Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LJwdVNhMM-3xThCTYPWEErFY8Oo.roa
File: LJwdVNhMM-3xThCTYPWEErFY8Oo.roa (raw, json)
Hash identifier: fpbNSxxByeA8TvUEQ2FUtKpBUT9kT+BA1v2c1DN+2d8=
Subject key identifier: 2C:9C:1D:54:D8:4C:33:ED:F1:4E:10:93:60:F5:84:12:B1:58:F0:EA
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB2F08339019F2A519A71B8E74DE9
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LJwdVNhMM-3xThCTYPWEErFY8Oo.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197502
IP address blocks: 213.192.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:f0:83:39:01:9f:2a:51:9a:71:b8:e7:4d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c9c1d54d84c33edf14e109360f58412b158f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a2:b8:15:63:39:52:5a:ef:9a:78:9b:17:e2:
53:28:a0:b3:84:ad:24:36:75:87:f2:8e:fa:a0:98:
6a:c4:98:30:21:db:69:16:44:5f:fa:c4:8d:3d:30:
07:ae:cb:90:f5:c2:8c:20:a4:b3:37:e5:84:0d:0e:
03:21:e5:ec:49:78:0a:7f:1c:35:43:fd:75:0f:c7:
9b:9b:73:e2:0f:3f:44:fa:a7:bc:f3:08:1b:45:95:
a3:8f:8f:ea:97:56:ff:73:b3:d0:79:e3:4c:99:46:
9a:74:d2:8e:08:0c:48:95:4e:02:c5:5e:5b:fd:b3:
0c:2c:88:0f:c9:7f:a3:18:0b:31:cb:84:9f:17:da:
4a:a6:58:11:5c:7e:b3:f2:2b:d6:0c:55:fc:d1:a0:
cc:b5:39:a5:f3:e1:91:16:f3:a0:9a:77:33:f2:ea:
90:0f:0b:b7:7b:bd:e6:25:5d:29:f2:e7:18:08:dd:
42:0f:d5:4a:ad:9e:94:0b:b9:99:6e:6b:6e:4c:b4:
c3:e6:fa:fe:00:2a:6e:73:19:23:89:91:07:ac:6d:
7a:e4:30:a6:ab:cd:7c:2c:c0:ea:11:91:9b:2a:f4:
1c:20:81:8a:ad:5c:c5:21:5e:10:a2:12:6d:6c:c1:
51:45:4e:c7:79:2c:c0:12:8d:da:c5:36:c0:bd:50:
92:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9C:1D:54:D8:4C:33:ED:F1:4E:10:93:60:F5:84:12:B1:58:F0:EA
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LJwdVNhMM-3xThCTYPWEErFY8Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.116.0/23
Signature Algorithm: sha256WithRSAEncryption
30:00:76:9c:6a:14:e4:b6:f4:96:eb:bf:c3:22:75:6e:a2:ad:
44:d4:89:c5:9a:44:a7:86:45:dd:94:2e:55:e6:ed:65:31:bc:
3f:94:91:c8:1f:83:ac:dd:4f:60:93:1a:9d:99:68:d6:62:d2:
8a:02:4c:89:4d:e6:89:02:fb:3f:4d:12:87:7b:0f:b3:4d:cb:
e0:a5:03:17:07:68:a2:19:17:de:d0:a4:49:f5:9a:55:69:48:
d6:6b:09:86:ea:85:aa:9e:7c:91:ed:6f:f4:49:74:81:e4:37:
f2:26:df:65:e8:1f:8a:e3:2e:f3:24:8e:c9:19:2b:b0:a7:5a:
fc:39:8b:29:2d:e8:2f:bf:a5:f9:d1:34:30:32:a7:36:19:86:
ec:16:10:10:c5:6c:6d:44:d9:a0:d5:80:67:14:ee:31:db:84:
5a:e7:6e:b5:d9:36:14:40:91:69:6b:93:74:e2:84:39:20:0e:
bd:07:06:8d:05:d2:fb:0d:94:b1:1e:e9:52:cf:26:04:69:07:
ce:d8:65:1f:25:47:7d:75:4c:d2:ad:a1:6a:49:f6:8d:ab:9d:
48:89:aa:e6:4f:29:c3:1e:e7:7a:c8:ac:00:cb:25:60:8d:55:
ee:37:c9:53:b2:3d:6c:98:5e:90:a0:89:60:16:cb:77:2c:f1:
b7:f1:bd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:35 2025 by rpki-client