:d8:7d:08:17:db:4b:ef:e7:ac:ed:
be:ec:9e:f2:71:ea:8c:53:22:26:4a:29:c5:6b:28:
51:60:06:d7:e2:b1:a9:5e:60:99:68:71:ee:79:29:
c5:53:1d:3b:c0:5b:00:70:e0:97:ab:9c:63:45:24:
5c:64:62:19:af:ef:d6:5c:62:31:ed:dd:5b:fb:67:
d4:85:43:73:72:8b:13:32:b0:1c:19:ee:84:5d:a5:
be:69:a0:6b:a1:9e:9c:4d:b5:db:90:63:23:d2:41:
2c:a9:ab:41:aa:c0:c2:5a:5c:93:d2:67:3a:d5:5c:
61:26:81:83:f4:96:76:40:fa:4d:1e:06:51:2e:ad:
65:ee:ca:e6:b4:f2:b9:58:9b:ff:b1:08:94:2e:dd:
11:ec:39:67:87:26:24:39:89:10:92:bb:ed:0f:df:
41:bf:96:20:be:7c:b1:b7:5f:f0:3d:30:5f:3e:f4:
00:c0:2e:1e:94:03:fe:a6:07:d5:80:d1:56:b6:ab:
94:4d:fe:8a:01:a0:fc:64:f5:23:4b:22:2b:19:a4:
46:40:9b:57:9e:62:67:97:eb:e8:0d:b8:20:c0:9a:
2d:0c:71:44:e2:dd:da:3b:cf:b0:e1:b1:88:85:01:
0a:b0:db:8f:35:3a:52:17:e1:5d:86:88:17:de:80:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:32:49:22:55:0C:AC:23:77:70:F6:F8:63:2A:65:61:A5:1A:E2:66
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/EDJJIlUMrCN3cPb4YyplYaUa4mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0a:2f:71:0d:39:10:da:a3:5e:12:9a:7e:7e:11:4d:8d:30:
24:c1:bf:6e:b3:02:d6:a6:8b:af:9a:56:d8:31:62:97:52:97:
09:d9:31:2f:7e:6a:e0:47:f8:9e:76:41:90:03:a3:8a:5d:0e:
13:e9:52:98:18:4f:09:29:c3:ce:e4:5a:d7:5f:65:39:bb:bb:
3d:23:47:0b:6a:30:55:cb:82:90:68:dc:a0:73:44:ff:ee:7d:
fb:64:e4:75:54:6c:8e:80:54:76:ce:7e:3e:bd:29:f2:dc:66:
25:4a:8a:28:b7:62:c6:74:71:90:77:2a:6d:3b:2c:a8:f2:db:
3a:e3:ab:ab:57:07:0e:f0:e5:fa:dd:53:07:bc:cc:1e:fc:27:
09:e0:c3:86:bf:99:96:b0:7d:57:a5:61:d8:02:88:24:dd:dd:
73:be:df:36:58:c7:41:f9:85:be:1b:2e:9f:81:33:36:80:1d:
f0:26:59:70:32:31:7d:f0:f9:2b:d3:d0:f0:11:b4:63:f1:07:
35:f2:66:6c:b3:ff:8b:d8:e3:9b:6a:50:b8:15:80:3b:40:40:
84:ed:e5:0a:39:50:53:d6:08:a6:c6:da:ba:a6:e7:e3:5a:8c:
4f:6f:ae:23:97:77:5f:12:12:49:1e:3d:09:a1:25:c0:ba:cf:
20:b4:a2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:26:13 2025 by rpki-client