Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa
File: EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa (raw, json)
Hash identifier: mjozCBG8d8a1a9rxk2/WXOhv1sAeajKVlJoBmpCTphI=
Subject key identifier: 12:00:20:A1:B9:D9:5A:90:F8:C0:3A:2A:22:8C:72:AF:73:19:03:96
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 0194258F8DA539F10A60C9EAE33B1235CA21
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2472
IP address blocks: 193.48.161.0/24 maxlen: 24
193.48.162.0/24 maxlen: 24
193.49.230.0/24 maxlen: 24
193.50.134.0/24 maxlen: 24
193.51.118.0/24 maxlen: 24
193.55.4.0/24 maxlen: 24
194.214.214.0/24 maxlen: 24
194.254.208.0/24 maxlen: 24
195.98.226.0/24 maxlen: 24
195.98.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8d:a5:39:f1:0a:60:c9:ea:e3:3b:12:35:ca:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120020a1b9d95a90f8c03a2a228c72af73190396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:0a:a3:93:4d:e7:07:78:4f:b2:f0:aa:1b:
00:81:07:6d:6c:82:b1:29:dd:1f:5c:11:2b:51:9a:
e6:d4:c0:41:b3:0d:43:bf:37:b7:b0:bc:12:19:dd:
72:da:1a:51:a9:90:45:97:cf:9c:af:e3:8c:f7:af:
6a:03:36:8e:1f:43:db:b8:b2:af:6b:2f:14:f7:ac:
67:e3:78:f1:7b:d0:7d:ae:42:0e:c9:2a:ae:39:9c:
66:c8:0d:71:b4:c2:61:5f:7a:f9:ad:c0:00:34:62:
ca:e2:e5:98:f0:1e:d4:b3:99:09:65:03:0a:d0:fe:
9c:06:ab:1d:67:22:ae:60:95:80:97:ba:7b:87:37:
c9:e8:3e:7f:a0:b8:d9:1d:03:8f:55:cc:70:23:50:
8a:8d:43:89:47:0d:3e:d7:e4:63:1b:15:8e:6f:91:
ee:b8:25:9a:db:98:9f:1c:84:9e:58:6a:17:1e:ff:
74:9f:08:8b:c0:66:15:0b:5b:8d:0f:05:b9:b9:07:
f9:98:cf:cb:a8:33:7e:72:4c:e0:06:0c:ad:7b:9e:
9f:ad:cd:eb:82:13:03:20:24:d8:db:92:65:e8:80:
19:0f:3f:56:e9:b8:42:2d:a5:c5:c1:78:6c:43:02:
eb:0c:5f:19:44:a3:66:ca:92:fd:e1:7d:38:77:16:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:20:A1:B9:D9:5A:90:F8:C0:3A:2A:22:8C:72:AF:73:19:03:96
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/EgAgobnZWpD4wDoqIoxyr3MZA5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.161.0-193.48.162.255
193.49.230.0/24
193.50.134.0/24
193.51.118.0/24
193.55.4.0/24
194.214.214.0/24
194.254.208.0/24
195.98.226.0/23
Signature Algorithm: sha256WithRSAEncryption
78:32:4c:00:de:56:28:8e:1a:76:5f:12:b1:a1:5c:bc:58:bc:
5c:f5:05:e2:bf:72:1c:24:ca:05:a0:3e:8c:50:85:17:a0:07:
59:ec:03:14:59:e0:fe:aa:5d:12:08:3a:67:e2:0b:50:6b:13:
e8:f2:05:62:40:80:ad:02:be:2b:db:5e:bd:2a:4a:32:ac:ee:
3a:90:66:7c:14:41:77:a2:7f:38:a7:2e:82:a8:33:f9:e8:e3:
35:50:65:c6:82:39:d7:09:f5:b9:59:74:f3:5d:47:84:71:97:
dc:9e:e5:b0:27:30:35:6e:76:b6:5b:42:37:ff:1d:aa:41:9a:
63:ff:f0:0d:d4:e9:6a:43:81:c0:bd:57:25:84:b5:b4:ce:f7:
f1:ed:d2:05:b6:db:8c:18:74:94:b4:4e:ac:99:4a:c6:72:9b:
87:f9:7d:d3:8e:7b:04:aa:ca:17:97:83:c8:f2:a2:75:2d:c8:
c0:42:e3:1f:e0:e5:81:35:24:2b:7b:2d:85:d9:e4:c2:84:38:
67:94:6b:c7:a2:f1:35:fd:4e:f6:49:32:38:12:c0:6c:e6:5f:
27:2f:a0:3f:55:f3:5b:9e:cb:c6:8d:1b:eb:38:a8:c4:78:d2:
f2:1e:15:0b:c4:c7:f5:2f:3f:82:0e:e7:af:a6:8c:5f:f4:97:
a3:c3:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:10:43 2025 by rpki-client