Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EIMfnMFml7RCkxyo4CxwwBDEyD8.roa
File: EIMfnMFml7RCkxyo4CxwwBDEyD8.roa (raw, json)
Hash identifier: jltiT9WIDS+Fkxpj9t+Lq05pa5hluilpsJBgVxxhicc=
Subject key identifier: 10:83:1F:9C:C1:66:97:B4:42:93:1C:A8:E0:2C:70:C0:10:C4:C8:3F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B24FEE99D4003E7310089A618654BC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EIMfnMFml7RCkxyo4CxwwBDEyD8.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 5.180.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:ee:99:d4:00:3e:73:10:08:9a:61:86:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10831f9cc16697b442931ca8e02c70c010c4c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:1b:7b:3a:1d:77:6e:0a:7f:8b:37:74:dd:
28:43:e6:97:dc:16:76:97:7f:46:bf:8e:df:b6:14:
c1:aa:91:74:07:d1:20:36:9a:72:b8:9c:b1:a7:f0:
7b:aa:55:1f:81:93:ab:70:e1:4b:70:ce:9b:01:13:
c7:18:ac:e4:58:3e:5c:11:73:56:c5:5e:42:63:44:
31:27:20:1d:f4:93:bc:8a:1d:f0:6d:8f:e3:6b:be:
77:c1:7d:27:dc:ea:cb:8d:71:a6:1f:54:81:5e:a6:
c6:c2:1a:5a:bc:0d:02:aa:23:f1:2f:d1:3f:fe:e1:
c2:50:bc:59:f2:0e:01:8d:f6:46:14:23:41:60:95:
fa:c9:19:ae:be:39:0d:9f:cd:98:1f:a7:6c:e6:10:
31:43:79:57:af:2e:4d:13:12:06:eb:dc:fb:4b:6e:
dd:a4:4e:ef:d2:9c:15:52:35:1f:12:8c:a4:08:76:
42:08:fe:7e:9f:12:31:e3:77:26:ce:ee:be:4c:ee:
99:e2:b2:de:c2:7c:ae:7d:d1:26:b2:58:51:97:c8:
33:c7:6a:1a:73:1e:93:3c:1b:6a:37:ab:83:42:6f:
29:6f:db:63:45:e4:06:91:12:40:54:61:e0:c5:27:
5b:39:81:ca:ee:8e:ee:09:a9:a8:d5:3e:8d:b7:a5:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:1F:9C:C1:66:97:B4:42:93:1C:A8:E0:2C:70:C0:10:C4:C8:3F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EIMfnMFml7RCkxyo4CxwwBDEyD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.82.0/24
Signature Algorithm: sha256WithRSAEncryption
75:66:bc:3d:bd:be:3c:a3:93:b7:93:9e:48:08:79:5b:16:3b:
6e:b6:ca:d9:2b:b2:b7:e6:6f:12:6f:ee:51:8c:b2:b9:14:91:
16:33:59:4a:6a:d9:90:45:13:04:5f:f0:00:f2:6a:7f:f2:72:
2a:cd:bb:ad:b3:d8:81:bb:f4:5c:98:ff:d2:45:21:c1:b1:c5:
41:34:c1:ed:d4:0f:47:e6:6b:9d:c3:42:e5:73:1e:d1:de:00:
c6:04:75:ab:df:4e:d3:fc:33:d2:ae:15:c7:53:b7:36:4c:8c:
89:a1:fa:52:66:8b:54:e3:68:34:82:a4:10:57:af:8c:55:c4:
3b:fb:be:3b:7f:a9:98:c7:8b:ea:78:11:6e:3d:f3:08:f1:ae:
60:a6:fb:a2:29:72:90:94:d8:f8:5f:80:af:f2:df:27:bf:21:
38:f9:db:29:99:40:c4:1a:ea:42:f7:15:20:89:41:b2:a3:4e:
5e:dd:b8:30:f5:08:08:dc:11:77:8c:1d:06:9f:71:d3:62:e9:
c4:c8:80:90:4c:37:96:46:0f:ab:05:da:3a:b1:a9:17:6a:00:
db:8e:ce:d2:56:12:48:66:1a:2f:17:0a:c9:6d:e1:15:a4:45:
b4:75:1e:79:84:49:27:8d:a4:23:43:79:cd:39:06:1f:99:e4:
bf:09:ec:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:41:48 2025 by rpki-client