Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa
File: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (raw, json)
Hash identifier: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=
Subject key identifier: B6:7E:98:88:4D:BF:CF:60:60:BD:DF:90:7C:79:1E:54:49:9E:99:45
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB2C4B36EA4B496BCCA2B559C70AE
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61319
IP address blocks: 213.192.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b2:c4:b3:6e:a4:b4:96:bc:ca:2b:55:9c:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b67e98884dbfcf6060bddf907c791e54499e9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:8c:3c:dc:66:ac:b1:db:6b:36:2d:34:52:
62:ca:ea:21:73:2d:70:8b:7d:02:97:34:71:52:91:
1b:ae:83:d2:36:b0:d5:97:16:ec:77:b1:2f:7e:34:
35:a2:69:7e:b5:2a:cc:72:9d:30:0b:b7:2d:22:5a:
24:01:73:1d:4c:db:c2:ed:9d:7d:61:94:7f:3f:ee:
e3:93:f0:08:24:cb:73:f6:70:19:cb:a4:05:5d:bb:
f0:d1:8b:5b:ca:df:b9:68:3a:f5:2a:12:22:58:8e:
0a:4e:cb:15:f1:32:9f:40:8d:63:ca:73:6c:56:35:
6f:7c:28:8d:0d:f0:2a:a5:a6:71:fd:77:cf:0b:10:
0f:b7:d4:7b:80:e7:7f:3e:fb:a8:33:8d:a4:11:b4:
99:5e:28:8a:bc:66:66:84:af:2b:ad:e2:2b:61:6e:
07:e5:f4:12:7e:dd:8d:75:0b:ce:77:98:11:ac:17:
38:00:04:35:ab:56:41:c5:48:6f:51:f4:f1:d6:41:
fc:a2:0e:e9:ba:ab:20:a2:07:77:5c:c8:d5:e2:07:
9f:03:05:47:fc:f3:a8:5b:87:9e:56:6c:ef:de:cb:
e7:93:df:f7:fb:83:21:3d:cf:03:a7:92:7a:47:54:
b1:2c:48:36:2d:23:f4:88:5f:05:54:83:6b:e0:40:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:98:88:4D:BF:CF:60:60:BD:DF:90:7C:79:1E:54:49:9E:99:45
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.119.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:d3:66:98:cb:fb:b4:bf:03:ab:d7:6f:97:2e:f3:e9:da:53:
f3:22:80:84:6d:e2:b1:c4:47:4c:00:b8:e1:f0:5c:23:17:d0:
a7:1d:f5:72:b8:c2:54:04:29:40:1c:53:72:4c:86:b1:2b:de:
0d:db:73:6d:5b:53:20:aa:b3:d2:6f:f7:f1:0d:9f:58:4a:b0:
f1:2b:de:6c:68:8e:53:68:ea:ce:ed:65:63:0f:f6:98:39:ff:
c9:a2:33:74:c7:d0:54:86:96:fb:2b:7a:73:fb:91:42:3a:c7:
1a:e7:22:1a:5f:cb:b4:45:36:8a:a6:aa:eb:e1:c7:b8:37:ba:
8d:b2:b2:70:ba:08:f9:eb:d0:00:f1:69:41:83:db:14:35:a5:
53:49:42:2c:3a:26:93:28:05:77:c8:a7:57:72:59:fa:dd:2c:
73:65:8d:4c:9c:d8:37:36:3c:f5:3f:b8:17:f4:fe:22:03:fe:
dd:71:2b:0c:29:e1:3c:ed:e6:35:da:c9:a1:bb:6b:3a:f1:39:
67:53:34:f0:a9:0d:d6:f0:d2:5b:1d:96:c0:34:96:82:7b:9f:
87:cf:55:21:b2:4b:68:5f:e1:4a:4c:02:a8:2b:bd:41:2d:00:
31:65:0b:c7:37:ea:ea:de:c9:ff:90:3f:b4:13:13:3f:f8:ed:
d1:fe:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:55 2025 by rpki-client