Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/eZmwFy41-LIbouqrlW9zkimoU3M.roa
File: eZmwFy41-LIbouqrlW9zkimoU3M.roa (raw, json)
Hash identifier: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=
Subject key identifier: 79:99:B0:17:2E:35:F8:B2:1B:A2:EA:AB:95:6F:73:92:29:A8:53:73
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019420D5FADFE96BAA83FE00F0143293A135
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/eZmwFy41-LIbouqrlW9zkimoU3M.roa
Signing time: Wed 01 Jan 2025 07:48:01 +0000
ROA not before: Wed 01 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202685
IP address blocks: 2a03:df00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fa:df:e9:6b:aa:83:fe:00:f0:14:32:93:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7999b0172e35f8b21ba2eaab956f739229a85373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:08:d2:7f:e7:3a:b6:f5:5b:a8:c1:b4:c7:
7e:01:9f:de:7f:54:85:9d:c1:74:57:ee:95:7f:7c:
28:d8:00:97:6d:d7:90:a1:7c:de:7c:5f:0e:11:cb:
f2:b5:89:3e:f1:14:a4:1d:61:a8:ab:ff:2d:8f:ec:
04:cd:9e:d5:c9:fd:4f:6f:7f:f0:7b:a5:d5:23:1f:
93:cf:d0:46:26:d3:3c:6f:6d:39:84:9a:ab:a9:45:
c2:b9:f1:a7:b6:4d:93:d1:e2:74:6c:6f:80:03:73:
2f:ac:36:1a:de:eb:bb:1a:cd:7b:b4:9b:04:ea:62:
11:29:69:e3:cc:89:23:8d:62:5a:92:08:f6:c5:11:
6b:7d:79:ae:69:a7:69:aa:e7:78:56:f2:c6:98:b0:
53:43:14:d5:ad:ef:4f:63:d8:20:36:4d:ae:4f:f5:
b2:15:3e:89:15:3e:db:f9:80:54:1f:d8:f4:0a:d5:
29:71:c4:7a:dc:72:fc:51:b9:cd:29:3e:35:21:5e:
73:33:d5:f5:4c:7f:6a:37:bb:05:d3:b2:fa:71:9f:
99:25:30:54:cc:ae:4c:fc:cb:38:01:e2:4a:04:34:
7f:da:01:2d:88:43:74:85:47:b7:5d:36:37:90:c5:
af:e7:53:a5:64:92:b8:a1:37:20:b5:9f:d9:68:8a:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:B0:17:2E:35:F8:B2:1B:A2:EA:AB:95:6F:73:92:29:A8:53:73
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/eZmwFy41-LIbouqrlW9zkimoU3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:df00::/29
Signature Algorithm: sha256WithRSAEncryption
36:b7:9a:ea:ce:83:09:64:1d:82:f1:bc:9b:02:da:4f:01:c2:
6a:34:e6:a2:40:e5:67:8f:ba:07:b1:7e:21:07:61:fa:3d:e3:
e9:df:82:f1:04:7b:a7:15:ba:99:df:7e:79:b8:31:4b:59:68:
3a:14:e5:4c:79:74:e6:ee:e4:2c:33:9f:2a:15:99:b1:af:68:
4d:a4:78:5e:66:79:11:4a:58:a0:fe:19:31:fe:3d:82:40:4f:
2e:9e:07:ad:59:55:18:51:b4:91:a4:24:03:3e:77:ec:ed:06:
d0:a6:a3:f8:a5:b0:95:68:cf:a5:e0:36:ee:7c:d0:32:eb:31:
4b:64:42:7d:90:3a:3b:5c:f8:6d:73:f9:a1:c8:39:0b:45:9f:
d4:34:1d:aa:d8:55:87:c5:5e:ab:5e:62:c8:5d:f0:70:d0:42:
7f:29:ed:2e:09:e2:11:71:bf:46:4d:9f:22:bf:01:10:ed:07:
70:9e:02:38:2b:e0:f3:3d:a6:b1:65:fd:0a:8f:db:2c:19:82:
f9:72:6a:bb:8c:57:be:00:1c:a0:4c:02:62:d0:6b:04:4b:d3:
37:b2:1b:c8:73:81:1f:55:a8:55:f7:5e:bc:75:52:dc:37:b7:
1f:a8:e7:10:70:dc:71:fd:ee:4a:da:e9:74:ab:e0:4d:d1:8b:
04:45:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:43 2025 by rpki-client