Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/ELP7t5lJtmtgM2_pSHY2borhcWQ.roa
File: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (raw, json)
Hash identifier: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=
Subject key identifier: 10:B3:FB:B7:99:49:B6:6B:60:33:6F:E9:48:76:36:6E:8A:E1:71:64
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 019420D665DDF063EF0AD325BB1A1106D5A3
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/ELP7t5lJtmtgM2_pSHY2borhcWQ.roa
Signing time: Wed 01 Jan 2025 07:48:29 +0000
ROA not before: Wed 01 Jan 2025 07:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59962
IP address blocks: 185.24.252.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:65:dd:f0:63:ef:0a:d3:25:bb:1a:11:06:d5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 1 07:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b3fbb79949b66b60336fe94876366e8ae17164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:c0:03:5e:37:63:3f:73:10:c4:11:bb:f4:
e3:8b:a5:ea:54:7b:32:80:32:ce:24:33:e3:af:68:
d1:8f:ce:74:81:ea:b2:59:65:9a:1f:92:60:ec:56:
97:7a:d0:f0:44:15:da:1a:3f:ac:dd:fc:8f:6f:92:
d8:36:3a:61:3e:52:f5:11:21:45:d4:1c:0b:a7:32:
99:50:aa:f2:ec:e3:0b:f8:5d:b7:7c:bc:2c:10:a6:
42:8c:ef:26:30:79:db:20:76:3b:60:bc:c6:7e:93:
a4:28:6e:31:84:ee:99:07:f4:44:29:d7:ba:b3:54:
53:50:8c:33:1a:82:b6:5f:20:ea:02:36:ae:c8:f1:
04:e9:03:1d:0d:7b:04:f9:68:26:70:cb:65:33:18:
a6:c2:62:3d:4f:82:de:76:d1:22:36:f5:4c:e4:97:
1b:be:d1:53:43:69:b8:b9:56:07:e4:57:43:48:2c:
5a:7c:8a:0e:08:4f:1a:5b:97:1a:fa:07:22:d2:cf:
fe:7c:7f:b0:02:9d:e9:13:a3:21:c1:b0:eb:71:1f:
59:08:56:b3:df:6d:2d:86:52:f4:36:ba:f5:da:4c:
d8:45:eb:4a:01:e7:5e:98:e6:aa:6b:53:06:20:93:
0b:9e:a7:ee:1f:0c:57:b1:3c:de:d4:af:80:6c:40:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:FB:B7:99:49:B6:6B:60:33:6F:E9:48:76:36:6E:8A:E1:71:64
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/ELP7t5lJtmtgM2_pSHY2borhcWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.252.0/23
Signature Algorithm: sha256WithRSAEncryption
32:10:e1:a7:25:10:c4:1f:38:24:7f:e9:24:07:e0:d8:9e:74:
6e:fd:f2:4e:18:50:2f:35:8c:17:8f:2b:61:73:a9:95:59:06:
b0:d2:a1:a3:84:a0:ef:9d:8b:4b:f9:d6:6f:6b:7c:9c:c0:ba:
eb:a7:d7:ad:8c:1c:b9:c7:d4:80:5a:d5:8c:19:83:7e:71:20:
43:cc:a6:f4:1d:09:89:84:76:9f:ae:d7:b4:58:5d:95:38:42:
d0:e6:63:fc:12:45:09:e5:3b:49:bb:b9:5f:bc:82:70:af:f8:
a2:30:30:3f:fa:18:99:43:f6:e4:5e:70:e7:93:af:84:d6:a2:
89:d9:17:1c:9d:4f:98:aa:b0:7e:a8:1d:eb:96:f5:93:c8:bd:
85:c3:07:d3:10:94:e2:c4:0e:c8:34:de:7d:e1:48:ed:8d:05:
55:69:a1:be:e1:bb:9a:ce:64:85:09:dc:87:85:8e:25:94:d6:
41:22:29:05:2b:a9:97:7c:b8:0a:a1:3a:d1:15:24:40:94:04:
05:a4:de:4b:fe:93:10:58:35:36:26:92:79:0d:c0:8f:13:69:
5e:4a:58:2c:b5:58:69:19:06:d7:ab:1f:db:19:f1:1c:1a:9b:
8f:53:b1:fd:ee:e9:be:8d:12:56:83:5b:bc:91:37:e5:70:37:
07:65:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:20 2025 by rpki-client