Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/0na0952KGc1H37d43sfmQKJLL00.roa
File: 0na0952KGc1H37d43sfmQKJLL00.roa (raw, json)
Hash identifier: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=
Subject key identifier: D2:76:B4:F7:9D:8A:19:CD:47:DF:B7:78:DE:C7:E6:40:A2:4B:2F:4D
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40AA52D8B28B714A2BEAFA8743618
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/0na0952KGc1H37d43sfmQKJLL00.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 249
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0a:a5:2d:8b:28:b7:14:a2:be:af:a8:74:36:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d276b4f79d8a19cd47dfb778dec7e640a24b2f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:f6:45:14:c6:43:60:35:30:e4:8a:97:95:
fb:b0:18:c4:2f:3c:ae:a8:28:57:55:1c:b4:7e:0c:
46:5c:1d:d9:b5:fa:b5:9c:81:cb:94:21:fd:81:12:
93:f6:54:93:0a:01:00:dc:44:78:9e:82:06:7e:be:
56:4b:29:39:f7:5e:c8:00:69:60:b7:96:97:63:7a:
72:9f:fd:2e:cc:90:e6:6f:55:3c:6b:18:88:c4:f5:
9a:dd:77:e6:06:ef:53:3f:a0:fd:f7:76:49:4b:0c:
6a:8d:25:5f:22:7d:35:d6:b9:e1:7a:19:46:7d:e5:
f5:40:64:15:c9:20:a5:29:2d:ae:3a:e8:bf:cf:61:
d1:97:4d:1a:63:aa:d6:8f:6b:29:78:47:fe:44:a5:
f6:30:65:8d:c4:38:bf:5e:9f:a6:5d:7b:e4:cb:8f:
b4:1c:4d:2e:5b:b3:49:c3:c6:5e:57:b4:69:46:7f:
bd:35:f2:b0:27:4b:fa:7a:21:a8:3c:4b:29:41:2d:
fb:84:06:03:ed:60:96:91:8d:bf:f4:e9:85:4f:a6:
0f:9a:f1:66:ce:f7:bf:58:8d:ab:77:f9:a6:3c:35:
d6:60:f6:48:ea:5a:c5:3c:6e:2d:b5:e0:fa:c9:9e:
bd:a0:27:df:ea:8e:95:dd:69:43:3f:cc:21:94:88:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:B4:F7:9D:8A:19:CD:47:DF:B7:78:DE:C7:E6:40:A2:4B:2F:4D
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/0na0952KGc1H37d43sfmQKJLL00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:fb:a1:7f:b0:0f:1f:a6:85:9c:51:53:e1:c6:38:89:f2:8c:
82:36:05:92:39:f6:a0:19:08:ff:89:f9:3a:8e:32:37:1b:60:
95:0c:5b:bd:48:00:5f:c5:5d:a4:ac:b0:ff:90:84:bb:15:81:
84:b1:5c:ad:bf:34:79:4d:77:d8:fb:c9:2d:0f:e0:b6:44:bf:
b7:da:dd:8b:40:1b:a8:62:89:4a:5c:78:56:ee:b9:4b:4d:0b:
b9:02:31:c4:36:4c:6c:87:c4:d3:83:9a:9e:2b:73:90:8f:4a:
79:5e:3c:65:a7:67:4f:8f:4c:4e:bb:86:2a:92:46:5f:1d:d0:
05:73:a8:4a:75:2d:bc:c3:af:e4:d4:67:1c:9e:fd:9a:87:ee:
e5:50:71:ff:b5:1a:50:08:8f:04:4d:e3:00:a3:00:80:93:6a:
7a:29:f2:2a:ce:6f:01:76:cb:5e:14:04:d4:9a:1f:07:bc:73:
21:74:d1:37:9f:06:8f:f4:bf:32:9d:ce:61:bc:17:37:e6:ed:
52:74:60:f3:8b:24:b6:bf:e5:57:1c:57:7c:c5:4f:10:6f:cc:
2e:49:3e:25:88:89:51:d4:b5:27:3f:09:fc:9f:3a:82:8c:00:
5e:5b:b6:5e:4c:40:1a:f0:5f:c6:fa:d5:70:ae:6b:e2:1b:8b:
7f:00:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:42 2025 by rpki-client