Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/eIZENcgK1XZflT_O-9vOWF5_c5k.roa
File: eIZENcgK1XZflT_O-9vOWF5_c5k.roa (raw, json)
Hash identifier: 72shYqXGHw00bwK02sJ1cpdaJwagVhfPsDZJsD/Kbnk=
Subject key identifier: 78:86:44:35:C8:0A:D5:76:5F:95:3F:CE:FB:DB:CE:58:5E:7F:73:99
Certificate issuer: /CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Certificate serial: 019427B50E71CED45A1584EF36931B3CAA92
Authority key identifier: 02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/eIZENcgK1XZflT_O-9vOWF5_c5k.roa
Signing time: Thu 02 Jan 2025 15:49:24 +0000
ROA not before: Thu 02 Jan 2025 15:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 109.224.233.0/24 maxlen: 24
193.111.200.0/24 maxlen: 24
195.74.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0e:71:ce:d4:5a:15:84:ef:36:93:1b:3c:aa:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b980c10d7110f91fff9e0eceb639d9e75b35e2
Validity
Not Before: Jan 2 15:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78864435c80ad5765f953fcefbdbce585e7f7399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:6e:c4:30:7d:5f:56:5e:f5:54:1c:4d:ac:
7a:9f:55:21:11:64:b5:23:d3:bf:8a:cb:59:4b:4a:
43:da:2f:66:93:c5:34:77:6e:84:e1:af:84:8a:22:
a4:e1:80:cc:47:df:3a:72:28:98:25:b5:e7:74:a3:
ef:ac:a3:e4:51:e4:a0:ff:36:e7:39:e3:32:66:f5:
9d:5b:3f:ca:58:ef:7b:ce:68:9c:41:e0:3c:cd:88:
4b:97:44:72:03:5c:97:19:39:63:09:02:dc:75:23:
e9:3b:1e:c0:3b:5d:d7:80:ff:ae:d2:b3:6f:94:8b:
e1:04:c2:2c:a6:0a:3a:57:88:6c:d9:6d:53:a4:37:
50:1c:a3:6e:7b:9a:ae:09:72:46:03:4f:f8:c7:93:
4a:1c:14:c4:db:97:14:43:28:f4:eb:66:dc:aa:04:
98:fc:7f:5d:52:e2:7f:01:ce:47:e9:e1:b4:c2:e5:
33:9b:f8:70:49:5c:ce:91:e2:33:43:af:64:de:00:
b9:6c:eb:86:7b:dd:c3:8e:73:36:a6:c3:c6:cb:92:
25:98:90:ee:50:02:4e:3b:25:22:cb:ea:d0:34:00:
11:df:92:a2:b5:4c:cd:04:3d:e1:6b:68:82:6d:91:
7b:17:28:fa:bb:1d:e7:c6:a5:d6:ed:12:f3:25:03:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:44:35:C8:0A:D5:76:5F:95:3F:CE:FB:DB:CE:58:5E:7F:73:99
X509v3 Authority Key Identifier:
keyid:02:B9:80:C1:0D:71:10:F9:1F:FF:9E:0E:CE:B6:39:D9:E7:5B:35:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArmAwQ1xEPkf_54OzrY52edbNeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/eIZENcgK1XZflT_O-9vOWF5_c5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a8947f-e52c-4de1-bade-70c0a506d797/1/ArmAwQ1xEPkf_54OzrY52edbNeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.224.233.0/24
193.111.200.0/24
195.74.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:40:1c:b0:1d:9f:74:68:fa:c9:40:14:95:09:92:4a:e7:ac:
b6:7a:fd:c7:e2:4d:b8:1d:c6:7d:a3:ed:c9:b9:e6:3f:30:a2:
a1:3e:de:08:c1:9d:31:4c:a5:59:46:df:ca:66:0a:e4:86:cd:
45:f5:5e:e3:32:91:f6:ae:45:58:ee:9e:68:db:5c:48:9f:a4:
e8:03:80:d2:ec:74:2b:bf:b3:e1:2a:83:2a:f2:0f:3b:10:df:
e7:ac:b3:cf:64:5e:7e:ef:2e:9a:ef:7a:0a:26:bf:c6:23:43:
67:21:18:6c:ac:da:70:e9:fb:35:2f:ad:6e:36:e6:c0:34:39:
d6:ae:45:dd:cd:2c:f7:65:3f:3f:da:01:be:3a:8a:dd:d5:79:
6c:5d:c3:34:93:90:1c:8c:8e:cb:a4:ea:02:45:85:57:74:5f:
df:84:a5:20:60:a4:b1:e0:5a:b1:26:89:9d:3c:86:e3:11:32:
d5:3d:7b:97:57:2e:c8:51:46:27:f2:7c:ea:05:a5:90:bc:d6:
33:ff:c0:31:48:05:94:82:1c:4d:73:2f:95:9a:c2:7e:d5:17:
40:5d:31:42:3e:be:dd:87:36:8e:5d:bb:ea:b8:8b:db:ec:9a:
0a:6d:c9:b1:ba:f3:27:1c:f3:4f:b2:57:d8:77:3f:b0:65:6c:
ad:bd:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:18 2025 by rpki-client