Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/EdyN193XAqCuwUeh3uoqwgMp6YM.roa
File: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (raw, json)
Hash identifier: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=
Subject key identifier: 11:DC:8D:D7:DD:D7:02:A0:AE:C1:47:A1:DE:EA:2A:C2:03:29:E9:83
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0194258F022F4CA1F64C4C2C393E02327499
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/EdyN193XAqCuwUeh3uoqwgMp6YM.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17819
IP address blocks: 176.121.90.0/24 maxlen: 24
176.121.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:2f:4c:a1:f6:4c:4c:2c:39:3e:02:32:74:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11dc8dd7ddd702a0aec147a1deea2ac20329e983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:37:8c:30:c1:44:bd:13:0f:f6:3e:b1:33:
bf:40:19:84:84:e6:b7:67:33:05:5a:0b:f7:ae:fb:
cb:96:14:fb:55:20:9d:12:06:5a:52:f5:5c:09:5f:
68:7b:8d:32:88:4c:21:75:31:4f:6f:b1:66:cb:14:
4b:37:33:0e:42:39:60:b3:6f:0a:16:db:9e:d2:40:
b9:8e:1a:d6:e4:9e:99:71:e1:62:ca:ae:c5:e0:54:
f4:01:3a:32:5a:34:d9:b8:59:ff:55:61:5c:90:df:
86:d4:85:1d:be:29:23:f5:89:a4:83:ed:93:c0:4f:
5d:84:5e:f1:ee:25:7f:fe:e6:1a:54:65:50:00:79:
b7:c6:5a:71:17:19:a6:6c:75:a3:90:e1:70:52:2d:
1a:7d:7a:85:54:af:74:73:f5:4e:81:07:67:96:57:
39:fd:b3:6d:e7:a0:2e:31:b2:a6:d6:de:d1:29:c7:
5c:4d:66:7c:dc:34:fa:0b:7b:05:b7:af:ab:3e:0a:
57:b2:5f:9e:93:cc:16:b8:67:af:fc:99:c5:2a:72:
56:c5:de:6a:f2:d0:fd:fa:ac:13:25:df:08:f0:dd:
67:95:88:5c:2d:6e:80:17:90:06:ca:fb:08:5d:f5:
4a:5b:40:13:fe:1a:ff:12:00:9d:cb:b4:10:7e:77:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:8D:D7:DD:D7:02:A0:AE:C1:47:A1:DE:EA:2A:C2:03:29:E9:83
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/EdyN193XAqCuwUeh3uoqwgMp6YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.90.0/23
Signature Algorithm: sha256WithRSAEncryption
39:e3:c2:a6:e9:87:e1:27:d0:dd:90:d2:4e:ef:7e:1f:ef:1d:
e0:68:28:c5:09:03:12:92:e8:9d:a5:77:98:cd:6e:c3:12:8f:
9e:31:d8:b2:e6:5b:b0:36:c4:ac:77:f3:d7:ae:f5:7e:b3:68:
07:b5:27:ce:a8:aa:cc:51:a1:e1:15:36:86:cd:b2:8c:b9:f8:
17:e7:76:d8:6a:bd:86:e0:3a:5c:fb:7d:07:3f:da:57:b0:4d:
ef:33:56:38:2a:1b:98:d5:8a:1e:0b:a8:bc:a4:f5:4b:99:1a:
8b:eb:dc:58:c2:5f:b3:21:06:b7:7f:8d:d2:e5:9d:8a:0c:eb:
30:78:46:61:46:93:83:96:61:90:39:f4:e4:db:ea:0b:d2:a8:
fe:c6:e5:1a:03:d9:b7:80:dc:a5:5f:b2:96:34:7f:16:c9:e9:
4c:42:04:b3:1c:8d:61:c8:8f:2f:bd:99:bd:88:48:fd:f0:e3:
b7:ed:32:ae:1e:72:c8:b7:4c:35:db:d3:0d:6e:6e:fd:ec:10:
a6:b5:73:3a:99:30:8e:02:0d:3c:61:af:a2:61:0a:ae:ab:82:
63:77:6a:e3:f7:22:cc:36:35:7c:29:14:e3:54:4a:44:47:58:
e2:9c:9c:09:4c:b2:5f:d6:d2:bb:49:f6:6c:a7:f5:9f:42:00:
ba:57:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:29 2025 by rpki-client