Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Eu5ZsQqQeJfYHY48JMNVq2GojQw.roa
File: Eu5ZsQqQeJfYHY48JMNVq2GojQw.roa (raw, json)
Hash identifier: RyO7jNMDWKyv2IbJbupinMFdx7ljQWfBhlh2R8wW870=
Subject key identifier: 12:EE:59:B1:0A:90:78:97:D8:1D:8E:3C:24:C3:55:AB:61:A8:8D:0C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01941F8C95C3B5E708987C003264F55F05AA
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Eu5ZsQqQeJfYHY48JMNVq2GojQw.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205175
IP address blocks: 45.155.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:95:c3:b5:e7:08:98:7c:00:32:64:f5:5f:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12ee59b10a907897d81d8e3c24c355ab61a88d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:42:e1:cb:53:69:89:73:b6:20:2a:d4:ba:
31:28:c5:21:7e:2d:e3:67:05:3e:e7:29:4e:16:56:
79:53:c8:fd:af:22:6d:fd:83:49:6a:47:9d:3a:c5:
20:e9:b6:73:29:ce:dd:1d:7a:75:01:55:dd:a6:bd:
f3:cc:bb:22:fe:fd:a6:56:b3:87:67:b5:85:cc:f6:
5f:1b:c7:71:4b:fb:0a:36:73:a9:91:1e:63:a3:42:
cc:a3:ff:88:c3:a8:d9:7c:76:6b:97:80:4c:09:79:
aa:02:1a:cf:99:78:42:bf:0a:5a:37:2c:d3:8f:76:
96:4a:77:0d:25:fa:18:4d:41:3e:f0:15:82:82:1e:
8e:49:b6:73:06:27:76:a6:1e:9b:73:b7:50:8a:04:
53:e6:28:74:51:fa:7b:dc:a3:3e:02:de:bd:e7:cc:
89:64:0e:ec:63:8d:0b:da:48:d5:92:6f:bf:e0:eb:
61:8b:f1:5a:99:7b:7c:88:40:54:3c:6a:0a:66:20:
36:c2:20:00:44:d6:13:08:0e:83:1c:af:4a:ba:c8:
79:19:d3:fb:11:81:47:f1:de:a5:45:5b:b8:cf:a9:
fe:4a:b9:6b:68:cc:97:15:90:e9:47:a0:17:4c:de:
78:b2:98:f0:0f:4f:50:a6:fb:97:e9:3b:fc:4d:d1:
e4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:59:B1:0A:90:78:97:D8:1D:8E:3C:24:C3:55:AB:61:A8:8D:0C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/Eu5ZsQqQeJfYHY48JMNVq2GojQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c0:bd:f9:e4:c0:30:bf:1d:3d:96:e6:38:61:37:b2:64:33:
25:09:d9:b1:5e:50:db:dc:8c:68:67:79:98:4a:b4:7c:0c:9e:
6d:e6:a7:44:0e:d0:3b:d2:68:29:fa:87:25:7c:5c:16:4d:37:
f6:b1:39:e4:b9:02:8c:f1:b8:1c:4c:59:fa:00:d8:2b:16:9a:
a8:83:6c:b8:91:23:c7:66:04:89:86:6b:f0:1a:ae:25:23:d8:
3f:9a:24:fd:bc:5a:86:8f:47:6a:3d:40:01:c3:f7:07:d9:e4:
5b:ef:63:98:31:6c:c3:a3:9b:0e:b4:3e:ba:17:12:9f:30:cb:
7e:91:60:3f:96:90:13:cf:0f:3b:37:2b:72:1c:95:b2:df:d8:
7f:93:1c:31:48:ab:bf:4f:5c:9d:b7:18:b6:b7:44:c4:b0:b1:
36:7a:25:b4:d2:19:82:f5:50:82:e8:4c:7e:28:ea:d0:5a:7b:
cc:d6:c1:3d:c6:83:e6:54:ae:12:7a:ed:ac:84:c6:d4:6d:1f:
ab:cd:32:47:1f:50:e0:7a:df:8c:0e:07:d5:c1:17:99:bc:ba:
6e:3a:1a:b9:4a:d2:1d:0e:33:3e:30:fd:71:38:ac:e2:a6:03:
13:46:f1:27:d6:d8:88:80:80:45:ff:dd:66:fe:ab:6d:3b:53:
7e:30:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:21 2025 by rpki-client