Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsUMmQMYpeixGKb52k5ngeniNTM.roa
File: EsUMmQMYpeixGKb52k5ngeniNTM.roa (raw, json)
Hash identifier: 1OWzmzoh+HMX7mxBUtn9ui7/0GLwFqle4CGaQQC8L/w=
Subject key identifier: 12:C5:0C:99:03:18:A5:E8:B1:18:A6:F9:DA:4E:67:81:E9:E2:35:33
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0195275121160B565781A0DC725954E9C84A
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsUMmQMYpeixGKb52k5ngeniNTM.roa
Signing time: Fri 21 Feb 2025 07:03:02 +0000
ROA not before: Fri 21 Feb 2025 07:03:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 77.242.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:51:21:16:0b:56:57:81:a0:dc:72:59:54:e9:c8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 21 07:03:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c50c990318a5e8b118a6f9da4e6781e9e23533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:c8:21:7c:47:55:11:4a:85:a9:1e:82:37:
ed:f7:34:3c:f4:28:8a:a5:32:7c:8a:00:25:30:a3:
17:fa:e7:e8:77:57:47:0d:f8:47:12:00:52:84:ab:
4c:9f:5a:f4:2e:e4:26:d6:2b:b7:27:36:16:b3:59:
fa:60:33:e4:f9:98:d8:93:2c:83:2e:10:44:76:2f:
b3:c9:02:cd:75:34:ad:47:73:25:27:d7:39:7e:39:
17:c7:7f:b5:c9:28:ed:eb:e4:12:a7:6f:d8:35:b5:
52:5b:d4:6d:e6:4e:aa:8e:08:bd:9f:b4:26:ec:e5:
e8:a4:c0:1b:a4:4c:dc:8f:b3:15:f8:45:f0:6a:cf:
d8:7c:cc:b0:d0:2a:33:51:97:17:c5:62:f6:8d:44:
83:d2:22:28:9f:36:0c:c5:63:e4:74:c4:a6:8c:bc:
49:f2:1a:f7:b0:04:4d:06:0c:bf:47:d3:5e:76:6f:
2e:ca:8f:fd:f1:1f:f0:28:bc:21:93:c7:a3:95:7d:
bd:c0:60:9e:61:e4:9a:cd:bd:dd:94:49:60:2e:63:
87:64:f5:7e:c2:25:6e:48:a3:e8:66:ce:f4:28:a3:
dc:06:8c:de:e1:9c:f8:0b:ee:9d:b3:c3:85:f7:21:
62:a8:58:d6:94:ab:00:d8:7a:2a:8f:f8:ed:6f:47:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:0C:99:03:18:A5:E8:B1:18:A6:F9:DA:4E:67:81:E9:E2:35:33
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/EsUMmQMYpeixGKb52k5ngeniNTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:22:ae:6a:38:7d:ac:9e:ff:a7:20:67:46:e5:7f:71:79:de:
3a:48:3a:97:69:75:81:c1:12:df:81:92:bb:58:4f:8f:85:3a:
0b:20:93:f7:07:61:23:fd:4d:6d:19:e2:a5:c0:cb:fd:36:3c:
a1:80:cd:5a:66:29:71:c9:46:0d:b2:80:92:6c:7b:c2:31:fb:
82:27:2f:86:ca:fc:70:4e:7a:d0:ca:36:fe:c0:46:31:23:fc:
7e:e8:02:7e:88:b0:16:f7:ab:74:87:a2:2c:2a:37:98:32:ba:
71:ed:09:fd:12:2d:91:27:2f:ad:db:fd:24:79:13:8b:0b:4c:
0e:cb:f9:9e:a0:aa:fc:46:41:e1:27:2c:ef:35:fe:9e:a3:89:
12:9c:d5:cf:13:91:5c:e8:18:03:19:18:9c:bc:90:90:5c:2d:
1e:9a:75:e8:2b:43:73:9d:cf:fe:e2:82:3e:a1:f0:f7:e4:fc:
57:04:5a:a0:d5:d3:00:fa:19:e1:51:1f:67:6e:13:c5:00:4e:
7f:43:ad:4b:59:46:70:76:fa:d5:40:f6:ad:be:a3:15:94:5c:
c0:86:5d:f7:52:27:ac:4b:71:7c:d5:5e:0a:e0:6d:f3:ea:1f:
91:e7:79:da:9c:9b:c5:25:73:c8:3b:4e:83:21:cb:1b:47:01:
b2:5f:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:36 2025 by rpki-client