Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EgzHUocwnSDaTR0mcH1N2AahbPA.roa
File: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (raw, json)
Hash identifier: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=
Subject key identifier: 12:0C:C7:52:87:30:9D:20:DA:4D:1D:26:70:7D:4D:D8:06:A1:6C:F0
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01942067B91D290CD4E9234952D679FE764D
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EgzHUocwnSDaTR0mcH1N2AahbPA.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211440
IP address blocks: 185.255.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b9:1d:29:0c:d4:e9:23:49:52:d6:79:fe:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=120cc75287309d20da4d1d26707d4dd806a16cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:21:2c:e7:6d:07:b7:72:9f:36:04:9f:f1:
8e:6f:98:06:75:81:87:09:ba:a1:57:f9:67:53:74:
c8:ab:50:95:ec:af:ce:02:47:2b:d5:26:8a:5f:ff:
41:13:d7:ee:5b:82:cd:8a:f0:21:99:1a:b4:d4:ff:
94:c3:ab:dd:28:c1:a0:38:b8:a6:60:fa:84:fa:49:
b3:69:17:d0:2a:99:28:44:83:e8:43:bc:71:d5:05:
f9:21:79:1f:eb:48:3c:e4:37:ea:e8:e6:5f:e6:58:
53:60:9b:02:1c:98:4d:41:83:6a:e8:90:87:45:cd:
7e:27:7c:12:77:09:e8:72:99:67:33:eb:fd:2c:d6:
1a:ad:66:14:70:0d:5d:66:89:d6:8e:91:8e:40:f4:
8b:57:6c:11:da:a0:49:ba:0f:c4:81:7c:bb:c4:39:
5a:47:96:96:57:88:77:ba:bd:d9:e2:84:8b:49:a4:
13:1b:94:81:02:66:c5:2c:0e:6a:91:88:d2:09:d3:
ec:59:81:3f:e7:d6:71:fd:ef:b7:48:17:13:10:b1:
50:33:67:00:e5:f9:c1:57:52:db:4f:8a:18:b1:ea:
10:78:bc:9f:35:5c:08:ac:7c:b9:0d:61:f4:26:ec:
56:f5:de:22:f9:46:4b:e0:04:26:31:1d:8b:e6:87:
c8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0C:C7:52:87:30:9D:20:DA:4D:1D:26:70:7D:4D:D8:06:A1:6C:F0
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/EgzHUocwnSDaTR0mcH1N2AahbPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:53:76:e1:c5:46:6b:e5:5d:77:14:08:35:f3:5c:62:12:c9:
97:f9:11:46:b7:24:0f:e0:ad:15:a5:b9:b8:09:87:23:15:bd:
da:a4:ec:38:52:fb:47:bb:cf:ee:29:c4:11:e5:ae:55:b2:c9:
0e:5f:a3:29:b2:7e:65:e6:98:03:b7:89:fa:1b:96:fd:23:c3:
e1:2a:50:10:7f:b7:f6:ab:71:a0:7f:1a:49:1b:58:92:93:c4:
de:29:38:9e:c4:af:37:27:a2:52:7d:af:21:25:52:d3:59:2c:
dc:a8:18:f5:d3:c2:ae:ca:de:d0:78:5b:56:95:44:3d:1a:e7:
22:02:df:4c:92:7e:08:90:de:ee:10:d4:ab:42:d5:90:03:6f:
44:ed:a2:fb:c3:52:54:13:d0:40:89:c9:4a:65:01:3d:6d:ff:
ca:34:db:fd:2b:ee:fb:4d:20:bd:bf:6f:a6:79:3d:c0:62:6d:
e5:be:0f:9f:be:fc:f5:bd:23:92:90:b6:cd:b1:11:39:eb:76:
48:21:24:31:b0:48:47:d0:c5:ad:43:9e:dd:3a:01:52:01:a9:
d2:ae:f3:f8:0f:a7:02:d9:cb:cd:2a:9d:b0:f2:e4:67:c0:c8:
d3:61:c6:77:72:76:78:e6:ec:95:07:a2:67:c7:cf:33:e5:5f:
2f:7e:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:02 2025 by rpki-client