Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/EJij4b5tXcMHreEwXaDPFHiUPSY.roa
File: EJij4b5tXcMHreEwXaDPFHiUPSY.roa (raw, json)
Hash identifier: 1zvQlqg1XnwbTr3tDDEsxM/UclGY5wHW7JBqKQIRxus=
Subject key identifier: 10:98:A3:E1:BE:6D:5D:C3:07:AD:E1:30:5D:A0:CF:14:78:94:3D:26
Certificate issuer: /CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Certificate serial: 019685BB5AAC90386CE41D18F8E95DA42883
Authority key identifier: 91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/EJij4b5tXcMHreEwXaDPFHiUPSY.roa
Signing time: Wed 30 Apr 2025 08:06:10 +0000
ROA not before: Wed 30 Apr 2025 08:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13030
IP address blocks: 198.212.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:bb:5a:ac:90:38:6c:e4:1d:18:f8:e9:5d:a4:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9189e06c887d3fede88f717bffa43c8cc866c7a5
Validity
Not Before: Apr 30 08:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1098a3e1be6d5dc307ade1305da0cf1478943d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:03:fd:9b:1e:3f:1b:1a:de:b7:3f:cc:3b:
81:6e:8e:f9:20:76:5c:fa:b3:3e:d4:28:bb:15:d2:
a4:4d:07:f8:66:5a:09:74:d7:37:db:a0:0f:38:92:
b7:2e:cb:b0:97:41:5c:79:64:c8:e8:ad:fd:46:48:
7d:8e:8c:78:0a:ac:49:1a:39:36:a1:ef:e0:1f:56:
db:0b:e0:0b:c2:fa:08:0f:e6:68:17:ab:e7:d9:7b:
5f:fb:75:fa:5e:91:0e:c6:8b:c5:a0:7e:93:4e:2e:
d6:75:a9:f4:1d:27:5e:17:ae:88:ef:08:64:23:97:
b5:48:37:90:b7:f9:a5:85:85:dc:48:06:ba:2d:a7:
b7:91:53:b0:4d:c2:67:70:15:b3:15:30:c8:31:28:
64:eb:27:86:d8:11:ab:9f:51:d2:b9:ef:13:56:2a:
79:97:55:c3:51:73:a7:c4:24:96:8c:c7:f1:2a:5c:
41:fe:6e:f7:53:4b:62:bb:e2:b0:ee:53:36:32:74:
8a:7e:5a:19:d6:79:be:fd:05:12:19:e9:c6:0a:ec:
70:a5:4d:bc:cf:1a:f6:5f:69:c4:8d:41:2b:f3:4f:
71:4e:ab:9e:ce:96:03:d5:a6:dc:5b:75:f2:de:3f:
73:8f:73:c3:80:33:ea:0d:21:be:c6:d0:8b:c5:29:
72:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:A3:E1:BE:6D:5D:C3:07:AD:E1:30:5D:A0:CF:14:78:94:3D:26
X509v3 Authority Key Identifier:
keyid:91:89:E0:6C:88:7D:3F:ED:E8:8F:71:7B:FF:A4:3C:8C:C8:66:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYngbIh9P-3oj3F7_6Q8jMhmx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/EJij4b5tXcMHreEwXaDPFHiUPSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3d3a33-61d9-4996-819c-d97a54cb39e1/1/kYngbIh9P-3oj3F7_6Q8jMhmx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.212.39.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:1b:fc:ee:09:d9:b6:77:0a:57:cd:00:33:5f:26:16:9d:
00:73:7f:43:e7:1b:f9:db:3d:4b:01:5c:e6:d7:31:70:23:60:
ff:53:c9:52:ef:d0:a0:db:17:7a:24:39:fd:9b:88:c3:f6:06:
df:bb:72:b5:9d:93:ab:74:e3:f8:fe:78:a5:67:0f:9a:3b:18:
b5:96:ab:4a:b8:0c:4c:9a:70:cb:d8:e7:f3:2f:37:e7:a5:79:
ce:e7:f2:a9:7b:18:10:28:3e:4f:d7:6a:6b:ea:08:53:30:42:
ed:3a:6c:46:c0:64:d1:e0:cb:1d:7d:dd:10:0e:74:2f:f2:17:
38:3a:d0:52:83:50:d9:1f:16:da:98:81:92:ab:23:64:b3:ce:
e6:0e:3b:6d:61:60:bd:e0:de:51:3e:93:d4:c9:7c:d0:1f:42:
6e:c2:ce:85:c9:38:d5:36:77:31:46:2b:d9:7a:0f:80:9a:64:
c4:46:45:ba:ff:d7:45:31:a1:68:6b:10:bc:03:d9:2c:51:59:
63:79:2b:71:3f:41:f4:0f:a9:9a:f5:0c:93:39:82:bb:e8:15:
dd:1c:43:1d:11:bb:71:0b:ae:c8:41:ba:a9:fc:e3:70:11:94:
1b:90:70:fc:14:bb:67:b3:33:26:f1:a4:6e:28:fe:a8:94:21:
3e:b4:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:21:40 2025 by rpki-client