Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/egJez3AEE17hCNzFwTYyy-yFWOk.roa
File: egJez3AEE17hCNzFwTYyy-yFWOk.roa (raw, json)
Hash identifier: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=
Subject key identifier: 7A:02:5E:CF:70:04:13:5E:E1:08:DC:C5:C1:36:32:CB:EC:85:58:E9
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0194258E52ED3BD7C1B28132C19D61195DE8
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/egJez3AEE17hCNzFwTYyy-yFWOk.roa
Signing time: Thu 02 Jan 2025 05:47:51 +0000
ROA not before: Thu 02 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49169
IP address blocks: 91.212.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:52:ed:3b:d7:c1:b2:81:32:c1:9d:61:19:5d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jan 2 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a025ecf7004135ee108dcc5c13632cbec8558e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:1b:e4:91:4b:82:9b:e2:b9:e2:23:0d:b8:
d6:ae:3f:59:39:62:ac:47:50:da:69:f4:f0:11:15:
0f:0a:3a:28:b9:77:00:7c:29:ab:ed:bc:88:8c:d5:
66:63:42:62:f1:e4:64:c5:6d:e5:86:17:7c:9f:0b:
99:a0:85:c7:14:41:de:e4:f2:83:08:42:da:18:de:
e7:aa:9a:47:ad:0f:d7:d5:d5:f3:53:3d:8b:c1:a6:
58:59:4d:75:05:f9:c4:8f:ec:a5:9c:ed:3e:61:97:
f2:40:63:c2:a3:ca:a0:3d:3a:9f:ef:43:d4:34:48:
89:2e:20:3a:41:08:1d:a9:29:49:2f:4e:a9:95:c9:
b9:9f:c3:1f:ec:d8:cf:83:e7:56:d8:8d:05:b3:74:
e1:9f:fc:78:d4:26:06:a9:47:a1:da:3b:8d:40:0c:
9c:af:52:1b:67:97:f3:7d:69:82:c1:1b:62:95:83:
e9:a9:a6:32:ad:da:d2:ea:67:59:6e:67:01:25:c3:
9b:31:bd:7c:c0:37:a0:41:01:ef:50:83:0c:e1:17:
a7:aa:1e:32:48:16:0c:53:c9:cc:6e:de:95:11:03:
3d:5c:50:ee:69:32:b7:6e:03:5d:ee:3b:46:a6:8f:
9e:24:46:7a:90:f4:e7:78:76:db:26:f0:ea:67:59:
2b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:02:5E:CF:70:04:13:5E:E1:08:DC:C5:C1:36:32:CB:EC:85:58:E9
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/egJez3AEE17hCNzFwTYyy-yFWOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.162.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f4:e7:c3:94:2e:22:25:f7:f3:87:c0:e0:6f:69:08:e9:0d:
5c:61:11:30:84:27:ff:f9:a6:e8:4c:e7:4f:80:20:7d:33:bc:
0c:70:a1:fd:d6:53:1f:d0:e7:85:f8:21:27:13:ad:9e:bf:6a:
90:f2:be:46:c8:0a:d1:09:3f:94:91:04:d7:33:13:44:20:60:
ee:22:c9:58:35:cd:0f:0b:b7:80:79:f9:21:95:3b:f9:7e:c2:
a2:9e:cd:17:08:53:e3:88:6c:a4:f2:7f:d7:37:6b:47:59:66:
d3:d6:7b:e5:ae:a0:35:ad:ce:34:a3:aa:cd:a6:d6:aa:b3:1f:
cd:61:66:52:cb:c0:55:00:0d:7e:12:a5:4a:19:bc:67:30:3d:
35:5d:38:38:6e:83:2d:fa:8e:59:41:31:f7:e0:5a:5a:48:37:
af:45:12:62:2d:57:6e:bc:c1:06:fd:b1:9f:00:f6:8c:02:7f:
82:c3:f4:25:3d:f9:30:f8:51:80:20:10:ed:61:1d:13:65:0e:
2d:50:32:f7:b6:7d:b9:c7:9f:03:49:9e:ed:ae:67:6b:f2:14:
af:dc:46:fc:d7:e8:07:e3:d1:04:1e:a3:a5:df:7f:64:27:bb:
15:33:dc:dd:1b:a0:41:e7:ee:30:47:de:42:5f:51:16:7e:8e:
cc:d8:94:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:04 2025 by rpki-client