Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa
File: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (raw, json)
Hash identifier: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=
Subject key identifier: 12:8A:8E:2C:96:73:75:0D:E2:F8:CF:79:04:7E:99:A9:7E:CF:AB:EA
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 019423D7A49195788A86680F15BAE97924B0
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa
Signing time: Wed 01 Jan 2025 21:48:42 +0000
ROA not before: Wed 01 Jan 2025 21:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 2.59.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a4:91:95:78:8a:86:68:0f:15:ba:e9:79:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Jan 1 21:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128a8e2c9673750de2f8cf79047e99a97ecfabea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:26:d0:7d:3e:94:1b:a0:2f:17:71:c1:4d:
13:85:ce:06:bf:65:30:4c:87:df:ab:29:27:a2:67:
03:9e:14:f2:03:66:08:c0:8b:51:58:cb:47:37:71:
e9:00:89:d5:49:85:86:c5:b9:c9:ce:6d:2b:28:37:
57:84:73:1a:9f:ef:cc:c0:62:5c:53:88:ad:f6:90:
3f:89:46:ba:01:c6:c3:4e:99:1e:3c:6e:7d:76:6c:
2d:ad:d4:1b:8b:7b:5c:b2:2c:9b:4d:7e:ab:46:4b:
d3:5f:01:bc:f8:62:9f:16:75:70:29:c9:08:b2:e9:
f3:47:3f:ec:c4:57:78:46:14:11:d3:cc:66:71:06:
86:af:68:fb:ea:c8:7e:4a:ff:04:78:5b:a3:51:6c:
af:70:de:cd:65:01:48:ca:65:d2:c3:18:40:d4:75:
4f:ce:f4:46:7c:ad:2d:9d:45:5d:e6:a8:4a:9a:16:
66:7f:69:6f:1a:29:e4:77:49:31:e0:96:a1:8a:6a:
f0:91:67:69:b1:b0:ab:9e:a2:c3:5e:21:84:cc:1d:
c9:cc:3b:d7:48:9d:9f:8e:0b:94:62:99:b0:8e:c1:
6c:18:59:65:13:a7:4f:d3:50:4d:e1:1a:87:80:08:
2e:a5:51:28:dc:2f:c7:8f:86:df:b2:4a:8a:11:2d:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:8E:2C:96:73:75:0D:E2:F8:CF:79:04:7E:99:A9:7E:CF:AB:EA
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:07:f9:86:c8:46:42:c0:cc:48:b0:8f:0a:c7:f6:b9:60:54:
4b:46:d9:53:01:ba:78:25:de:0a:66:0d:df:50:c1:f2:08:07:
8a:9f:06:f1:81:75:a2:20:99:d4:e8:c3:55:fb:3a:5a:f8:48:
2c:1d:23:74:7a:16:7a:10:d0:2c:60:64:d1:1b:43:f3:ca:aa:
01:fd:1a:b9:25:f4:58:c3:ce:ce:8f:e1:60:ce:d9:55:f8:46:
66:60:25:9a:bc:2f:91:0d:61:e1:49:9d:08:0d:39:be:82:af:
7a:30:4f:f9:57:4a:20:29:a8:84:ac:fc:6d:42:be:5d:d0:6c:
36:47:b7:f6:2f:ca:e8:5f:18:b1:e9:18:e3:2e:ba:e1:08:89:
a8:9d:2c:8c:6e:f9:14:53:74:f3:95:9d:6e:41:30:a4:77:44:
78:1c:e2:d2:21:bc:cf:36:83:a7:81:d6:8f:ff:16:63:e0:a2:
42:90:16:11:ea:4b:20:be:8c:f5:16:e2:fa:1f:66:15:78:27:
aa:71:70:c5:5f:02:8b:7e:76:19:f2:3a:87:b9:72:95:b6:b0:
48:74:3c:ad:50:2d:ec:20:6b:b2:8e:44:a0:46:01:8e:e2:79:
0c:70:62:e5:46:d8:de:d4:87:8d:24:fd:b7:de:32:4e:43:68:
a3:ef:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:39:13 2025 by rpki-client