Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJ3E9XnGtpfzBI0mAyeOooTW3C4.roa
File: eJ3E9XnGtpfzBI0mAyeOooTW3C4.roa (raw, json)
Hash identifier: m4EDzP2Zgwr05uh9kd0BdNEFSOO3f9gIF6N0RB8tmPI=
Subject key identifier: 78:9D:C4:F5:79:C6:B6:97:F3:04:8D:26:03:27:8E:A2:84:D6:DC:2E
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019648233A56624744388F321BCE703D24B8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJ3E9XnGtpfzBI0mAyeOooTW3C4.roa
Signing time: Fri 18 Apr 2025 09:03:10 +0000
ROA not before: Fri 18 Apr 2025 09:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.213.0/24 maxlen: 24
185.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:23:3a:56:62:47:44:38:8f:32:1b:ce:70:3d:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 18 09:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=789dc4f579c6b697f3048d2603278ea284d6dc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ce:56:02:8b:f4:1d:1a:1c:5d:4b:af:11:4c:
21:2e:f5:18:8f:53:b3:c4:3a:39:84:84:2a:26:73:
59:19:99:f8:d3:8c:23:d8:07:d7:1f:08:db:b5:66:
3c:38:47:ac:62:56:b3:28:96:1b:f3:ee:85:6d:8c:
14:95:44:50:91:6d:59:97:48:6c:63:03:f8:ff:67:
cc:a8:03:3e:c5:43:5b:cf:32:37:f0:9c:e6:9b:71:
90:2d:a0:46:34:e9:71:99:0c:fb:82:d0:b4:5c:39:
b2:1b:9c:6b:7b:d7:11:c1:02:eb:ae:aa:ca:1c:e4:
e6:e1:fd:6d:36:73:ad:4b:20:8d:ee:15:51:9d:77:
67:a4:ea:63:d1:83:aa:8b:ea:4c:9f:fe:1e:1a:0d:
ab:a7:f0:7b:b6:9c:c6:8d:3a:0d:04:63:5a:54:f2:
c8:0c:4b:39:e7:ff:37:c0:7a:66:ab:92:bd:1c:91:
63:92:c0:bb:d9:8c:49:34:31:b9:8c:7d:54:58:79:
ae:d4:41:ce:52:81:a6:b5:10:f7:ac:6d:6a:ca:f3:
91:da:5b:86:44:a5:78:95:d9:39:4d:4f:04:11:c3:
a5:c9:b9:8d:32:3d:40:de:dd:39:5b:19:0f:8e:3e:
0e:b9:44:fe:e8:cd:11:c5:3f:b9:91:b3:15:51:a6:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:C4:F5:79:C6:B6:97:F3:04:8D:26:03:27:8E:A2:84:D6:DC:2E
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/eJ3E9XnGtpfzBI0mAyeOooTW3C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
185.199.151.0/24
185.199.213.0/24
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d8:bf:15:d4:c9:d7:a1:45:7c:7f:4f:07:f0:c1:a8:bf:9f:
58:78:75:ee:38:dd:41:12:fb:a6:21:11:b1:63:cc:35:da:39:
e4:b7:ab:14:ee:12:c4:da:b0:8b:9d:b7:14:4b:6d:98:9c:d6:
af:57:4a:95:9b:4a:e6:8b:e5:72:1e:c7:a8:99:62:0f:c1:44:
be:2e:20:4d:04:93:bc:8c:1f:39:e8:48:6d:50:be:fe:7c:dd:
33:f2:b1:61:ad:34:11:ae:15:9d:8b:2c:65:4c:9d:e2:94:70:
90:02:06:f6:76:7f:fd:78:36:b0:61:c1:58:00:80:f7:d8:8a:
19:5d:fd:20:77:2e:76:e4:3c:09:98:b7:a1:d8:39:97:cf:37:
fe:1e:b7:20:e6:4e:7d:7c:b3:a9:cf:fc:85:81:e0:9b:d3:57:
96:1c:3a:7a:9a:d2:d3:73:1f:8a:1b:fa:b4:3f:18:b7:44:5b:
8a:43:b4:55:f3:d4:10:f5:c1:93:71:4f:98:7d:11:d4:b8:17:
2a:cf:f1:56:4e:7a:81:30:63:8f:c1:66:0d:35:b4:4e:68:7e:
68:46:29:d0:60:4c:92:36:08:d1:c0:fc:45:73:3f:58:12:fc:
a8:7f:b7:42:ac:91:db:4b:bf:c8:71:4f:8b:00:a8:6f:3b:76:
c4:c3:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:50:46 2025 by rpki-client