Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa
File: EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa (raw, json)
Hash identifier: 6YJicTgp9qVMpWAlIAbPHHma7brtZhgeBhN6tMg/gfQ=
Subject key identifier: 12:C2:F9:BD:1B:C3:E8:7B:33:D8:07:35:04:EE:5D:1B:48:99:B6:21
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 0194258F487AEC5447A31F876E5003DB925D
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa
Signing time: Thu 02 Jan 2025 05:48:54 +0000
ROA not before: Thu 02 Jan 2025 05:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49936
IP address blocks: 85.159.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:48:7a:ec:54:47:a3:1f:87:6e:50:03:db:92:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 2 05:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c2f9bd1bc3e87b33d8073504ee5d1b4899b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:e4:a1:63:1f:0c:38:a0:c0:74:d6:84:eb:
06:fe:fd:5a:56:d0:32:60:4b:37:73:59:33:a2:85:
69:29:87:f3:42:be:f9:fe:47:fb:02:e6:ac:c7:e2:
35:38:60:9b:d5:2a:c8:70:4a:08:95:0d:86:32:c4:
69:08:d0:c9:48:a3:9c:b1:a9:51:67:20:85:00:87:
7b:89:07:62:99:67:f0:49:b9:d7:e3:b3:00:f0:71:
3f:4d:75:6e:46:56:3c:40:c9:48:0e:6a:42:0c:65:
20:24:8b:cd:9b:7f:65:c4:b4:58:9c:be:9a:ae:9b:
d6:31:4a:18:ca:8c:3e:eb:bc:91:cd:34:18:1b:fe:
9f:00:aa:80:f8:19:19:4f:de:2e:12:5a:2b:06:d0:
6d:b1:db:07:59:06:eb:a2:80:8b:2c:d4:5d:2a:77:
7b:bf:9e:ea:83:a3:ce:1b:2a:b1:69:2b:07:d3:a4:
4d:a0:9b:71:77:18:3d:64:b9:1d:4d:11:e3:d4:6f:
8a:e2:7c:df:4b:d3:63:eb:6b:0d:d5:21:b0:ca:a0:
b7:ad:0b:36:18:bf:36:92:84:3e:41:d5:d6:ca:48:
10:79:3f:05:07:23:c8:e1:a4:5d:1d:7c:b4:e3:38:
dd:e5:78:69:7a:53:82:87:bd:a7:d1:b9:d2:02:68:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:F9:BD:1B:C3:E8:7B:33:D8:07:35:04:EE:5D:1B:48:99:B6:21
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/EsL5vRvD6Hsz2Ac1BO5dG0iZtiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:64:f1:33:f5:99:13:4d:4f:b7:6f:ef:d5:46:43:09:94:20:
f6:4d:30:bb:db:f3:97:ca:92:4f:0c:c3:44:2b:c9:5a:77:b8:
a1:b7:11:81:ea:33:c3:ed:a0:9f:f2:ef:37:bf:dc:71:73:bd:
0a:0f:35:e2:b3:50:8d:d4:6c:c3:ad:f7:ae:0d:46:5b:01:16:
99:ab:eb:f9:18:85:95:5b:29:08:e9:f9:91:7a:b9:1c:e2:e6:
73:33:04:d6:6c:63:34:b2:4e:21:5d:e1:43:5c:ce:a2:59:7a:
3d:e8:ec:5c:9a:32:9e:9e:2d:e1:3c:49:ac:e0:2c:cf:27:cf:
33:d4:23:df:63:63:17:8f:ac:8b:3c:15:ce:1c:c5:d6:85:58:
dc:92:ee:59:13:f2:d5:39:f5:ea:08:53:07:51:bf:58:69:62:
67:0e:c5:04:ce:b0:58:18:34:fc:ed:41:02:2e:5a:e5:82:07:
c7:bb:0d:a9:9c:8e:0b:43:ac:d2:23:fc:0a:d4:57:37:d2:35:
2d:0e:49:59:96:7a:3a:46:5b:2f:c8:9c:ce:fd:ee:b8:1b:31:
ed:81:5a:82:7e:14:3c:13:1f:6f:1a:a7:e9:03:24:37:8d:6a:
e0:eb:48:85:6f:c9:27:83:f2:f4:4f:c3:2f:99:52:17:8a:89:
fd:cf:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:31 2025 by rpki-client