Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/eE4dt64YbIc12mVCfO2vYEZbsAA.roa
File: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (raw, json)
Hash identifier: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=
Subject key identifier: 78:4E:1D:B7:AE:18:6C:87:35:DA:65:42:7C:ED:AF:60:46:5B:B0:00
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019425FCF09E0438DE7668C9678704ABA2BF
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/eE4dt64YbIc12mVCfO2vYEZbsAA.roa
Signing time: Thu 02 Jan 2025 07:48:40 +0000
ROA not before: Thu 02 Jan 2025 07:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206347
IP address blocks: 194.49.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:f0:9e:04:38:de:76:68:c9:67:87:04:ab:a2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Jan 2 07:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=784e1db7ae186c8735da65427cedaf60465bb000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:6f:59:92:76:e2:5e:c0:fe:f4:00:21:20:
89:67:b3:48:e5:9c:0a:bf:e2:b5:76:b5:f2:a6:d0:
79:0e:11:11:fc:bd:98:5a:a6:36:57:46:91:8a:8f:
74:e2:99:c5:3d:57:dd:11:66:44:03:75:53:ba:a3:
0e:9b:7d:19:db:aa:ee:2e:6c:a1:80:18:93:f2:e3:
3d:39:7e:53:02:e8:06:01:72:5e:1f:ef:1c:c3:30:
63:5b:48:e1:a3:2c:9b:5c:3b:ac:87:e0:03:13:e6:
10:1f:4a:a0:fe:07:86:4c:cf:4d:35:fb:fc:4a:9f:
61:5a:17:75:5e:3a:ac:bd:5f:7d:4e:9a:30:f9:3a:
f6:7f:76:42:66:9d:5b:25:e0:91:31:5e:d9:30:9b:
61:93:bd:9b:30:44:4c:35:82:6a:62:1b:60:23:ec:
0c:e5:42:a7:e9:64:4e:f0:b1:bc:54:f1:10:ff:d5:
e9:6b:36:b7:2f:fd:96:18:67:ff:0e:5a:63:6c:e1:
cd:0e:9c:4f:ad:c8:07:ae:c5:de:c5:40:95:7d:e6:
1f:07:99:aa:c5:e6:6e:86:5c:27:ee:e1:d5:ea:b9:
e2:44:24:a2:6c:5c:0e:8c:04:b5:44:d5:30:5f:a9:
36:74:20:e9:ad:b9:c7:6c:51:eb:0a:b5:71:4f:c1:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:1D:B7:AE:18:6C:87:35:DA:65:42:7C:ED:AF:60:46:5B:B0:00
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/eE4dt64YbIc12mVCfO2vYEZbsAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.12.0/22
Signature Algorithm: sha256WithRSAEncryption
23:dd:bf:97:1b:d9:31:0d:4f:65:18:ee:17:e6:e7:6d:e3:e6:
01:85:83:5f:c9:22:d7:2a:e7:3c:30:01:a6:d7:e8:2d:87:46:
43:d9:cf:91:fc:6b:d7:c1:3d:00:8e:56:95:fe:b2:e1:2c:c6:
07:e6:a0:ac:59:4b:ae:a9:8a:14:6d:f8:4d:b7:85:6a:02:c7:
88:e5:6e:43:91:a5:4b:b9:83:08:08:f7:2c:da:d0:02:6c:fa:
42:32:70:4c:84:0e:4e:e5:c3:4d:fd:8d:78:7f:6e:a9:52:84:
9e:c2:64:44:98:b6:53:45:7e:81:aa:a4:fa:92:0e:b5:65:97:
d0:3e:f0:fc:fe:31:d6:bf:e5:1b:be:66:91:c4:16:ad:99:9a:
a3:11:21:e7:44:89:0d:bd:3f:2e:93:57:1f:05:43:74:cd:ad:
fa:e3:07:aa:82:e2:cb:34:30:4b:5a:58:3c:35:62:d2:4e:51:
45:1a:9a:dc:8f:c2:b0:e2:ac:a7:48:f2:e0:1c:d2:b7:5d:e0:
4a:8e:50:af:cc:49:d7:84:bf:64:64:35:ed:19:86:cf:eb:4a:
1f:42:5a:d4:45:e1:cd:bb:fc:f4:c8:20:a1:2e:e2:c6:13:75:
47:fb:e5:db:49:b5:f8:e5:ea:ff:f6:b2:69:e7:96:3c:6a:16:
39:c4:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:09:51 2025 by rpki-client