Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ee9x8306_3demK5yhQe5QJ-WSQQ.roa
File: Ee9x8306_3demK5yhQe5QJ-WSQQ.roa (raw, json)
Hash identifier: B2Cypp42Rf7LF9t/1fXH8RPq9vVGyB70kwpdWq/epwk=
Subject key identifier: 11:EF:71:F3:7D:3A:FF:77:5E:98:AE:72:85:07:B9:40:9F:96:49:04
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F8346F1644750C23D4740F8AD592
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ee9x8306_3demK5yhQe5QJ-WSQQ.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198202
IP address blocks: 46.249.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f8:34:6f:16:44:75:0c:23:d4:74:0f:8a:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11ef71f37d3aff775e98ae728507b9409f964904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:ba:36:ec:48:96:4c:04:a7:c3:58:e5:06:
c3:bc:46:5a:d9:49:4a:c5:b3:df:a7:96:20:81:23:
14:3b:24:35:8b:8f:50:a0:08:f2:40:4d:88:b4:6c:
fb:af:4b:2b:b3:cf:14:36:9f:97:8d:1f:a3:1d:d1:
40:a0:c5:b0:a6:3f:5f:bf:94:24:9c:2b:99:0f:05:
70:c3:31:54:c7:ef:e3:81:80:af:ff:af:32:a3:38:
6f:85:ee:07:49:92:f7:8f:09:e6:3a:61:44:5a:6d:
5b:bc:45:58:ef:c6:9e:93:99:51:cf:2e:20:d1:bb:
d0:af:c1:b4:42:37:3f:f4:db:5f:68:da:be:79:7a:
7d:da:91:cb:77:b7:d1:e1:bd:2c:87:20:14:7e:1e:
8b:6c:64:b6:9a:d8:5d:a4:19:12:f9:48:17:96:36:
93:00:d8:77:db:c7:42:84:3a:08:e5:92:d4:ae:9f:
79:55:87:b6:1a:4b:b4:e2:d1:28:61:8f:9a:55:a6:
d9:99:35:49:9c:ef:d0:c2:3a:7f:00:61:d8:d9:cd:
31:fe:f6:2d:41:d5:58:b3:73:a6:29:33:a9:60:41:
c0:44:8a:6a:34:dd:b0:ab:f2:84:21:ee:e0:93:5d:
62:91:18:62:4a:03:10:26:92:4b:63:4b:e1:a7:c5:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:71:F3:7D:3A:FF:77:5E:98:AE:72:85:07:B9:40:9F:96:49:04
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Ee9x8306_3demK5yhQe5QJ-WSQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.94.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:3c:04:ba:e7:85:d9:c3:50:d0:fb:da:7b:f0:cf:67:ae:80:
cd:5a:30:78:94:49:13:47:09:83:b2:4d:6e:2b:bf:d4:4f:f9:
86:f5:48:1a:cc:d2:f4:cd:cf:52:4b:e0:9b:06:48:83:c0:93:
4c:f0:27:3b:45:3f:67:38:76:5a:ba:16:4c:98:a4:8d:75:ff:
44:d5:b2:5c:40:34:89:2e:4f:7b:b0:af:c4:13:8f:34:6a:9c:
53:ea:c5:2e:c9:0a:bd:ff:f7:fd:c3:9e:63:9e:7d:7f:cf:b9:
e4:c3:6a:ee:65:52:58:1e:ed:63:5c:e8:2d:b6:a1:05:99:fd:
bc:af:ea:b8:cb:8d:7a:0f:e8:92:a7:f6:2c:02:94:6b:7a:1a:
3b:f3:f1:0d:4e:3c:a6:fe:e5:94:cf:ae:29:fd:e4:c5:8f:4b:
68:06:42:2e:7b:ae:03:b7:88:3a:86:73:ce:32:ba:b6:df:67:
58:d7:5c:66:a4:ec:b5:fa:28:d1:21:7c:50:cd:0f:89:60:00:
16:ae:ae:81:0d:1d:62:55:12:75:75:5f:34:ce:15:6c:3a:8c:
54:4a:2c:09:35:dd:4e:12:b0:d3:20:68:83:36:e2:2e:86:ed:
e0:67:17:9a:00:e2:b4:81:de:82:ab:6f:c7:34:98:bd:50:fa:
4b:7c:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:16:42 2025 by rpki-client