Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa
File: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (raw, json)
Hash identifier: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=
Subject key identifier: 7A:EC:4E:8B:D5:E9:DE:7E:C0:CA:24:9F:08:43:FE:C4:EB:FD:84:3A
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01942368F688C961642A9ED5659666DEB652
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa
Signing time: Wed 01 Jan 2025 19:47:48 +0000
ROA not before: Wed 01 Jan 2025 19:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202425
IP address blocks: 92.63.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f6:88:c9:61:64:2a:9e:d5:65:96:66:de:b6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aec4e8bd5e9de7ec0ca249f0843fec4ebfd843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:93:8e:39:d1:b5:a1:24:ca:74:e5:fb:d9:
f6:84:ae:4e:84:bb:f0:be:7b:2f:48:c5:02:e1:f0:
ac:ec:20:87:21:1f:5c:d7:59:50:b0:af:26:f9:6c:
fa:a2:c5:86:31:60:10:0b:7c:21:36:3a:72:0c:6b:
1f:cf:81:5c:59:6e:a3:ae:b8:58:6d:a1:ab:9f:ed:
b6:a2:e7:15:d6:1b:e1:84:4d:54:de:c0:7c:d3:a4:
4b:ad:45:47:15:dd:63:a1:ef:59:7a:1a:1d:63:d8:
9b:96:5b:0a:08:cb:b6:f3:3d:23:20:2f:a2:24:ee:
f4:f2:8d:82:24:e5:5f:5a:e6:a9:d3:dc:af:ed:e6:
99:b1:15:a7:83:39:0f:01:09:10:b5:8a:4a:0a:17:
16:d8:17:8f:84:c5:dd:a2:c9:dc:89:29:eb:07:2d:
39:dc:06:35:2a:a9:36:7c:d2:96:bb:41:8d:16:83:
eb:63:ee:4e:cb:d6:58:46:cf:f2:77:03:d3:41:3e:
a0:ec:34:40:ad:60:41:40:8a:1a:45:40:28:e9:ea:
1c:41:d7:75:f1:eb:61:d0:b3:a6:7e:99:ce:21:a4:
51:a7:46:cc:64:b3:b2:a4:2e:0e:32:2c:cd:80:7a:
4a:d3:19:69:aa:90:1c:b5:56:e9:fb:07:75:1f:40:
08:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:4E:8B:D5:E9:DE:7E:C0:CA:24:9F:08:43:FE:C4:EB:FD:84:3A
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.196.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5b:13:cc:3f:f8:9f:3e:3a:d3:4c:cc:1d:1f:98:49:15:13:
34:68:4d:bc:5f:4c:e7:ed:a0:76:b5:57:78:fa:c9:5e:98:1b:
d7:dd:68:fa:0d:8b:47:db:03:7e:1e:41:b4:ba:b5:f7:54:0f:
76:a5:2f:a5:fe:15:03:69:19:8d:e1:d5:d4:37:8e:ed:73:61:
4e:2b:db:ef:7e:e9:3c:c1:63:15:7a:5a:45:4c:22:b2:65:3f:
2b:fb:73:b1:24:6f:a8:e5:54:cc:86:0b:d7:b9:d5:90:7c:4d:
d3:6f:c8:08:6f:66:64:fd:fd:5f:18:c8:3d:b7:22:9a:bb:ee:
cc:02:1a:88:07:51:e7:85:67:f0:9d:d5:fe:c7:fd:f0:61:7e:
ff:07:e8:9d:75:1a:be:5c:e0:52:91:92:8e:dd:71:fe:47:95:
46:1c:88:f2:e7:28:b5:1b:93:5f:c6:84:92:c1:69:21:f6:d6:
1a:1f:d1:da:4c:fb:92:6c:fc:46:85:bb:9b:8c:cf:f2:20:91:
87:20:c2:35:54:f2:ae:c7:a8:cb:d6:e1:7d:59:f9:52:1f:bd:
78:12:07:48:98:15:80:a2:28:e8:f9:4e:6a:1a:fb:1e:1e:3f:
f6:04:0c:06:a3:3b:9d:db:41:49:95:c7:c0:e1:b7:aa:5f:21:
fa:ff:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:18:32 2025 by rpki-client