Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/eb-heUaDZ_codDy_g1my71P0p7Y.roa
File: eb-heUaDZ_codDy_g1my71P0p7Y.roa (raw, json)
Hash identifier: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=
Subject key identifier: 79:BF:A1:79:46:83:67:F7:28:74:3C:BF:83:59:B2:EF:53:F4:A7:B6
Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Certificate serial: 019427B5BEA2E42440D1D15F54451A0B1906
Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/eb-heUaDZ_codDy_g1my71P0p7Y.roa
Signing time: Thu 02 Jan 2025 15:50:09 +0000
ROA not before: Thu 02 Jan 2025 15:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 559
IP address blocks: 185.144.36.0/22 maxlen: 22
193.134.216.0/21 maxlen: 21
2a07:3e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:be:a2:e4:24:40:d1:d1:5f:54:45:1a:0b:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79bfa179468367f728743cbf8359b2ef53f4a7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:d4:d2:84:71:3d:b3:c8:55:ac:04:b4:a7:
53:af:99:0d:ca:b1:33:e8:f8:a0:69:90:4c:b8:a4:
dc:7c:4d:ab:d3:ed:7a:aa:80:f0:1f:32:01:02:98:
fa:73:5a:04:24:14:1c:0e:ab:44:86:62:d4:85:d7:
b9:38:8c:ad:ba:0a:9e:7e:c8:7a:af:19:8c:cf:c6:
be:62:4b:64:a1:db:f3:a6:9e:18:c2:bc:51:47:a2:
e6:26:75:7e:7f:a9:6b:18:35:41:43:88:4e:2b:30:
2a:2c:26:dd:1f:98:9a:bf:e7:9b:50:9e:87:fb:17:
98:24:c7:e0:ef:0b:50:34:2a:67:4e:88:e9:22:46:
2e:9c:1b:08:04:c3:16:0e:35:bd:45:62:c6:0d:3f:
2b:2c:54:f4:9d:d4:d5:6f:f9:f0:ac:8a:77:47:a6:
0a:4f:c6:48:87:d6:98:92:3e:25:f7:ea:24:dd:c1:
5c:75:48:74:17:07:17:8d:63:81:b0:99:a5:d1:eb:
74:fc:fe:b2:54:79:62:b5:2f:dc:c3:98:78:27:54:
f7:af:88:99:23:f2:6f:a2:e4:fa:d1:43:c6:05:52:
7e:a1:ab:1b:f2:13:67:d3:21:c3:ec:a9:6e:51:e9:
8a:ce:cd:76:db:5c:76:fe:18:e1:09:07:3c:db:f5:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BF:A1:79:46:83:67:F7:28:74:3C:BF:83:59:B2:EF:53:F4:A7:B6
X509v3 Authority Key Identifier:
keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/eb-heUaDZ_codDy_g1my71P0p7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
IPv6:
2a07:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
84:ce:0b:8c:7f:cd:39:3b:cb:c8:01:5d:04:6e:c1:05:72:a4:
42:57:89:99:50:e8:84:ac:6c:0c:04:82:82:e8:99:e0:74:6d:
11:02:ff:6a:c9:e4:95:31:23:de:13:25:73:c4:83:07:9a:0e:
6a:50:85:1a:c8:90:1b:4b:bb:14:31:45:44:4a:bb:2f:fd:ec:
8b:00:5b:ed:91:49:5d:22:a0:56:22:fb:41:7f:e6:fe:bd:f9:
66:06:5b:4a:ef:34:ad:17:6f:7d:a6:50:d8:e0:8d:5d:6d:39:
8d:ec:5a:49:5e:d2:40:79:f8:49:e5:ae:29:87:ea:d1:84:ca:
fb:3e:50:ea:9b:aa:87:3a:2e:68:05:e6:f2:f2:24:69:43:02:
d7:37:30:3a:df:c4:01:61:79:99:b5:3e:b6:62:0b:2e:45:f0:
81:7e:8f:4a:6e:7c:5e:eb:db:8b:cb:d7:45:79:ac:e3:30:ec:
75:24:a5:f1:0c:0c:9e:21:dc:39:d3:67:c6:a8:6f:90:21:e8:
c0:2a:8f:be:d2:21:67:44:31:06:b2:4a:fa:32:26:ca:0e:27:
2a:90:23:b8:66:ee:bf:39:a4:dd:35:a1:b7:6c:b2:5f:65:84:
88:b9:7b:55:63:b5:77:57:b6:2e:d0:c1:da:2b:26:f2:b9:fe:
dd:43:67:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:24:20 2025 by rpki-client