Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/eNqrwTVXkwV2eehov2BiD26ibTI.roa
File: eNqrwTVXkwV2eehov2BiD26ibTI.roa (raw, json)
Hash identifier: udLq0w8AI0t67Q1kVv/LIKA6aE1Zr7prABYVZQQ1D4w=
Subject key identifier: 78:DA:AB:C1:35:57:93:05:76:79:E8:68:BF:60:62:0F:6E:A2:6D:32
Certificate issuer: /CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Certificate serial: 019425219A986D6721EF759727EBC90663AF
Authority key identifier: EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/eNqrwTVXkwV2eehov2BiD26ibTI.roa
Signing time: Thu 02 Jan 2025 03:49:06 +0000
ROA not before: Thu 02 Jan 2025 03:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209220
IP address blocks: 2001:678:a38::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9a:98:6d:67:21:ef:75:97:27:eb:c9:06:63:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5e28c2eff3cf35c3c1cc3d67baa3df05055f99
Validity
Not Before: Jan 2 03:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78daabc1355793057679e868bf60620f6ea26d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:33:80:73:36:3d:d9:15:23:c3:cd:3c:20:
75:92:f5:1a:e0:a1:94:8d:d1:f6:dc:02:8b:4a:87:
4b:65:6e:99:36:12:d2:0f:ff:8d:1a:5a:0f:6f:70:
3b:04:0e:c8:01:47:f9:5a:d5:7d:18:70:4e:bc:0a:
c6:fd:c0:da:f8:90:e1:a6:79:23:86:4b:17:1c:2a:
af:ad:2c:bc:c8:15:50:ec:da:54:35:26:b9:0b:74:
16:d5:70:0c:8f:f9:33:0e:46:d7:a6:d7:44:74:c6:
d6:96:6b:39:dc:bd:67:8c:9b:10:75:dd:e1:6c:60:
71:ba:57:ce:45:bb:de:09:28:b6:f0:1b:69:67:11:
3c:06:95:3e:88:0c:bf:c2:5a:8f:85:31:c1:ba:e2:
db:01:2a:11:6d:f3:16:3c:d8:96:1e:e6:0c:11:d1:
23:2c:64:1b:5d:17:fe:96:29:3a:bb:cc:7f:5f:36:
ef:3d:ce:a5:1e:f3:80:ea:88:80:ad:f6:0f:cd:a8:
15:4e:26:bc:25:5a:f0:99:18:2c:c6:2f:23:51:86:
ef:37:ea:3b:9d:7f:ac:65:02:e9:53:be:bc:64:a5:
c7:21:99:23:23:1e:79:28:55:13:eb:b8:42:85:2e:
c0:b2:72:e1:4f:3f:44:32:c0:e5:7d:36:ba:9a:1a:
fe:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:AB:C1:35:57:93:05:76:79:E8:68:BF:60:62:0F:6E:A2:6D:32
X509v3 Authority Key Identifier:
keyid:EB:5E:28:C2:EF:F3:CF:35:C3:C1:CC:3D:67:BA:A3:DF:05:05:5F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/614owu_zzzXDwcw9Z7qj3wUFX5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/eNqrwTVXkwV2eehov2BiD26ibTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/798623-6dbe-4688-a465-cec265ddac47/1/614owu_zzzXDwcw9Z7qj3wUFX5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a38::/48
Signature Algorithm: sha256WithRSAEncryption
5a:54:55:42:19:17:d3:d0:28:f5:80:4a:9f:3d:a6:2c:6e:64:
c9:6f:87:3d:fd:f0:36:4b:dc:a6:a8:79:2b:87:47:2b:dc:37:
b2:1c:1e:11:36:2f:c7:27:00:88:79:da:5d:5b:91:1a:a3:a9:
4e:6d:22:55:b0:65:29:ac:0c:07:41:49:f2:6c:48:25:bd:c6:
74:a8:08:87:d6:28:d6:21:94:2c:89:e0:56:c1:9e:16:a1:4f:
d8:7a:a7:b6:44:3c:c1:47:ea:c9:1b:e6:3c:10:f9:c2:02:5d:
0d:09:b3:e4:de:10:f5:b1:76:81:4c:65:d2:db:f0:e9:8d:d9:
6b:ff:1e:3c:00:a1:c0:27:23:d5:ae:82:66:e9:5a:1a:a2:f3:
82:50:72:14:b2:f7:c6:39:1e:9c:03:c3:b7:ce:dc:93:cf:99:
85:fc:ad:b5:0c:90:48:0f:ff:0b:cd:1b:80:79:5c:83:60:17:
2e:59:b1:99:74:bb:3d:6b:4c:a9:ac:d5:f9:7f:22:f4:14:30:
e8:a4:a5:82:38:e0:fd:34:b1:88:42:85:65:65:10:45:63:0a:
ce:1a:11:e0:50:d0:4d:be:26:be:01:7c:e9:c7:2a:d5:1f:2c:
a7:0f:54:b0:82:3f:7a:64:75:37:7b:b7:c7:cb:4f:5c:eb:7b:
42:02:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:16:22 2025 by rpki-client