Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C_euJ2yoykiXGLZReW_YWrARm0U.roa
File: C_euJ2yoykiXGLZReW_YWrARm0U.roa (raw, json)
Hash identifier: YsuTczdlWpBVZLUUH2osKZrHCcnXkGNQm3dFXB1h/o4=
Subject key identifier: 0B:F7:AE:27:6C:A8:CA:48:97:18:B6:51:79:6F:D8:5A:B0:11:9B:45
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194C46FC4809CAE094F45E3146C4B2E1403
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C_euJ2yoykiXGLZReW_YWrARm0U.roa
Signing time: Sun 02 Feb 2025 02:14:06 +0000
ROA not before: Sun 02 Feb 2025 02:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 85.208.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:6f:c4:80:9c:ae:09:4f:45:e3:14:6c:4b:2e:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 2 02:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf7ae276ca8ca489718b651796fd85ab0119b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:cf:6a:0a:b1:61:49:6b:a5:b8:24:fd:10:
bf:c3:d6:58:fe:4c:e4:0d:bb:cd:e1:81:96:ef:74:
3f:09:cb:b2:d1:52:68:dc:33:e1:61:d1:5a:aa:b0:
c3:42:75:24:a3:01:6c:3f:2e:e6:96:0d:98:c7:07:
66:1b:5f:ca:41:4b:b5:cd:a4:25:d7:e9:59:13:a3:
ca:33:08:c4:7c:2f:23:a7:3d:5e:81:06:af:8d:40:
28:0b:d7:98:1f:a7:d9:7f:9d:13:2d:07:08:c1:f9:
ff:38:0f:5b:92:f2:4f:78:77:9f:9e:f4:fa:53:02:
64:91:0c:be:8b:67:ec:48:9d:d4:35:68:80:e5:d6:
9e:84:e9:88:7c:fd:4b:8d:da:22:03:58:6a:c1:ec:
8c:ab:66:f7:1c:51:98:ae:c2:2b:48:1a:20:2c:f5:
b3:94:ca:65:2f:0c:1a:ae:a8:bb:99:8c:c6:cf:aa:
b8:46:42:b5:c6:48:61:7c:38:dd:d7:e5:18:ab:a0:
54:85:94:1d:7b:35:af:80:2a:c4:87:28:1a:b3:d2:
3b:34:df:d9:22:48:77:35:85:26:2a:8b:55:73:01:
54:31:83:0e:c6:3c:7c:67:fd:c5:c2:c7:79:1c:7b:
b5:a8:c8:a3:83:34:f4:dc:e6:3b:87:94:2e:6f:c1:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:AE:27:6C:A8:CA:48:97:18:B6:51:79:6F:D8:5A:B0:11:9B:45
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/C_euJ2yoykiXGLZReW_YWrARm0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.8.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2d:76:02:9c:4b:42:df:06:4e:1b:c9:59:c3:cc:cc:95:2c:
e3:52:67:08:66:9d:10:10:a0:26:eb:2c:91:6f:4b:52:76:08:
40:0f:d0:6e:14:3e:20:c8:f2:03:6e:42:0f:e7:11:aa:5f:be:
cf:0c:20:97:31:09:5f:bd:40:70:f3:8a:22:8b:83:70:3d:6f:
4f:f2:e4:0c:c5:e6:ef:8a:c1:9e:d9:2c:50:d3:17:7b:00:28:
5c:38:57:d2:34:a9:1a:0e:3c:b6:11:ea:e8:ac:76:55:c0:9e:
4b:bc:2a:1e:e9:d8:dc:7c:08:19:c8:1a:67:03:13:e5:fb:96:
bf:08:1d:f9:f2:1b:5e:40:dd:a2:b8:8b:b4:47:ac:c4:3e:f0:
8d:a7:a5:18:00:54:85:9e:4c:c8:8e:3c:1f:76:c1:5b:8c:d9:
f5:eb:9c:a0:e0:e0:a8:6d:e9:02:36:84:78:a9:d2:58:68:52:
5e:f8:e0:d1:3e:b4:77:5b:d3:3f:61:77:fe:90:4b:19:8a:90:
1d:2c:c4:ff:99:49:6e:08:b0:77:6a:fd:2e:f2:95:5f:9e:d3:
41:f5:bb:4f:51:47:d8:46:33:bb:bc:a9:ef:ee:c2:a4:64:97:
65:81:77:c5:70:b5:7f:fe:5c:42:22:3c:33:ae:e1:95:6b:e4:
72:53:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:23 2025 by rpki-client