Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eV94BXe8LtEfrEreyIQkc6VGevg.roa
File: eV94BXe8LtEfrEreyIQkc6VGevg.roa (raw, json)
Hash identifier: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=
Subject key identifier: 79:5F:78:05:77:BC:2E:D1:1F:AC:4A:DE:C8:84:24:73:A5:46:7A:F8
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019420D6304F995DD0119D8AB24204C37CBB
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eV94BXe8LtEfrEreyIQkc6VGevg.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50710
IP address blocks: 78.109.236.0/24 maxlen: 24
78.109.237.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.100.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:4f:99:5d:d0:11:9d:8a:b2:42:04:c3:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=795f780577bc2ed11fac4adec8842473a5467af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:17:db:7f:21:bf:44:bc:e5:d4:54:a0:4e:
23:89:a6:ab:e7:04:19:04:c3:86:6d:e3:64:b0:2e:
ef:44:93:68:cc:a1:79:3a:03:d5:bc:b5:55:73:54:
3c:71:8f:4e:0e:16:54:18:83:47:a3:ac:1c:21:98:
81:e8:ab:d4:6d:f9:fd:c3:b3:23:35:fc:98:0b:4d:
2c:9b:bf:35:11:ad:c3:fa:48:1d:15:47:21:18:98:
71:04:d2:a2:68:d6:37:db:ab:f1:3b:7a:6d:24:98:
90:71:20:88:4a:00:73:f5:48:70:b8:a9:31:95:c1:
0d:9e:fd:64:da:6d:39:7e:10:ce:62:88:45:a8:83:
fd:bd:54:d7:ac:1e:66:27:40:86:bb:9b:a9:70:32:
64:af:3c:d7:61:4f:0b:96:d3:a7:58:42:93:15:06:
67:8a:31:35:b4:c4:b3:4c:fb:f7:03:32:f3:d2:19:
d0:11:77:a8:20:18:c4:8d:7c:4f:67:13:96:16:1d:
4b:a8:c7:cf:41:88:a4:e2:67:e2:a1:2b:4b:2c:90:
17:e6:37:94:09:7b:5d:e8:77:48:cf:47:b9:bf:fb:
ca:11:12:db:7a:7a:13:32:21:68:b7:39:34:5d:cf:
39:cf:24:30:49:2b:d8:01:53:bb:72:3b:7e:7e:cb:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5F:78:05:77:BC:2E:D1:1F:AC:4A:DE:C8:84:24:73:A5:46:7A:F8
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/eV94BXe8LtEfrEreyIQkc6VGevg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.236.0-78.109.238.255
185.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
23:25:28:c2:ba:9e:32:e0:f4:ff:9c:a4:62:53:78:43:59:35:
da:d9:87:0b:23:20:c5:3c:11:6e:a8:9c:f4:80:72:7c:72:0f:
6c:72:8c:e9:b9:85:c7:08:c3:5c:70:0b:be:eb:99:cc:32:e2:
bc:71:d0:f9:cb:ff:64:b7:40:59:97:f6:dd:dd:c8:da:1a:36:
83:8a:08:eb:c7:37:4f:77:00:f6:db:b8:fd:3c:46:32:e8:f0:
24:65:fd:05:1b:0e:90:4e:79:1d:87:64:9d:52:33:9c:a8:d9:
64:6e:6a:8a:4b:2d:49:dc:a5:24:db:b9:c7:c1:47:11:dc:3c:
59:82:58:2b:60:3b:85:0b:f8:20:5a:f7:76:39:ef:33:2a:0f:
47:a3:0f:9b:24:b2:d8:b1:ab:b8:c1:c9:22:ab:f6:97:9e:34:
25:87:2c:63:b9:79:a6:5b:ef:c9:cc:27:e1:4c:d1:65:34:0a:
83:bb:93:93:80:d1:12:b4:01:50:78:ec:8e:ba:c0:d3:3d:45:
d7:b6:56:41:b0:11:46:38:3a:dd:ec:c5:5b:d4:d5:ab:13:c9:
77:c2:e8:e4:7e:20:d8:a1:ae:5f:a2:83:f9:52:4c:41:11:27:
69:5e:9a:af:96:da:11:9b:87:4b:51:b6:40:3e:74:f4:f3:48:
ba:52:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:37:00 2025 by rpki-client