Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/eElEamJRXa34pPUYDX_wsosnFjg.roa
File: eElEamJRXa34pPUYDX_wsosnFjg.roa (raw, json)
Hash identifier: A2iUP3CvC18fDfjURHdEPTZmoR2njRzEuhMxjf7TGDQ=
Subject key identifier: 78:49:44:6A:62:51:5D:AD:F8:A4:F5:18:0D:7F:F0:B2:8B:27:16:38
Certificate issuer: /CN=97492ecc37bae2b9f81da029385817d433c50467
Certificate serial: 01971BA43229FCC7AA1F6D06EBD595FBF64E
Authority key identifier: 97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/eElEamJRXa34pPUYDX_wsosnFjg.roa
Signing time: Thu 29 May 2025 10:43:54 +0000
ROA not before: Thu 29 May 2025 10:43:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202371
IP address blocks: 185.133.127.0/24 maxlen: 24
2a0e:ff00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1b:a4:32:29:fc:c7:aa:1f:6d:06:eb:d5:95:fb:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97492ecc37bae2b9f81da029385817d433c50467
Validity
Not Before: May 29 10:43:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7849446a62515dadf8a4f5180d7ff0b28b271638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:ec:25:26:2a:c1:97:05:66:c2:e3:0a:b2:
4b:0a:98:db:f0:0b:bb:fa:87:9d:3c:a5:93:b7:c5:
6a:1a:e7:c3:1c:49:42:17:c1:bd:ff:57:82:8c:9c:
78:c7:ef:37:4e:89:8a:dc:ef:02:4c:85:4e:81:7a:
34:2a:1d:c0:72:57:57:ee:98:8e:ef:00:9b:6a:51:
d0:97:cf:a2:4d:bf:04:43:58:3c:5b:ca:21:ba:81:
ee:9c:00:42:78:24:26:2d:da:60:fd:1e:c3:62:0f:
2e:c5:8a:31:e5:46:77:56:df:3f:c4:99:1a:e7:c1:
79:17:af:a9:38:1b:7e:87:6c:2d:e0:39:75:11:ad:
9d:99:0d:71:7c:78:7e:97:bb:8d:27:53:d2:e8:88:
f8:7c:a8:69:7e:80:06:b6:80:3e:8b:23:9d:18:ba:
68:5d:b1:9c:96:d7:b8:41:53:6c:51:3f:6a:2a:84:
e6:2f:d7:e4:91:73:c9:d3:95:ce:8d:af:d4:cc:4f:
da:e6:b8:3b:b1:8f:38:1b:74:2e:b8:67:17:33:62:
4a:fa:66:be:ec:c2:48:de:71:d5:28:ee:b8:9d:aa:
35:7a:06:79:a9:b4:06:9a:d9:03:70:07:fe:f8:a0:
0a:f2:c4:20:6a:68:2a:1a:5b:3e:9f:db:18:b6:0c:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:44:6A:62:51:5D:AD:F8:A4:F5:18:0D:7F:F0:B2:8B:27:16:38
X509v3 Authority Key Identifier:
keyid:97:49:2E:CC:37:BA:E2:B9:F8:1D:A0:29:38:58:17:D4:33:C5:04:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0kuzDe64rn4HaApOFgX1DPFBGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/eElEamJRXa34pPUYDX_wsosnFjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6708aa-f6df-4c4d-92bd-e9f1c591cedc/1/l0kuzDe64rn4HaApOFgX1DPFBGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.127.0/24
IPv6:
2a0e:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
00:b9:86:38:4f:93:4e:d1:0b:0e:e1:6f:79:e8:3f:5d:89:de:
d8:7d:b3:a8:a0:c8:29:98:ea:19:5d:7c:43:bd:3b:5a:92:3c:
9f:30:d4:21:1b:f7:83:09:cd:43:b2:4b:16:4f:c9:28:1d:0d:
0a:67:56:f4:cc:7b:21:3d:e9:71:94:99:4e:0c:d5:6a:b0:ab:
98:d9:5c:2c:bb:74:0d:da:d7:90:e6:dd:e7:c0:01:52:1d:52:
5d:b2:e1:4d:23:00:b5:30:2c:04:8b:fd:f1:38:82:c2:24:05:
e8:63:88:e4:c7:29:b7:7b:e4:f8:63:18:8c:b9:35:75:9b:1b:
97:e4:8c:93:4e:c6:55:97:50:c4:ca:59:3b:97:e4:30:30:99:
8f:d0:91:3d:df:d8:f7:2d:31:7e:a3:2e:0a:a6:d1:8d:1e:c9:
b8:7d:6a:a9:c8:cb:c5:16:09:a7:40:b6:38:9d:51:bc:2f:a0:
df:4a:f7:34:a4:11:13:e0:d1:e9:22:83:05:ac:1c:70:93:1d:
c1:d0:25:71:2e:bd:62:a5:f6:ca:23:4a:61:7f:94:cd:8d:7b:
85:35:dd:58:0f:a0:82:55:a9:7c:a7:fd:7d:06:b1:cd:ca:47:
65:b7:1b:d3:ca:6f:dc:88:4c:64:c7:23:d4:bd:90:9b:3d:19:
28:dd:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:06:12 2025 by rpki-client