Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/E9TzElE0MUPD9RVNbR8kUyOFbMw.roa
File: E9TzElE0MUPD9RVNbR8kUyOFbMw.roa (raw, json)
Hash identifier: cmEKmxe0w/xOI/l4yMYS7eyTKMBnIEW6ka0FFqdcppg=
Subject key identifier: 13:D4:F3:12:51:34:31:43:C3:F5:15:4D:6D:1F:24:53:23:85:6C:CC
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 0194258F63765312355815A8F24CBC269286
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/E9TzElE0MUPD9RVNbR8kUyOFbMw.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36351
IP address blocks: 91.206.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:76:53:12:35:58:15:a8:f2:4c:bc:26:92:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d4f31251343143c3f5154d6d1f245323856ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:54:76:66:6e:03:1e:b2:f4:c3:92:04:d2:
e1:c9:28:3d:2e:3e:a1:13:93:4f:26:b3:44:b0:71:
23:d9:06:e5:7f:27:d9:7d:76:bb:f6:ea:1a:fc:2f:
f3:c8:e4:06:53:25:6a:6d:b6:e0:aa:01:29:3e:02:
f5:2c:d2:61:6f:1a:50:b6:f1:51:c4:5b:96:45:74:
5b:cc:d0:60:d9:44:de:ca:ff:e7:42:31:4c:d8:72:
22:86:67:96:b1:4d:28:9d:da:49:0a:89:88:e6:48:
44:4f:81:a3:84:e3:9e:d5:0a:e8:9f:36:07:a9:f5:
39:2c:ec:df:a2:af:3d:fc:f1:43:12:7b:d3:cb:fc:
9f:6e:fd:b0:f0:72:57:5b:78:bf:2b:c5:61:9c:cc:
98:90:e4:51:ee:cb:e7:7b:de:64:d7:9b:cf:ef:9a:
00:61:ce:1f:20:63:d8:e0:c9:23:7d:44:12:22:22:
61:ac:b0:41:db:e7:de:0a:4d:0f:99:fe:f5:87:78:
56:58:d9:ac:60:ea:74:66:e9:11:20:8d:93:70:bf:
69:7e:1c:8c:79:a2:78:bb:ac:5e:d1:c1:83:2d:d9:
aa:3c:73:23:f4:b6:77:13:21:d2:87:4d:f0:c4:97:
05:63:f2:44:6e:ba:2f:83:24:25:b9:73:68:72:dc:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:F3:12:51:34:31:43:C3:F5:15:4D:6D:1F:24:53:23:85:6C:CC
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/E9TzElE0MUPD9RVNbR8kUyOFbMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.64.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2d:7d:58:bf:6e:50:d0:be:ea:55:e3:7b:01:ab:44:e7:4f:
f1:bc:88:0a:98:77:7c:50:d5:fe:1d:89:f8:f2:80:33:fa:3c:
23:ce:69:27:5d:1e:bd:f0:b5:c1:74:27:96:76:10:a2:af:f5:
a0:d4:dc:ec:70:c9:b9:1e:ef:42:85:f7:ad:c3:51:14:9f:f7:
43:95:64:d7:5b:9d:cb:b2:0c:cb:db:64:68:34:26:dd:cc:70:
0b:04:78:f3:54:04:b6:72:3c:8c:4a:36:ca:85:74:0e:eb:4c:
c1:b9:2d:fd:e6:e9:8e:7c:29:ac:98:5c:01:52:de:e4:6b:61:
81:87:6b:df:ab:71:15:4a:41:24:05:c5:2a:d1:17:64:84:7d:
12:c6:e0:4c:c9:60:14:3e:42:06:59:e4:2e:a5:25:2b:ba:e8:
16:2d:c0:d7:15:5e:bb:26:d9:cf:be:0b:c2:a3:33:2e:af:f0:
ea:32:f7:ed:db:12:89:44:92:d5:f9:09:3e:e7:cc:8e:4c:26:
30:83:19:81:29:6c:68:93:36:1d:2b:91:45:cf:cb:22:ba:e4:
63:01:d5:35:e9:f9:23:24:cc:e0:95:b1:3e:cb:86:b3:bc:7c:
b4:94:2c:cc:79:6c:eb:3b:e2:ed:57:07:8f:89:e7:4a:bc:8b:
b3:de:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:05 2025 by rpki-client