Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa
File: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (raw, json)
Hash identifier: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=
Subject key identifier: 79:2A:7C:00:8D:54:67:56:47:1B:5B:B6:05:C7:C3:92:4A:5E:3C:23
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 019424448D918C4D70094C2E2DD46F2A0678
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201017
IP address blocks: 145.219.0.0/21 maxlen: 21
145.219.6.0/24 maxlen: 24
145.219.8.0/21 maxlen: 21
145.219.8.0/24 maxlen: 24
145.219.9.0/24 maxlen: 24
145.219.10.0/24 maxlen: 24
145.219.11.0/24 maxlen: 24
145.219.12.0/24 maxlen: 24
145.219.13.0/24 maxlen: 24
145.219.14.0/24 maxlen: 24
145.219.15.0/24 maxlen: 24
145.219.16.0/23 maxlen: 23
145.219.16.0/24 maxlen: 24
145.219.17.0/24 maxlen: 24
2a04:b0c0::/44 maxlen: 44
2a04:b0c0::/45 maxlen: 45
2a04:b0c0:8::/45 maxlen: 45
2a04:b0c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8d:91:8c:4d:70:09:4c:2e:2d:d4:6f:2a:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=792a7c008d546756471b5bb605c7c3924a5e3c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:0c:83:68:29:06:12:e6:cc:a7:03:d6:79:
e7:d2:44:8b:2d:c7:03:aa:75:47:c9:da:70:0c:a8:
bc:7e:46:02:0b:89:2f:22:c6:30:26:68:5c:60:ca:
be:ab:13:b6:85:b7:06:98:9f:81:52:e7:30:17:30:
a0:f4:21:9e:74:37:f5:c5:54:df:0f:ca:5b:de:60:
25:ea:a8:06:6d:4b:0e:06:f6:2e:3f:43:b2:14:78:
9f:7a:9f:47:d7:44:a5:aa:35:c0:ba:04:62:cf:98:
2d:cb:e5:62:54:89:5e:1c:ec:38:14:92:46:ac:f2:
67:1c:17:58:ee:91:00:5f:36:6f:b0:16:e4:2a:ac:
32:ce:38:32:c0:16:ce:a5:86:95:34:77:3c:7d:fb:
74:eb:c7:8f:75:91:88:12:ce:98:2e:3d:5c:e4:59:
ff:10:a5:bc:5f:ce:a9:62:a4:8c:00:d1:c2:3a:41:
4d:44:cf:b6:cc:fc:52:ac:f8:be:71:93:ce:58:e1:
59:ee:1b:15:a9:0b:cb:36:6a:21:41:69:fb:48:15:
a8:8f:f5:a1:6c:8a:62:6e:3f:cb:3e:c0:76:a1:e1:
ea:68:14:38:2d:8b:41:17:85:b9:16:35:48:19:62:
e0:3a:fa:c1:56:c7:4b:14:81:2b:f7:34:6c:23:44:
97:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2A:7C:00:8D:54:67:56:47:1B:5B:B6:05:C7:C3:92:4A:5E:3C:23
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.0.0-145.219.17.255
IPv6:
2a04:b0c0::/44
2a04:b0c0:31::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a7:a7:fa:fe:08:aa:aa:9c:ed:30:a0:c9:51:54:3a:9b:28:
0b:93:13:b5:0d:ae:da:35:59:a2:95:ee:c0:3c:af:c5:99:1c:
24:af:93:b3:21:b3:84:8d:a7:33:cd:72:f8:b9:4a:5b:81:0e:
3e:0f:2a:5e:1f:09:de:19:e5:dd:de:da:fa:85:47:db:ed:d9:
d0:6d:9f:06:fb:21:e8:46:5d:99:e5:b2:3e:f4:7d:5e:8d:11:
9f:15:b9:ad:2a:b8:36:be:46:85:ae:b0:24:36:da:84:dd:f2:
5a:c6:41:7a:49:44:c7:b0:54:54:4a:46:84:96:b5:26:70:1a:
3c:be:83:3d:64:6d:0d:a2:48:46:b4:ae:b7:b4:8d:2b:d7:39:
97:23:64:02:43:81:79:d8:15:f2:f7:c2:c3:78:ec:e5:f0:46:
24:fd:47:01:57:61:5f:7b:5a:4c:1d:ba:7c:58:e6:64:77:7f:
7b:86:a3:c3:c1:07:d4:fa:cc:45:86:3a:ec:06:3e:17:40:9f:
66:37:8e:aa:f9:bb:39:3d:e2:81:99:ea:d5:0a:93:91:ed:27:
af:ca:75:70:68:92:7b:0e:ac:c2:dd:30:ef:ae:d2:36:bf:94:
c2:e3:dc:d9:6e:50:ca:21:d9:b5:36:b1:73:a8:61:3c:d3:2e:
73:d6:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:30 2025 by rpki-client