Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ENQ20xMkXGryE3-R9yWMozdkmQw.roa
File: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (raw, json)
Hash identifier: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=
Subject key identifier: 10:D4:36:D3:13:24:5C:6A:F2:13:7F:91:F7:25:8C:A3:37:64:99:0C
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 0194228E30F4231491901B896C815CAA29BC
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ENQ20xMkXGryE3-R9yWMozdkmQw.roa
Signing time: Wed 01 Jan 2025 15:48:51 +0000
ROA not before: Wed 01 Jan 2025 15:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27363
IP address blocks: 193.134.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:30:f4:23:14:91:90:1b:89:6c:81:5c:aa:29:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10d436d313245c6af2137f91f7258ca33764990c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:c9:d6:d2:fa:89:3f:e1:7d:84:ab:79:07:
af:a4:fe:5f:b5:0f:47:c0:a4:8d:5d:88:a9:e5:be:
4e:64:3f:d1:81:e7:34:66:60:60:8f:2f:75:6d:d7:
ea:e2:3e:25:be:1e:03:5a:35:29:ab:93:ab:8d:02:
34:66:70:0b:7b:d5:7a:71:2a:68:01:1f:e4:4e:cc:
4e:42:4c:7c:49:4e:f2:bc:2a:27:0b:6d:6d:dd:11:
83:63:fd:03:17:e9:95:c6:3c:fb:fc:d2:67:bc:e4:
a2:97:69:03:ed:22:45:76:4a:7a:e6:66:10:4d:6a:
65:bf:4e:a0:31:b2:21:6d:6d:98:72:ed:b7:e2:8e:
d1:59:ec:71:f0:a3:ae:fb:36:cb:d2:d3:f4:2e:7f:
e8:40:c5:f3:04:32:bd:c4:f5:09:d2:72:c6:19:b9:
2d:d0:68:32:46:eb:dd:f9:06:0a:0b:bc:5f:1d:d4:
81:0e:a4:a5:84:7f:44:b8:2a:99:72:b7:85:5d:01:
5b:53:4c:29:b8:ef:5b:41:7c:1e:29:6b:77:a9:98:
72:47:02:7f:ac:20:00:37:f5:c6:37:6b:9f:79:60:
eb:b4:48:71:65:b4:98:7d:bb:b9:02:5a:05:fb:1c:
a5:98:1d:87:ef:f9:5b:bb:bc:ee:1d:c0:ee:a9:5e:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D4:36:D3:13:24:5C:6A:F2:13:7F:91:F7:25:8C:A3:37:64:99:0C
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/ENQ20xMkXGryE3-R9yWMozdkmQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.162.0/24
Signature Algorithm: sha256WithRSAEncryption
75:09:a1:d9:43:c8:da:24:34:bb:b3:53:0d:ef:0c:93:47:96:
9f:af:26:92:1b:1d:c7:5d:b6:49:fb:cc:89:2b:05:85:b4:88:
35:e2:69:81:db:c4:87:8e:61:e6:92:ee:c4:1f:16:4a:ab:9e:
f6:4a:79:58:84:c4:09:9a:7a:71:29:a0:a6:f9:11:31:b5:22:
0e:e7:e4:38:c8:00:f3:55:f2:79:31:ac:ba:d6:f9:30:dc:f6:
8b:fe:85:cd:02:01:32:7e:00:0a:20:c3:f3:1c:58:b9:82:f3:
c5:d2:65:80:a1:7a:87:76:2b:cd:8f:97:18:55:2b:1d:58:68:
83:22:88:0a:f7:14:b5:d0:82:48:bf:fb:d0:37:87:d2:73:50:
35:69:9f:34:5d:ba:56:e1:50:29:f2:6b:9f:48:46:2c:57:ea:
b6:a7:8c:a6:85:7e:1a:a1:d9:9c:5f:72:a5:f5:da:4a:ca:2d:
ad:7a:c6:4b:b3:21:31:00:e8:9d:f0:8f:f8:63:51:fa:de:35:
87:d2:31:4b:18:63:2b:8a:79:ed:9d:c1:42:e7:0a:e1:23:11:
a2:f8:43:ce:cd:5b:2c:01:40:cf:4f:85:3b:5d:d5:d6:c0:d0:
9a:5a:07:eb:bc:f1:c1:c0:bc:82:2e:7a:c3:15:b2:36:75:aa:
c1:ab:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:36 2025 by rpki-client