Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eZULLshpMqJsslaZN07ZbXA7_a8.roa
File: eZULLshpMqJsslaZN07ZbXA7_a8.roa (raw, json)
Hash identifier: kHFcH9W+KqvgYoWxZWACVuGolVNMOd8+8Q2SvxFFqho=
Subject key identifier: 79:95:0B:2E:C8:69:32:A2:6C:B2:56:99:37:4E:D9:6D:70:3B:FD:AF
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D76CCF919766FFED6F20FA7F9BACE1
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eZULLshpMqJsslaZN07ZbXA7_a8.roa
Signing time: Wed 01 Jan 2025 21:48:28 +0000
ROA not before: Wed 01 Jan 2025 21:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203909
IP address blocks: 5.1.77.0/24 maxlen: 32
2a00:f826:4::/48 maxlen: 48
2a00:f826:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6c:cf:91:97:66:ff:ed:6f:20:fa:7f:9b:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79950b2ec86932a26cb25699374ed96d703bfdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:03:a6:f2:d3:2a:3f:1e:9d:3c:36:ca:d7:
92:a7:c9:e6:13:d8:e3:81:2e:1d:b3:7c:cc:a1:7c:
75:77:75:bc:42:7d:1c:16:aa:81:e8:75:86:92:37:
73:41:d7:b4:e4:a0:cd:3e:85:e9:51:35:45:71:73:
87:0b:97:5a:c8:99:6a:5c:2d:17:fc:d5:44:11:12:
4a:15:40:d6:bd:08:56:42:a5:40:c7:33:e1:cc:4d:
1c:89:b2:e8:7d:0f:d5:17:47:98:77:28:c3:f2:d5:
fb:75:45:92:b5:9d:e5:c0:2c:d8:34:e5:38:40:23:
61:d5:d3:8d:dc:a4:3d:a8:e8:10:6a:dc:84:1d:15:
c4:a0:3a:50:1d:54:08:f1:7c:fd:7a:76:a3:ff:3c:
3a:d6:52:78:30:93:7e:33:d7:f3:3b:ee:d1:66:6b:
6e:3a:9f:0c:7d:02:d8:d9:0f:27:9e:c0:6c:1a:fe:
aa:a2:9b:29:68:a5:aa:5b:d3:87:90:80:d6:2b:7f:
23:14:d4:9b:3e:6a:b1:a3:cb:f9:71:66:80:bb:0b:
6b:3a:c8:29:53:2e:31:8f:ae:f6:7d:fb:3f:2e:f2:
0f:79:54:31:f8:76:03:31:be:6d:cb:09:1b:d6:8b:
da:7f:3d:3d:d4:f9:9e:6b:4b:87:64:f2:f5:29:6a:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:0B:2E:C8:69:32:A2:6C:B2:56:99:37:4E:D9:6D:70:3B:FD:AF
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/eZULLshpMqJsslaZN07ZbXA7_a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.77.0/24
IPv6:
2a00:f826:4::/48
2a00:f826:7::/48
Signature Algorithm: sha256WithRSAEncryption
51:b2:fa:be:89:10:01:87:b9:2a:39:df:00:fb:fd:fd:1d:5e:
d8:49:81:c6:5d:48:80:2f:f7:1c:4a:8c:ad:6c:e1:05:27:a0:
39:d1:76:8f:95:91:a2:f6:63:34:3c:64:bd:47:ac:6f:77:82:
99:b4:fd:3f:20:5a:56:1d:64:95:fe:fd:ad:f9:36:df:5b:21:
9b:63:c6:b1:95:4d:1a:76:42:92:ba:85:83:29:6c:99:6d:cd:
37:b9:14:60:68:0b:a8:a7:d9:ac:10:17:51:77:8f:e0:3b:7e:
4b:1c:fe:dc:1d:e3:87:88:dd:5b:15:c4:32:29:7a:2a:c4:45:
3d:e6:b7:62:d4:b0:2b:18:69:e0:0d:24:93:cb:a6:01:98:03:
18:ee:c0:fd:5c:65:40:1b:a1:26:64:9f:34:97:7b:ff:26:07:
89:b3:33:06:c5:2f:85:28:6e:19:3c:f8:30:3d:67:e1:19:57:
4b:47:99:fd:13:61:4e:b8:f8:85:74:60:75:7e:5b:5b:8f:ac:
5a:44:dc:58:81:90:fd:0a:76:91:d6:d2:a6:a6:7c:fd:5a:eb:
9d:53:86:de:84:82:b3:fd:ec:d4:87:9f:f1:65:e0:72:27:0a:
03:3d:93:66:d3:27:57:54:4d:96:33:1f:a7:0a:96:5b:a3:1d:
2d:9f:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:23 2025 by rpki-client