Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eNgUrFCwwk-JIQF0KAKigZO-p2k.roa
File: eNgUrFCwwk-JIQF0KAKigZO-p2k.roa (raw, json)
Hash identifier: 7qGKHLKTboQ8QWdu0jPgASSTkf6thDUi7lsnDUx1Cj4=
Subject key identifier: 78:D8:14:AC:50:B0:C2:4F:89:21:01:74:28:02:A2:81:93:BE:A7:69
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485F5DD7A434E749953494260D543E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eNgUrFCwwk-JIQF0KAKigZO-p2k.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50764
IP address blocks: 192.36.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5f:5d:d7:a4:34:e7:49:95:34:94:26:0d:54:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78d814ac50b0c24f892101742802a28193bea769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:1e:56:c1:5e:27:c0:0d:aa:49:e7:22:96:
e9:a4:74:4a:77:be:b8:5f:39:37:89:d0:ce:e9:57:
c2:70:7e:7d:b5:0e:79:b0:9c:aa:cb:d9:cf:5b:d5:
f2:50:7b:0a:f0:ca:99:bb:a7:bc:6b:6f:99:5b:e0:
1b:5d:8d:a8:6d:70:3d:25:9a:ab:e0:c9:a7:00:21:
57:51:06:6c:a8:b7:c0:a0:5b:e0:dd:59:39:ec:23:
70:90:23:72:d3:c6:e2:05:69:73:f5:6f:de:de:32:
20:57:59:93:4a:7f:45:b0:9b:cb:f5:ef:e5:2c:06:
97:fd:16:d6:d3:6b:5f:75:b9:cd:e9:56:22:74:92:
67:df:3b:d2:b2:1b:ce:2c:6b:50:b8:90:96:73:2d:
af:89:13:04:20:76:4c:85:72:ac:89:ba:43:0b:61:
2b:7e:3f:a1:24:b3:6d:f7:70:40:b8:b3:fd:1e:cd:
64:a3:67:09:2d:ee:48:9e:f0:e9:79:5c:4b:40:98:
a2:c5:54:98:2e:fa:2e:fa:45:1b:4b:a6:fa:5c:0e:
73:fb:d3:a8:86:8e:6c:90:b7:8c:b7:5b:4b:76:23:
40:51:0c:6f:24:e7:ff:95:5a:56:26:78:81:8c:7a:
50:b5:1b:9c:2d:42:18:60:34:6b:d7:b2:a9:9f:9e:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:14:AC:50:B0:C2:4F:89:21:01:74:28:02:A2:81:93:BE:A7:69
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eNgUrFCwwk-JIQF0KAKigZO-p2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.43.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9f:ba:3c:92:31:e6:5a:3a:56:da:26:e8:fe:67:46:5c:f1:
9f:a0:75:b3:e8:30:a9:29:cd:1a:a6:f8:03:9c:c0:1a:5f:bd:
05:50:3a:71:b3:bd:b7:5a:bf:f5:e1:36:61:8a:1d:86:b4:18:
50:8e:41:97:c5:27:22:92:57:5f:79:c2:5c:d0:c0:d8:50:cd:
4b:6e:7d:f7:0c:14:1e:73:2f:84:48:e0:e8:3c:bd:31:d8:f8:
33:b1:65:53:fb:e3:4b:79:8c:7f:32:1b:98:ea:93:64:5b:17:
f0:9e:bc:bb:1e:fb:47:3f:cb:08:35:d0:57:3c:a7:b0:29:8e:
13:cb:2b:77:8f:39:af:93:30:61:52:84:54:e5:2d:1e:80:15:
68:a4:f7:16:47:21:0e:08:c4:8f:fd:8a:bd:ab:71:b5:6b:18:
53:74:2b:06:ea:e7:39:b7:57:4e:58:3d:36:e6:89:55:bd:07:
6a:9b:ae:51:2e:2b:02:4b:07:15:3b:d4:65:e6:51:4f:4d:54:
a5:c7:e5:6e:15:f7:2c:d5:e5:d0:63:2c:07:8e:2b:71:1d:24:
2c:02:da:91:89:18:3a:39:8a:51:aa:89:8a:09:5b:96:64:e1:
2e:03:1e:e6:42:28:cf:12:1e:6d:f7:43:cf:0d:a0:e2:25:fd:
de:3f:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:38 2025 by rpki-client