Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/epa_afuyCzBcfU-VTREOHg-Um7o.roa
File: epa_afuyCzBcfU-VTREOHg-Um7o.roa (raw, json)
Hash identifier: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=
Subject key identifier: 7A:96:BF:69:FB:B2:0B:30:5C:7D:4F:95:4D:11:0E:1E:0F:94:9B:BA
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019427483BE2DCB65B7B630593F748EB57BE
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/epa_afuyCzBcfU-VTREOHg-Um7o.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.188.192.0/22 maxlen: 22
195.211.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3b:e2:dc:b6:5b:7b:63:05:93:f7:48:eb:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a96bf69fbb20b305c7d4f954d110e1e0f949bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:04:a2:94:56:b8:85:41:0e:10:10:71:83:61:
a7:14:4a:2b:c4:77:9b:a2:05:66:20:04:39:6b:b6:
65:cf:2c:b3:ec:8c:82:bd:5e:0a:26:c9:3b:90:21:
ba:c9:cd:b6:ad:6e:52:68:11:8b:81:2f:62:3d:11:
c4:f9:25:ce:37:f6:52:b9:cb:a7:4b:6d:02:8f:22:
32:28:ad:24:ba:bb:4b:07:d3:41:f9:fa:fe:1e:e5:
0d:f2:d6:83:c9:0d:e9:5e:d2:ce:5b:a5:8a:ab:10:
e6:11:63:95:eb:6c:7a:d3:3f:a6:cf:5e:95:40:53:
43:a1:3c:8c:1c:46:11:10:c4:45:cf:c5:0b:eb:11:
aa:1d:f0:eb:f7:35:a4:bd:8f:90:c2:66:e0:85:ec:
ff:72:ff:db:83:b7:22:9a:a6:42:e7:4a:6c:0a:05:
83:e3:ac:88:2f:a3:51:6c:b3:2d:47:95:e9:68:0a:
dd:2f:62:f4:06:d5:d8:c7:05:ed:2a:2b:4a:6e:27:
13:7f:2a:4e:d2:bd:35:0b:45:e8:c2:3a:94:62:26:
42:ed:b3:05:ee:61:61:0f:6a:0a:58:0a:aa:3e:90:
9d:9a:64:d0:b4:a9:f0:e4:2e:11:de:05:82:9b:c7:
9c:f1:37:76:8a:d7:18:b8:78:4b:b0:04:c9:b7:88:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:96:BF:69:FB:B2:0B:30:5C:7D:4F:95:4D:11:0E:1E:0F:94:9B:BA
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/epa_afuyCzBcfU-VTREOHg-Um7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.192.0/22
195.211.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:55:3b:c9:6d:0b:a4:eb:ec:c3:c5:9d:e1:e1:1f:2c:40:b5:
45:14:c8:35:2b:41:17:65:d5:63:b7:1b:70:d0:87:dd:49:fe:
19:91:bf:fb:5c:ba:3f:7b:3a:e8:ae:8b:ea:d0:86:08:7d:e2:
7d:85:e7:ef:9d:5b:9a:7c:18:04:59:8a:00:a4:56:31:b8:72:
cb:3f:1b:1c:87:0a:54:2e:8f:9c:f0:ca:9b:29:b0:20:ca:fc:
c2:0a:30:c7:01:5d:ef:8e:d9:46:90:37:98:53:e9:0b:e5:5b:
09:85:ee:0b:39:80:3a:5c:1e:25:8d:f8:8c:58:26:de:77:64:
2c:75:7e:4e:4b:48:6b:84:b9:54:68:e1:48:93:ee:40:64:df:
d9:e0:25:23:35:ec:68:78:40:8c:7b:6a:eb:a0:b5:fc:53:0d:
bd:fd:03:bd:75:74:06:80:85:31:fe:90:7d:ac:e6:ae:19:bf:
e0:74:4d:e1:1f:c2:b0:06:b3:b7:9c:ab:3c:2a:39:d2:5d:0d:
e3:99:23:ee:a5:d9:8e:bc:5a:ae:16:a7:d2:1f:61:bc:95:61:
a5:a4:13:93:e2:f4:46:2c:20:3b:9d:69:dd:b8:f1:e5:c9:0e:
cf:a7:d6:45:94:dc:80:92:e8:55:52:80:5c:5f:4f:6d:90:29:
f4:03:99:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:01 2025 by rpki-client