Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eu2n2knAmnjo9acVSEpPw1sYCEU.roa
File: eu2n2knAmnjo9acVSEpPw1sYCEU.roa (raw, json)
Hash identifier: Uh/jLDF9qunyJDNaR1QtZTY7VSEjFi//8f8iTFuCC9k=
Subject key identifier: 7A:ED:A7:DA:49:C0:9A:78:E8:F5:A7:15:48:4A:4F:C3:5B:18:08:45
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F275C03AAC49CD2AA00B8954E59B2
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eu2n2knAmnjo9acVSEpPw1sYCEU.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211557
IP address blocks: 45.141.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:27:5c:03:aa:c4:9c:d2:aa:00:b8:95:4e:59:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7aeda7da49c09a78e8f5a715484a4fc35b180845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:20:3f:37:ff:90:8d:03:87:a0:ff:98:aa:
3e:92:10:5c:e8:03:5b:18:bd:10:29:24:76:6f:bd:
4d:ec:77:64:12:02:a7:da:f9:4e:05:58:95:72:13:
4d:63:1a:bd:6e:88:27:df:0f:79:83:d2:8b:ad:cc:
10:99:96:e0:3f:3a:c8:37:c1:19:43:5e:eb:2e:a2:
af:d1:d9:43:17:de:05:a9:00:4e:a0:ce:aa:93:86:
00:9d:b3:68:fa:d9:9a:28:30:b9:d6:4e:56:4d:2e:
ba:62:78:e6:7d:25:41:b9:16:20:0a:35:d1:5f:4f:
a2:b8:7d:13:48:5b:f5:03:44:87:f0:e6:df:0d:cb:
47:16:b6:c5:9c:e6:46:38:a4:15:86:9a:5c:e5:53:
10:a6:28:8c:f3:c9:9c:55:f4:43:5c:f9:a5:31:37:
cc:cf:6f:89:d1:96:10:8c:1b:35:ca:94:41:ec:5e:
e9:70:33:4a:f2:8f:cc:de:9c:da:6c:30:8a:75:04:
5e:65:96:ac:ef:51:7a:b8:3f:00:cf:7b:f9:f2:15:
14:6f:c0:1a:02:1a:1b:50:c9:bd:67:0b:3c:88:83:
09:5f:a0:9a:55:c5:bd:69:0d:9a:e9:75:c9:7c:2a:
56:f5:a7:18:08:b0:1c:59:ff:48:a9:15:b8:8d:5c:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:ED:A7:DA:49:C0:9A:78:E8:F5:A7:15:48:4A:4F:C3:5B:18:08:45
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eu2n2knAmnjo9acVSEpPw1sYCEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f9:83:fe:a2:26:64:e2:bd:67:11:a7:ea:bd:20:d4:52:3c:
a5:97:54:54:dd:ab:4f:02:de:aa:57:98:e8:b7:dd:2f:43:11:
6b:9a:73:51:04:89:2e:a8:a7:25:e1:1f:7f:ca:ad:38:32:c7:
4d:04:5e:9b:94:c9:cf:24:93:17:b9:1c:ba:77:d6:53:bd:d6:
49:f9:89:2b:07:4e:b6:cf:e9:dc:3f:64:8e:36:c7:81:12:8a:
fa:61:d2:9b:bc:1f:0e:fa:6a:95:b1:c7:3a:25:42:b4:3f:15:
79:27:bf:60:7c:42:21:c2:cd:57:57:31:c0:69:4f:61:04:fc:
fb:94:6a:fc:da:72:f3:6f:70:1d:4e:12:d6:69:7a:13:3c:0a:
ae:4b:9b:56:b1:2e:cc:4f:97:1c:3f:3c:90:ee:86:3e:76:d1:
9a:2d:5d:09:4d:de:5e:27:2c:4f:86:e5:59:fe:b9:09:47:58:
45:f5:8a:50:ab:75:c9:6d:ca:3c:a8:c2:b7:67:c2:32:79:8f:
00:dc:7a:79:af:9c:2b:27:6c:8f:94:bd:10:5a:dd:38:01:00:
77:9e:6c:80:52:ac:e0:bc:05:26:2f:f5:2e:40:ba:46:13:08:
44:ec:57:98:e8:f2:0b:77:97:75:bc:d1:01:1a:32:89:4e:39:
78:3b:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:15 2025 by rpki-client