Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BOrrQeHC532zyvWQVDjGg4wRFXY.roa
File: BOrrQeHC532zyvWQVDjGg4wRFXY.roa (raw, json)
Hash identifier: hUpYcU+1hFi6a7KErTOAG8FXCJyZKoQa3BVMBJkoKck=
Subject key identifier: 04:EA:EB:41:E1:C2:E7:7D:B3:CA:F5:90:54:38:C6:83:8C:11:15:76
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220105CDC96E2CF94DB7A713433914B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BOrrQeHC532zyvWQVDjGg4wRFXY.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32167
IP address blocks: 77.111.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:5c:dc:96:e2:cf:94:db:7a:71:34:33:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04eaeb41e1c2e77db3caf5905438c6838c111576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:c7:72:f7:69:6e:4f:55:3b:99:2a:07:b9:
e7:59:81:35:d3:01:42:a9:29:b2:8c:fc:89:1d:8b:
d5:4e:63:b5:9f:ec:ab:bb:39:7a:68:bc:50:8a:a5:
64:00:21:84:76:44:6d:78:1f:e3:21:d5:a4:3f:73:
a5:6b:bc:be:20:95:b0:de:7a:95:de:69:71:79:a6:
ac:62:54:b4:0b:de:e5:68:98:6a:d9:72:17:1b:c2:
bb:48:30:23:e0:9a:4f:ea:ef:de:16:f6:a8:67:ba:
4b:71:0a:7d:1a:c2:70:19:89:df:43:db:95:41:7d:
d3:3b:f9:53:78:68:13:04:66:0f:ea:24:a2:4b:7e:
5e:e8:ee:7a:49:df:17:8c:d3:91:5d:32:6e:97:a8:
ab:a1:e7:b0:84:aa:ff:43:1c:7f:8a:91:02:41:4c:
cf:9d:1c:46:c2:bb:e6:c8:c5:df:74:d4:04:00:03:
35:86:b6:e6:4b:7b:ba:7c:14:5c:60:9a:16:e3:45:
83:d6:40:d9:96:56:e8:17:1f:8f:d4:eb:af:e2:83:
44:4d:83:a9:1f:d9:d6:2b:f3:5a:ae:c3:09:fc:00:
fd:f3:e2:52:fe:3a:83:c8:3c:bc:71:58:c5:22:45:
9a:2f:3f:74:f9:6a:71:dc:a1:ce:83:f7:30:0e:35:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:EB:41:E1:C2:E7:7D:B3:CA:F5:90:54:38:C6:83:8C:11:15:76
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/BOrrQeHC532zyvWQVDjGg4wRFXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:65:77:68:2a:7a:b5:15:76:4a:17:b6:3f:dd:e9:47:1f:76:
35:07:e0:12:af:02:9c:ad:7e:78:9e:95:94:e9:fa:70:46:ab:
18:bf:bc:84:3f:88:a1:60:4a:3d:0f:cb:ec:97:c7:a3:46:ec:
aa:94:86:d1:b1:53:a1:aa:14:fe:d3:0c:6f:44:a8:79:93:ec:
26:ed:cf:46:14:5a:ad:2d:3e:04:a9:84:e6:c7:77:28:2e:38:
87:2a:15:de:65:ad:31:49:14:2a:1e:1e:98:6a:20:6e:4c:19:
7e:c4:8d:60:3a:e9:f5:0f:d5:68:cb:46:4b:38:b5:f0:77:36:
56:8d:10:f4:07:4d:f0:c1:dc:b7:03:23:ff:ba:4d:07:be:0a:
60:03:d9:44:49:40:65:ac:eb:35:93:b4:1c:b1:2b:56:cf:fb:
39:62:1d:6c:ce:5f:c3:35:48:2f:20:f1:c6:85:9b:f0:6d:92:
19:dd:a7:94:2a:4e:6b:05:21:8c:e7:ca:70:5d:fa:c4:59:0b:
d1:5e:99:cf:e5:03:23:5b:4f:d1:41:f2:ec:c7:b2:f3:69:f5:
ce:28:96:65:78:b0:90:c0:19:bf:24:5a:97:9c:be:b3:b9:31:
73:2d:8b:e6:a5:b5:4d:e8:dc:a6:b8:dc:f7:04:b2:83:0a:90:
d8:45:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:15 2025 by rpki-client