Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/EsH1wGyP_4A3yjvtVJYJ-XBblic.roa
File: EsH1wGyP_4A3yjvtVJYJ-XBblic.roa (raw, json)
Hash identifier: DKgsauljcGZUwZ9qDQvDqIX1wcEbMc0VYZIYyCHtBuo=
Subject key identifier: 12:C1:F5:C0:6C:8F:FF:80:37:CA:3B:ED:54:96:09:F9:70:5B:96:27
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 0194274840B584FEE59293A6BC952A0BAD02
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/EsH1wGyP_4A3yjvtVJYJ-XBblic.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199761
IP address blocks: 92.55.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:40:b5:84:fe:e5:92:93:a6:bc:95:2a:0b:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c1f5c06c8fff8037ca3bed549609f9705b9627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:c5:90:fd:fd:1b:c0:fc:98:9e:1f:89:9d:
3d:dd:61:30:be:46:51:7c:c8:07:9d:09:1c:4d:34:
be:a4:d0:62:6e:05:0b:73:e6:1c:21:d8:60:9e:66:
9b:41:09:e6:da:78:12:1a:db:b9:69:cf:af:bc:4c:
b2:d2:93:81:f2:d6:89:aa:9d:a0:5a:cb:aa:79:77:
c4:5f:59:30:df:0a:7a:6e:c7:f3:3c:ad:e5:91:6d:
a9:fe:3a:fe:a7:c1:40:22:cc:88:00:f3:fd:5e:56:
34:66:0e:9a:f4:b2:e3:3e:36:b0:18:a6:a7:6d:59:
8c:1d:69:73:b8:e1:6e:c8:6f:54:72:72:a3:92:3d:
bf:a1:11:2b:4b:16:d1:52:ea:bd:e4:73:8e:4c:62:
92:b7:2a:83:fc:e6:8d:6e:b1:1e:8b:b1:1c:a5:75:
5f:86:ed:3f:8a:3b:bf:5b:04:da:54:7f:bd:f1:8b:
a8:d0:65:49:68:80:39:35:94:3d:ff:80:ea:33:82:
a2:62:2e:61:c2:6d:86:d4:6c:f1:b1:b1:67:95:4f:
91:5a:99:ca:a9:cb:8c:30:1f:bb:ce:8b:51:99:d5:
fe:ca:ff:02:fc:19:4a:f1:d5:04:ac:5e:79:d4:8b:
ff:16:19:43:c9:43:3e:d4:bb:db:a2:95:a4:28:98:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C1:F5:C0:6C:8F:FF:80:37:CA:3B:ED:54:96:09:F9:70:5B:96:27
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/EsH1wGyP_4A3yjvtVJYJ-XBblic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.55.207.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:50:ee:9e:16:a9:e6:6f:6d:03:b8:2c:40:b8:10:bb:0d:a8:
d2:2a:c3:1c:27:88:42:63:2c:de:70:c2:f8:cf:d2:29:6c:f4:
b2:db:f0:09:f8:73:06:22:55:cd:b6:a7:e9:0e:93:03:5e:a7:
f4:37:a4:1b:1f:c2:27:b8:4d:6a:55:2c:61:6b:18:89:24:97:
45:63:97:20:70:62:a1:3f:b0:66:ab:5a:7e:05:bd:41:80:a7:
13:7b:dc:5d:ba:80:50:e6:49:8a:c1:d4:54:fa:49:9e:88:2e:
18:db:bc:8b:14:0e:f9:8b:99:9c:91:12:f1:de:44:51:bc:8e:
f3:3b:7c:9a:08:a4:d9:77:f6:26:1d:c6:7f:ac:61:fd:d0:cd:
bf:fd:88:72:3e:75:13:a7:f9:89:7f:6c:23:7d:f9:cb:10:31:
e8:a2:b9:6a:a5:6c:99:93:7e:7c:ff:ed:14:eb:9e:a5:37:01:
99:11:e4:fa:ce:13:eb:48:96:dc:1f:18:5d:2f:76:e2:c8:8d:
0d:03:55:41:72:65:ca:cc:89:f4:c9:58:8e:7b:0d:40:aa:25:
58:06:fa:62:ff:ba:cb:99:09:ef:04:3d:a6:d4:2b:2c:40:29:
90:b2:2e:73:d3:2d:03:80:24:40:e5:44:ad:d6:0f:a1:fa:34:
b8:c0:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:03 2025 by rpki-client