Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa
File: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (raw, json)
Hash identifier: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=
Subject key identifier: 12:30:24:6B:43:73:AF:81:BD:61:57:07:05:70:9C:F4:10:27:0F:45
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0194266B563C259BF9BDE4726C46E96096B8
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa
Signing time: Thu 02 Jan 2025 09:49:16 +0000
ROA not before: Thu 02 Jan 2025 09:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25206
IP address blocks: 46.35.170.0/23 maxlen: 24
95.158.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:56:3c:25:9b:f9:bd:e4:72:6c:46:e9:60:96:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 09:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1230246b4373af81bd61570705709cf410270f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:56:eb:fb:a1:4a:fc:0e:ea:dd:f5:db:50:
f9:85:dd:a8:b5:42:2b:b1:f6:11:03:16:8c:9c:ba:
63:bf:b2:2b:e6:92:9a:1c:04:8c:b2:24:c3:60:c6:
01:7a:07:cf:98:f2:73:16:c2:b4:e5:d6:90:c4:49:
aa:84:15:9a:5c:38:8b:a4:ba:f4:62:ba:0d:cf:b4:
b6:e2:4a:1a:e5:04:63:59:96:87:3a:e1:9d:56:57:
97:63:72:a7:c5:36:26:fa:9f:43:30:13:22:41:74:
3e:77:84:8e:1e:02:c5:9a:e6:f0:95:b8:62:f2:27:
28:08:0d:3c:d8:b5:5d:f3:84:7b:41:16:ce:83:04:
ef:47:a8:6c:4e:45:dc:8a:8f:ac:50:30:c6:45:53:
32:ba:20:a0:5b:7b:d3:f1:6a:7e:9d:32:8a:a5:83:
62:75:ca:f6:50:d0:1e:05:4b:b6:91:0b:29:c9:62:
66:13:9f:17:3c:a9:90:14:1b:06:49:c7:94:e5:09:
de:e9:6a:f9:31:81:db:5e:21:af:d6:d7:07:0f:64:
a0:af:ff:f5:9f:63:7d:b3:2b:b7:48:71:0f:84:6f:
9e:6c:87:0b:c6:37:ee:0c:cc:8d:f4:dd:d4:d1:3e:
83:0a:7b:9b:70:20:0a:06:3d:f8:8b:f0:6d:a9:96:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:24:6B:43:73:AF:81:BD:61:57:07:05:70:9C:F4:10:27:0F:45
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.170.0/23
95.158.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fd:ee:af:5e:8e:44:7f:14:ef:23:8e:98:95:0a:fd:2e:5d:
82:64:9c:2d:c9:34:a4:71:7e:d2:31:e2:dc:9a:c4:02:e6:e3:
48:54:b8:0c:7a:20:de:92:56:7c:7f:ba:ac:3a:16:50:a3:83:
99:e5:da:c4:31:cc:a6:dd:a3:17:7e:36:83:33:7f:f2:a3:20:
c2:3c:dd:42:43:ad:6e:d3:2a:b7:c6:63:d0:98:09:89:51:07:
6d:09:b1:bc:7c:3d:c6:b8:2a:e4:07:b6:19:c4:73:bc:be:4c:
0f:05:19:64:2c:fb:ea:bb:a7:8c:df:ab:0d:c8:d7:8f:a2:ec:
00:4c:74:f2:b0:00:75:90:c8:ee:94:c1:b8:a3:46:50:f5:2b:
97:29:ff:f4:22:e5:fe:39:b6:ef:d2:be:ae:3d:64:63:e2:97:
98:54:81:3c:52:3c:c3:78:41:d8:7d:1b:b8:40:2d:25:a6:08:
c6:63:20:c4:98:74:da:d2:ba:87:c8:92:b8:fa:4f:33:22:12:
e1:af:45:1f:69:bb:02:94:de:bf:ad:68:8b:47:d0:e6:38:d7:
5a:d4:00:0e:c6:8a:b5:58:9f:cc:b3:6b:98:8e:22:43:f0:a2:
3c:94:fe:21:6d:b4:16:ad:3f:67:71:e8:25:36:18:6d:98:25:
55:28:17:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:57:42 2025 by rpki-client