Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/ELder04tNbbgntelOzAhfHduEJQ.roa
File: ELder04tNbbgntelOzAhfHduEJQ.roa (raw, json)
Hash identifier: EYr754S/llaOJHTStE73M5DFVVB9J1YVjraoxE/z0DE=
Subject key identifier: 10:B7:5E:AF:4E:2D:35:B6:E0:9E:D7:A5:3B:30:21:7C:77:6E:10:94
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01971AC87851D870B9A98F20D4B938F9E7AD
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/ELder04tNbbgntelOzAhfHduEJQ.roa
Signing time: Thu 29 May 2025 06:43:54 +0000
ROA not before: Thu 29 May 2025 06:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138380
IP address blocks: 153.112.200.0/24 maxlen: 24
153.112.201.0/24 maxlen: 24
192.157.12.0/24 maxlen: 24
192.157.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1a:c8:78:51:d8:70:b9:a9:8f:20:d4:b9:38:f9:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: May 29 06:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10b75eaf4e2d35b6e09ed7a53b30217c776e1094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:e8:cb:10:91:36:fd:e0:49:0a:ef:df:bb:
85:38:66:8a:9d:f9:14:71:51:f8:76:2d:e5:f1:96:
2d:92:da:5a:0f:7c:d6:24:5c:bb:3c:e4:97:cf:a8:
b4:94:5e:18:21:17:da:0e:3e:ef:66:2d:18:82:8a:
98:dc:cd:bf:02:fb:66:2b:b9:d9:f7:10:bc:72:74:
66:4d:9d:6e:e1:e6:87:1c:21:15:cc:37:44:69:5b:
2a:f7:d3:83:93:62:fa:1a:1c:5c:f1:8d:b0:1b:c8:
5a:6a:d1:2c:c2:66:e4:0c:4b:31:61:0d:c1:7c:ac:
47:ac:b3:20:3e:34:af:6e:a8:b6:35:c3:d4:cb:67:
52:aa:72:b0:c4:19:ff:2e:24:11:35:aa:91:50:25:
e3:f7:34:35:50:c8:47:8a:4c:49:d9:e3:f9:1e:81:
c3:89:a3:67:f8:e4:da:02:41:94:c7:d2:7c:99:06:
65:d4:64:55:cb:67:3f:59:04:b4:ef:ff:8f:b4:47:
b1:c7:41:1f:73:e2:77:cb:c8:10:ce:6d:d6:66:7a:
09:f4:ec:f3:ce:05:c6:8b:f8:2b:65:83:b0:23:fc:
6a:a6:64:c5:e0:84:0e:a2:59:44:cf:4f:75:de:2a:
a7:d8:0f:ef:da:02:90:73:ec:d4:95:df:b0:8c:6e:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:5E:AF:4E:2D:35:B6:E0:9E:D7:A5:3B:30:21:7C:77:6E:10:94
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/ELder04tNbbgntelOzAhfHduEJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.200.0/23
192.157.12.0/23
Signature Algorithm: sha256WithRSAEncryption
48:de:df:a3:0c:69:1a:d6:be:70:96:3d:f2:b9:2d:87:0e:55:
67:ad:6a:c2:b5:a3:f7:47:db:c3:b9:f3:06:1f:9f:6f:47:57:
77:b1:47:07:e4:59:23:ab:1e:9d:69:97:24:4a:dc:ed:fc:6e:
61:a0:8c:ff:aa:09:4d:59:65:01:06:ef:15:b7:60:58:09:d5:
cd:e4:9d:62:94:6e:85:fd:c2:69:ab:f2:37:8d:f3:9f:00:fc:
4b:71:89:6b:bf:1d:e8:92:42:61:a2:cf:4f:26:a8:45:45:70:
34:1e:3d:9f:e4:a3:4c:26:56:04:6a:44:4b:b7:11:18:9d:73:
4f:f3:07:42:f7:14:6b:6e:1d:9c:60:5e:c0:79:2e:0e:c9:e7:
26:0e:5b:b4:41:54:08:2b:c2:2e:1f:fe:f6:b6:f5:dd:f2:75:
15:42:3d:26:80:e4:ac:d9:b3:3f:a9:c1:1f:61:38:54:1d:67:
2b:05:64:26:ff:04:6f:d9:b6:b7:1f:5f:e3:33:bd:12:b0:11:
9a:9e:b9:9b:31:be:b4:56:9e:f5:42:92:12:45:96:9d:6a:28:
59:0b:ca:22:73:71:6d:98:ab:ae:a7:2e:5d:c9:27:bf:63:f9:
a7:f1:7e:70:fb:f6:ce:21:9e:e5:b0:80:6a:43:d8:65:64:f1:
14:4a:76:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:49:43 2025 by rpki-client