Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/eEP1VypyuqVxmlLrgaA9LlVwYK4.roa
File: eEP1VypyuqVxmlLrgaA9LlVwYK4.roa (raw, json)
Hash identifier: 5dvQLaqP0vbYafUJXNT7sKTWbRstUgrMUzxGvHU5Rgc=
Subject key identifier: 78:43:F5:57:2A:72:BA:A5:71:9A:52:EB:81:A0:3D:2E:55:70:60:AE
Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35
Certificate serial: 019426D97FFFD6FCDAB3946859D18E37545C
Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/eEP1VypyuqVxmlLrgaA9LlVwYK4.roa
Signing time: Thu 02 Jan 2025 11:49:35 +0000
ROA not before: Thu 02 Jan 2025 11:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58207
IP address blocks: 31.129.124.0/24 maxlen: 24
195.16.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7f:ff:d6:fc:da:b3:94:68:59:d1:8e:37:54:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35
Validity
Not Before: Jan 2 11:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7843f5572a72baa5719a52eb81a03d2e557060ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:c3:3b:53:57:b6:77:56:85:0b:67:9e:f4:
30:6f:c6:a3:a7:21:ad:bd:ae:c0:48:81:22:00:57:
47:c1:91:b8:6d:64:79:35:50:a2:70:14:d1:64:85:
65:fc:e5:77:17:36:b5:95:a6:cb:c8:6d:9c:59:57:
b0:55:71:79:12:0e:fc:4d:2e:66:7f:c2:85:06:84:
d0:c5:a2:13:5e:60:06:9c:20:8f:be:de:9f:d4:6f:
b7:63:f6:7b:a5:50:21:b4:2c:23:6b:d0:78:ee:a6:
93:0e:ad:42:42:95:51:87:d9:93:33:02:f4:f8:50:
4e:c0:ca:f2:7c:5a:0d:c2:18:d6:ed:71:64:66:17:
9b:f4:c5:b2:4d:c9:0e:61:de:24:94:41:46:58:fb:
92:49:b4:49:a0:1d:51:a6:7f:08:57:07:47:9f:a5:
17:6d:cf:14:0c:6b:1e:50:43:ef:b1:ab:b5:23:c7:
a8:dd:cf:a0:e1:01:df:27:be:32:2f:5d:c9:5b:1e:
bd:49:7e:f3:1e:c4:4c:df:08:7e:64:c3:99:b1:95:
47:2b:1b:b9:cd:3c:ad:0b:5f:59:7c:17:b2:01:62:
d2:13:2d:78:ad:c2:24:28:45:7d:15:a6:07:6d:6e:
3b:44:c1:94:96:92:21:4c:b4:99:8e:5d:16:d7:5f:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:F5:57:2A:72:BA:A5:71:9A:52:EB:81:A0:3D:2E:55:70:60:AE
X509v3 Authority Key Identifier:
keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/eEP1VypyuqVxmlLrgaA9LlVwYK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.129.124.0/24
195.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
09:43:66:7b:93:ac:d6:9b:b0:f8:ee:37:a1:f0:c2:d0:96:4c:
42:b5:7c:cc:b8:91:90:94:a1:9f:cb:68:9a:be:6c:09:ea:51:
32:2a:ff:da:98:e5:e3:87:09:d8:a6:f4:4a:22:5e:a7:5a:a5:
99:e9:d4:1b:5a:a6:e5:66:84:0a:01:41:fe:24:23:de:95:43:
80:d0:46:ac:a9:6c:93:0c:60:89:f3:86:af:04:0e:a5:d1:99:
c1:12:51:7e:fc:cc:83:4f:5c:1b:0e:8c:97:0d:bf:8a:0b:d9:
88:96:93:01:69:08:34:a3:69:e0:dd:f5:53:75:d7:62:30:0b:
4a:92:8c:4c:b9:92:a9:c7:8a:ae:ce:1a:04:97:6e:a9:0a:a6:
ee:cc:4f:e4:99:9b:09:e9:ab:29:ed:6d:0b:5d:4b:da:a9:53:
f2:54:14:da:7e:3f:02:be:2f:17:6b:17:7f:7e:60:67:d2:13:
48:14:87:93:68:90:79:0d:d3:03:85:a1:7b:9e:61:b1:05:f6:
19:24:8a:02:76:90:6a:e6:d0:29:7c:ed:c6:52:f1:ee:82:ca:
6c:82:7e:cb:8e:f2:34:b8:c4:09:a8:d5:f9:3f:b5:81:3d:44:
65:8f:26:04:fd:22:02:fb:2c:3c:87:5e:a6:24:3d:b6:0e:e9:
70:15:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:43:42 2025 by rpki-client