Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa
File: DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa (raw, json)
Hash identifier: +sPTotcuWF+CjCR1a5iOtYDxd/TTy8d8sIEt72jDjC4=
Subject key identifier: 0C:49:01:CB:93:58:FC:B0:4D:4B:83:67:63:C3:5D:14:AF:2B:CD:C0
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019427476F2F36D2FB6747D40CB8390E6E1B
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa
Signing time: Thu 02 Jan 2025 13:49:40 +0000
ROA not before: Thu 02 Jan 2025 13:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199614
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.10.0/24 maxlen: 24
87.254.12.0/23 maxlen: 24
87.254.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:6f:2f:36:d2:fb:67:47:d4:0c:b8:39:0e:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Jan 2 13:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4901cb9358fcb04d4b836763c35d14af2bcdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:b6:bd:0f:33:bd:ec:ed:74:e4:7f:b9:cb:
31:27:ab:13:da:a8:e2:6e:1b:60:1c:70:a6:02:56:
0f:80:2f:8d:8b:01:68:e5:73:34:4d:c9:37:a4:92:
c9:3e:83:b5:1a:13:86:61:bb:f2:61:5c:95:51:2f:
d8:d0:ca:7c:e4:bd:b8:46:69:fc:dc:ec:02:1b:99:
52:2e:2c:99:46:c7:05:71:2f:0f:a4:6c:bd:64:bc:
05:9c:17:e8:42:1e:a5:ce:b3:62:a7:ec:fd:37:ec:
c1:b4:03:a3:2f:db:79:48:e6:2e:8d:61:97:56:b0:
fc:63:a6:dc:c5:42:06:a5:88:a9:57:84:9d:03:57:
52:c0:06:8f:8b:fe:7d:5c:47:c4:df:ff:89:fe:13:
d2:a1:67:d9:50:53:11:27:ed:2e:fe:39:17:36:41:
7b:17:25:b0:aa:5c:10:b0:9e:c6:77:4e:4d:81:b6:
c3:cc:fa:95:3a:3e:29:e7:af:83:0d:60:75:8c:74:
4e:f6:46:01:17:b9:28:3c:ac:19:25:74:82:92:f6:
02:41:08:5f:8c:ef:77:96:8b:07:e3:b4:79:6e:49:
be:0c:04:96:c0:6a:f3:39:60:73:2e:3a:d6:e3:e1:
dc:68:ff:c6:98:cf:24:f2:e7:5d:f1:0a:3f:b0:20:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:01:CB:93:58:FC:B0:4D:4B:83:67:63:C3:5D:14:AF:2B:CD:C0
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/DEkBy5NY_LBNS4NnY8NdFK8rzcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.10.0/24
87.254.12.0/23
87.254.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:82:a5:69:b9:ea:c8:59:2f:a5:0e:92:68:10:99:d7:72:46:
b2:54:06:ff:4a:c6:61:8b:b8:ef:19:c9:ee:27:86:1a:d6:f8:
68:e9:4c:18:fe:09:3e:00:94:fb:91:72:be:f7:85:7c:b9:46:
4d:99:ef:a4:71:eb:8b:c3:63:43:6b:8d:93:e9:8a:60:0c:37:
f8:d0:c1:16:88:43:9d:fa:c6:b0:3f:10:c7:e5:53:06:b3:1a:
65:a7:c6:b2:45:16:e1:37:86:54:50:e5:e8:b2:cd:8e:03:06:
4f:5c:dc:78:ab:fc:a7:9b:f2:f0:ca:67:65:dd:99:42:ef:a0:
9c:e6:d7:02:1a:50:c4:34:7a:d2:5c:6c:62:41:f0:b6:d1:79:
9a:2e:58:a5:0c:ac:84:d3:1f:ea:bc:78:c3:c2:db:34:f2:35:
99:b3:ab:86:d6:8e:7c:b3:ee:62:0d:c5:92:a8:66:d9:58:35:
d5:af:7f:3b:b0:79:5f:cf:a5:2c:2e:1e:43:76:48:a3:f0:42:
3f:e7:5b:7f:10:33:e4:e6:52:bb:d6:ed:9a:aa:c5:86:d7:48:
6f:3e:6c:ab:d1:fc:38:1f:e3:f9:5d:2f:f7:66:ee:fb:8d:32:
9b:d2:e1:42:fa:e5:48:94:ac:a3:e0:c5:35:98:79:a3:a3:60:
33:3f:79:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:02:28 2025 by rpki-client