Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/EcRwtilhZy6tNswg6gPS5OkvUlQ.roa
File: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (raw, json)
Hash identifier: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=
Subject key identifier: 11:C4:70:B6:29:61:67:2E:AD:36:CC:20:EA:03:D2:E4:E9:2F:52:54
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 0194221FF0F974B934D21782732367799EC2
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/EcRwtilhZy6tNswg6gPS5OkvUlQ.roa
Signing time: Wed 01 Jan 2025 13:48:26 +0000
ROA not before: Wed 01 Jan 2025 13:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201304
IP address blocks: 212.18.248.0/24 maxlen: 24
2a04:2b00:13ee::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f0:f9:74:b9:34:d2:17:82:73:23:67:79:9e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11c470b62961672ead36cc20ea03d2e4e92f5254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:9e:ed:bd:3a:3a:57:8d:0c:d2:66:f9:d3:
29:05:ae:18:71:8c:48:f5:47:a9:13:7a:02:c7:64:
82:df:03:54:e8:4c:84:b1:6a:32:28:89:bd:cb:74:
5d:a5:6b:59:f7:66:81:7e:7f:88:9d:bf:7c:89:bf:
ab:83:0e:80:12:c1:82:20:b1:d4:fb:16:90:96:6b:
20:ac:aa:c9:9c:84:37:31:06:50:4b:47:3f:0a:f5:
7e:cd:59:84:4f:39:7d:26:18:dd:e8:35:31:67:13:
5e:4e:14:1d:7c:b8:e8:27:fc:76:8a:70:23:35:a9:
3b:a0:f0:07:35:98:89:4b:f9:dc:d4:c2:7f:9a:f4:
88:35:08:02:20:97:d3:e3:28:c8:8f:b2:b1:ff:0e:
11:f4:44:bd:e9:8c:11:fa:35:19:2a:37:a3:ec:ad:
05:40:f1:54:42:2c:31:68:b9:b9:13:62:da:d0:ae:
fd:0e:7e:fa:43:a5:5a:2a:ed:b2:e8:31:19:4f:b9:
47:12:39:66:1a:36:71:76:83:d5:57:1d:a5:31:75:
e4:48:14:05:46:f5:5d:63:fe:c5:c4:ee:25:09:53:
f8:94:90:62:90:c5:db:bb:73:09:11:44:91:b3:7c:
ab:dc:ff:be:66:29:fd:25:68:b6:22:e4:12:7b:ec:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:70:B6:29:61:67:2E:AD:36:CC:20:EA:03:D2:E4:E9:2F:52:54
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/EcRwtilhZy6tNswg6gPS5OkvUlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.248.0/24
IPv6:
2a04:2b00:13ee::/48
Signature Algorithm: sha256WithRSAEncryption
5e:76:71:3f:97:3b:09:84:1e:81:04:6f:dd:e7:5d:95:ea:f6:
31:94:69:26:81:f3:f4:a5:d1:ce:7e:ae:aa:5b:d6:af:0f:01:
38:c9:27:59:65:ca:b3:b6:be:77:45:92:65:36:c7:fc:c2:83:
cc:95:77:2b:19:3d:fd:35:28:43:9a:ba:0e:5e:83:2e:0f:bb:
b0:d4:44:a4:f0:60:f1:e9:63:76:54:24:48:b9:cb:72:5d:97:
a2:16:7f:74:f5:2c:e8:11:fb:41:3c:b9:79:7d:bb:f1:5b:16:
76:2e:11:f3:84:dd:0b:01:57:66:6c:4b:fa:cc:b2:1a:13:c1:
5e:ae:07:49:6e:76:76:42:b1:7a:2d:38:18:c4:42:28:55:4b:
a3:ea:3e:db:5c:40:a0:43:46:eb:b1:43:30:95:3e:b6:10:cd:
e5:1e:56:30:a7:78:c9:2f:5e:01:3d:dd:25:25:dc:d7:4a:ca:
d5:26:c6:a3:9f:f8:e9:b5:8f:9f:25:f7:60:d3:28:d6:5b:bc:
c5:9a:34:a5:dd:45:7b:67:38:c3:20:2d:13:1c:97:a7:68:cd:
c7:cf:6c:e3:0a:31:04:9d:3c:e7:75:a4:d5:d8:9a:6e:72:d6:
5a:0b:01:a2:50:cc:bf:8a:60:c7:a1:0e:a2:a6:e7:2f:bc:44:
05:cd:0b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:18 2025 by rpki-client