Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/50gtoTdhN9nO756-F4DP2ztZ9co.roa
File: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (raw, json)
Hash identifier: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=
Subject key identifier: E7:48:2D:A1:37:61:37:D9:CE:EF:9E:BE:17:80:CF:DB:3B:59:F5:CA
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019427B40B85DAF96465223F2A4EC4CF9CD5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/50gtoTdhN9nO756-F4DP2ztZ9co.roa
Signing time: Thu 02 Jan 2025 15:48:18 +0000
ROA not before: Thu 02 Jan 2025 15:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:0b:85:da:f9:64:65:22:3f:2a:4e:c4:cf:9c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 15:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7482da1376137d9ceef9ebe1780cfdb3b59f5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:32:e4:7c:54:8e:82:28:36:1f:3f:83:30:
75:6e:93:6d:3b:69:d4:47:47:e6:af:7c:e0:30:8c:
5a:ac:88:40:b2:e8:59:26:36:00:6c:8d:65:3e:5a:
21:7f:0c:b7:fc:75:63:fa:44:68:7e:4b:02:e7:c2:
26:30:cf:2c:fb:9c:ea:c8:b3:56:9f:63:98:a2:76:
45:3c:1a:49:9f:6f:31:29:69:3e:ad:0f:f3:35:57:
ab:71:97:b6:6b:44:db:3e:52:2f:2a:97:84:6b:26:
6e:a7:0e:6b:8e:d5:2a:cb:e3:e1:c3:b0:21:18:87:
da:02:80:89:1f:43:68:e8:d7:2d:2c:4f:74:72:7b:
69:71:c4:78:97:51:ea:d1:19:79:3d:6c:a4:25:26:
9e:14:f2:41:02:a9:66:c7:f2:6d:aa:48:28:95:fb:
4e:c4:7b:5d:8a:ab:49:9a:97:4f:bc:5f:61:e1:1b:
e5:83:4f:26:c7:5c:1d:94:f3:09:67:a1:e0:93:98:
80:0f:47:ab:fb:b7:17:6a:40:f0:b3:dc:e9:2f:80:
1f:7d:57:96:da:91:aa:78:c0:76:12:09:02:5b:cb:
27:75:94:a7:7d:18:80:e6:ff:15:9b:8e:31:98:1e:
4e:cb:a2:0b:19:94:c3:fe:42:de:e8:9f:0a:f8:dc:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:2D:A1:37:61:37:D9:CE:EF:9E:BE:17:80:CF:DB:3B:59:F5:CA
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/50gtoTdhN9nO756-F4DP2ztZ9co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4d:9e:d0:36:31:5f:7e:8a:af:23:bb:a5:55:1c:86:42:26:
03:4d:32:9c:c5:bb:16:c7:53:6c:14:63:9e:4f:1e:a3:55:02:
b3:02:65:02:55:54:0b:d1:2a:f1:1a:ba:96:77:13:21:cd:b5:
9d:95:32:fa:25:7b:fb:dd:04:63:73:c1:a4:c3:c4:7f:21:7d:
a1:45:79:51:d9:57:25:52:55:7c:3e:9d:cc:6f:ae:34:73:da:
81:9a:f7:54:25:58:36:c0:fe:7c:95:e0:c4:9e:76:7d:c6:4a:
4c:4c:ad:aa:ad:95:25:34:c2:f7:1a:97:35:99:40:d5:1a:f8:
97:99:02:33:4b:1a:d6:c4:1a:ef:fe:58:93:93:0c:22:07:48:
1f:84:70:44:81:8a:89:2b:48:e3:8c:cc:ec:e4:c5:4d:c8:00:
bf:f4:af:87:2f:38:fc:8f:fa:3d:77:00:32:58:97:b2:ee:40:
ca:42:ba:9c:7a:7b:a8:d8:e7:f5:e3:3c:15:82:0f:e1:79:7b:
93:6d:38:18:95:de:32:28:96:98:e8:45:51:0d:14:a2:29:4f:
c0:d9:f4:97:39:dc:9e:16:ff:8f:b7:03:23:7a:50:52:9d:61:
30:94:b6:af:4c:29:42:a6:e2:5a:15:d5:ae:5f:fb:0b:06:b9:
0d:ed:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:52 2025 by rpki-client