Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa
File: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (raw, json)
Hash identifier: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=
Subject key identifier: 2E:55:52:7C:5D:B3:6E:B7:E2:4D:7B:20:A4:47:C7:83:C8:94:80:58
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB28FE27C4DD04C576371CB473C87
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50828
IP address blocks: 213.192.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:8f:e2:7c:4d:d0:4c:57:63:71:cb:47:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e55527c5db36eb7e24d7b20a447c783c8948058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d8:e5:e2:b7:63:fc:1c:d8:26:ba:10:e5:51:
fd:af:33:5b:d5:00:2e:92:7e:10:3a:06:93:d3:0b:
75:f2:ef:c7:64:33:28:3d:be:e5:15:33:f8:6b:be:
6d:bd:30:c9:42:f4:01:16:26:de:93:fb:da:75:62:
41:f8:47:8c:d3:0c:3e:40:56:d1:52:cb:54:be:8a:
c6:c4:66:0a:c6:bf:f2:a2:7b:12:46:2f:ed:b8:1e:
bd:07:f8:7d:86:66:55:09:c5:e8:37:cd:5a:13:8d:
43:4d:d8:c0:2a:41:83:44:52:bb:ca:38:a3:3e:82:
17:d9:5e:b6:88:2c:d9:e2:d8:ad:d2:cb:23:b8:a3:
45:9f:5a:ec:22:1f:9a:75:1d:3e:d0:7d:2c:0e:b1:
46:b7:db:db:56:ef:78:ef:e0:a8:13:79:d7:31:36:
5d:c3:5e:a0:34:db:12:8d:9e:6f:56:a3:d0:47:96:
8b:f2:f6:da:62:21:93:72:04:1d:ad:1e:05:55:19:
80:9a:75:de:f5:87:07:6e:95:73:8e:b9:b4:38:eb:
31:3a:d5:c1:98:ea:ee:69:f6:20:c9:80:77:61:7e:
ab:b6:db:53:e7:8b:4d:f6:63:e4:87:c0:dc:02:6f:
e8:4f:cf:92:65:0b:17:0e:29:bb:ce:e8:ab:9a:c4:
ed:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:55:52:7C:5D:B3:6E:B7:E2:4D:7B:20:A4:47:C7:83:C8:94:80:58
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3a:43:b4:86:3d:ce:39:18:cc:fb:10:ab:28:2f:70:a7:47:
71:1c:a2:84:3f:73:80:6d:4a:c2:e5:c5:ea:26:2d:fe:88:68:
7a:0d:d5:8f:c9:c4:d7:3b:15:ec:ef:22:83:26:5e:6a:b6:97:
ec:cd:bd:3d:33:a7:d8:2f:db:a3:ac:4d:c6:8f:38:7c:a9:af:
30:06:05:d1:1a:c6:dd:f9:fc:4b:6c:a3:95:2b:d3:d0:89:42:
51:ec:72:25:0b:60:24:ae:ca:bf:fc:21:d7:35:26:7a:8d:5d:
3c:01:84:a0:a5:cf:d5:76:66:e5:46:f1:06:6a:8f:25:81:62:
dd:04:c9:fe:1f:f1:15:35:9a:7a:51:50:05:de:13:48:07:a4:
7f:65:4b:f8:a4:65:7c:e2:48:57:8d:9f:55:d7:f0:5b:1c:57:
40:bc:4a:d7:04:a9:cf:2e:5c:97:22:5a:a6:26:59:ea:69:25:
4c:58:af:3c:27:9f:34:97:52:7c:62:6a:da:a8:ca:f2:6f:b7:
1f:3f:85:41:5e:33:49:18:fd:e9:df:00:77:59:b3:f1:34:b4:
df:1d:45:ba:7c:a3:ce:29:5e:71:c0:9f:bd:c6:40:0c:50:26:
09:6b:5f:dc:d2:24:19:1d:f3:74:65:6b:ea:a5:c5:6c:0e:70:
c0:b7:d4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:09 2025 by rpki-client