Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Eo_4p7MJeqft5BjNiUeGh1TdQBg.roa
File: Eo_4p7MJeqft5BjNiUeGh1TdQBg.roa (raw, json)
Hash identifier: AGF9MVjBmXI3ESZZILdjCLrUnDsGYnAvSPwoCJxZLfc=
Subject key identifier: 12:8F:F8:A7:B3:09:7A:A7:ED:E4:18:CD:89:47:86:87:54:DD:40:18
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01944A2CD3AAE87F3CBEA0FCC6CAFA0C1C2C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Eo_4p7MJeqft5BjNiUeGh1TdQBg.roa
Signing time: Thu 09 Jan 2025 08:27:19 +0000
ROA not before: Thu 09 Jan 2025 08:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43278
IP address blocks: 80.242.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:2c:d3:aa:e8:7f:3c:be:a0:fc:c6:ca:fa:0c:1c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 9 08:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128ff8a7b3097aa7ede418cd8947868754dd4018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:e5:a4:07:d1:e0:7d:e9:86:25:4d:96:4e:
a8:7f:ce:06:64:a1:19:3e:ac:cb:c0:74:9d:3f:09:
38:52:c5:c7:93:89:3d:b5:b2:75:6f:62:00:a2:5a:
cd:5c:79:7c:a1:5c:62:6b:cc:ff:2d:ee:59:d3:7d:
60:22:4c:68:6b:7e:2e:7a:4d:f4:0b:10:e0:6a:ec:
4d:be:b4:12:3a:f7:71:44:e9:20:f2:bf:8d:6f:f7:
00:34:fa:92:83:14:49:af:10:8b:90:e6:f9:c2:30:
54:97:16:f2:a6:3d:5b:a2:21:65:d4:28:0e:8d:7b:
ef:44:91:21:21:10:4d:89:52:48:2a:49:1f:c9:23:
46:7e:ad:fb:3b:ef:2f:75:49:3d:b7:99:94:01:a9:
16:0c:83:d1:15:4e:3a:ed:11:3e:fc:3c:fc:15:6b:
29:27:30:07:b9:cc:49:60:0e:0d:99:92:cd:89:14:
1d:e0:48:47:90:ba:ed:5c:84:76:29:8b:49:e3:50:
a2:3a:25:86:fd:b1:be:a7:3a:cb:92:41:ed:be:70:
6e:b4:c7:b0:d4:c4:44:ea:04:91:09:1c:bc:ae:8f:
1c:99:42:42:38:d4:8f:8b:70:e3:a5:97:60:17:fd:
6d:9a:f1:77:db:16:d8:b2:fc:80:25:04:f7:53:43:
71:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8F:F8:A7:B3:09:7A:A7:ED:E4:18:CD:89:47:86:87:54:DD:40:18
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Eo_4p7MJeqft5BjNiUeGh1TdQBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.59.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9f:7f:5c:39:22:8c:d3:64:a3:9a:2a:b9:4e:5b:00:4f:b7:
bd:fd:fc:8c:0d:41:22:ba:5f:67:d5:c0:ef:ed:98:3d:6b:16:
4d:81:9e:fe:aa:b8:9a:c4:e5:97:af:29:79:af:65:77:cd:0b:
eb:65:b0:80:ae:f2:98:b7:73:75:70:d0:2e:95:1a:42:ae:85:
56:8b:56:d8:5e:eb:15:d2:d2:ba:90:ce:44:ec:60:79:bf:f6:
f3:32:cc:80:32:16:dd:e5:eb:58:d5:db:9d:ef:3f:77:b9:75:
a0:f2:28:42:3c:f0:fb:02:47:d3:bc:01:13:ff:45:e6:42:c6:
eb:b4:ef:b7:3f:08:6e:dd:7a:b4:59:2d:4b:b0:d9:f0:a2:f5:
af:80:89:e0:d0:66:7c:d0:3b:23:6d:ce:8b:99:6a:bd:5b:7d:
e1:32:b1:f5:30:09:3d:2d:d1:dd:e8:f0:cf:bb:fc:37:fc:71:
53:df:9b:4c:cb:a4:8c:2d:d2:2a:c6:85:c8:03:03:4e:de:88:
38:4a:6c:bf:a0:c1:3b:98:70:db:2f:df:60:f2:2b:b0:22:6f:
1f:9d:a2:1a:73:0d:12:5b:90:9b:c3:86:13:6c:8e:75:e7:6f:
12:80:12:54:a0:69:8b:61:ae:d8:a0:b4:82:de:3e:b3:32:05:
2d:33:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:23 2025 by rpki-client