Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/eKGme1_RE2Cve029wfoTPnjkx8E.roa
File: eKGme1_RE2Cve029wfoTPnjkx8E.roa (raw, json)
Hash identifier: 7e5ken09Fa398flHkK+xPpARVfWAIKVd53mQhTUCt6w=
Subject key identifier: 78:A1:A6:7B:5F:D1:13:60:AF:7B:4D:BD:C1:FA:13:3E:78:E4:C7:C1
Certificate issuer: /CN=621b8e486eecae6124de10494fd39139ed4a37cb
Certificate serial: 0194258F3A2426CCB4C6FB4C6E24B4E4DFE7
Authority key identifier: 62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/eKGme1_RE2Cve029wfoTPnjkx8E.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30900
IP address blocks: 185.176.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:3a:24:26:cc:b4:c6:fb:4c:6e:24:b4:e4:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621b8e486eecae6124de10494fd39139ed4a37cb
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78a1a67b5fd11360af7b4dbdc1fa133e78e4c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:58:11:36:b5:a8:2e:49:6e:fc:ce:0c:8e:
91:60:06:24:a5:e0:32:2d:d0:67:62:84:d9:d9:c8:
76:1c:4a:c1:fd:7c:c7:8b:8e:a6:fb:69:db:81:85:
b2:bb:58:e9:c5:39:f3:6e:be:8a:56:23:b2:78:ec:
25:27:1a:5b:41:0f:c9:a9:d7:af:df:84:42:8e:97:
63:60:ab:ce:79:d0:af:a7:ce:10:d9:0d:d7:00:03:
d3:04:e2:e8:f5:45:b5:99:6f:ea:e7:d7:a1:ad:6e:
21:65:b0:a0:5b:39:e0:b8:6d:ad:eb:4e:e7:4e:f1:
c2:78:3c:92:96:7e:01:3f:93:ec:c3:bf:06:6b:e5:
c9:3c:68:0e:8e:d2:da:e0:14:f1:e2:8f:50:85:7e:
88:26:c9:c2:3c:42:6d:34:2e:17:60:78:6e:f1:5c:
1f:64:6f:08:e4:e4:ca:85:4e:c5:09:f4:1a:a9:55:
ff:e9:82:cb:a9:55:74:2a:9d:81:b7:ef:f9:f3:8d:
28:7a:57:4c:da:7f:97:52:ab:f2:ee:4a:d2:95:11:
bf:64:0f:2b:fa:de:81:cc:16:fb:ff:e7:ef:86:db:
a0:e3:ac:93:77:91:4b:12:28:cf:7f:43:09:1b:20:
a5:e1:5c:07:b7:f3:ec:79:34:86:0e:8a:03:3b:4a:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:A6:7B:5F:D1:13:60:AF:7B:4D:BD:C1:FA:13:3E:78:E4:C7:C1
X509v3 Authority Key Identifier:
keyid:62:1B:8E:48:6E:EC:AE:61:24:DE:10:49:4F:D3:91:39:ED:4A:37:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhuOSG7srmEk3hBJT9OROe1KN8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/eKGme1_RE2Cve029wfoTPnjkx8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/54213d-c3ed-4d67-b9bf-7ba136f51ef9/1/YhuOSG7srmEk3hBJT9OROe1KN8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.128.0/22
Signature Algorithm: sha256WithRSAEncryption
10:97:74:98:4c:ea:21:d4:8a:34:3c:11:93:3a:9a:54:e2:53:
fd:a4:f4:89:aa:8f:97:07:df:3c:f0:ed:40:12:6a:0c:8b:bc:
a0:70:ee:3a:c9:d3:8c:b4:f2:a9:d1:00:0d:c4:7b:be:26:b5:
fa:a0:71:16:4d:66:5a:90:2d:40:88:22:a1:dd:8e:45:ab:c6:
92:4b:d5:c4:5d:9c:93:2e:d5:3e:0b:d4:8f:aa:67:76:ad:85:
b1:ed:d7:8b:43:7f:a2:9d:b3:29:36:76:42:84:f1:a6:01:9a:
14:aa:ea:a3:47:75:db:10:f3:e0:a8:39:42:74:46:bc:ab:32:
4f:83:dc:d0:7c:66:eb:0b:9d:3c:02:ec:f0:a6:a0:ad:cf:fa:
ba:8c:cc:bc:78:95:db:5e:c3:eb:45:44:80:78:5d:4d:3d:d4:
e9:41:1e:17:72:b6:63:72:80:63:9a:4e:21:80:ec:36:89:3f:
3f:c8:49:89:c2:a7:dd:27:70:60:af:5f:19:21:a2:4b:e5:53:
3c:b5:78:dd:54:91:07:40:cc:ac:67:52:31:9b:d0:52:f0:4c:
a6:7c:03:30:0f:fe:a5:2a:66:c1:a3:2a:2f:15:53:35:4f:f6:
d2:1d:7f:7a:1e:75:9b:80:1d:23:8a:8f:72:bd:9b:5a:f5:74:
cb:4a:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:08 2025 by rpki-client