Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/er13LyaEEpybrKtiNYKCEMG-QS8.roa
File: er13LyaEEpybrKtiNYKCEMG-QS8.roa (raw, json)
Hash identifier: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=
Subject key identifier: 7A:BD:77:2F:26:84:12:9C:9B:AC:AB:62:35:82:82:10:C1:BE:41:2F
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 0196392D93C169D7B59C33CD31382FB4134A
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/er13LyaEEpybrKtiNYKCEMG-QS8.roa
Signing time: Tue 15 Apr 2025 11:20:10 +0000
ROA not before: Tue 15 Apr 2025 11:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29695
IP address blocks: 37.97.0.0/18 maxlen: 18
188.228.0.0/17 maxlen: 17
2a00:fd00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:2d:93:c1:69:d7:b5:9c:33:cd:31:38:2f:b4:13:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Apr 15 11:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7abd772f2684129c9bacab6235828210c1be412f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:50:0f:3e:67:84:35:43:59:96:88:13:81:
58:7d:25:b3:04:04:7b:9a:99:df:d2:6c:67:bf:a0:
4a:71:a4:6b:bd:1e:68:01:b1:4e:bb:76:93:76:eb:
64:35:2b:7b:5d:e4:37:e5:9d:59:02:f5:cd:0e:af:
ab:c2:3c:09:2d:85:e5:6e:d2:e0:fa:a8:ce:69:cd:
08:bc:c2:da:1f:41:b7:8b:b7:c6:21:ef:22:91:6b:
78:d2:1a:d8:8a:fd:4f:4d:b0:96:14:50:e0:2a:4b:
54:d2:6b:db:aa:67:d5:5d:56:a4:54:86:8c:0e:59:
2d:24:81:78:dc:43:f7:a8:76:bc:46:f4:4a:dc:e1:
59:2f:7f:fa:8c:ce:4c:25:33:82:ce:69:14:44:03:
f8:6b:cd:f9:3d:f7:3a:f7:3f:99:49:52:7b:00:d2:
24:5e:5e:4b:bd:91:49:f7:87:3a:d0:14:bd:57:38:
21:35:6b:81:ba:57:ba:c1:35:af:65:05:b7:c1:1d:
87:3a:74:23:0f:8f:ea:3d:96:93:bf:c7:c2:09:2a:
cf:58:c6:a5:af:40:1b:8b:0c:ae:35:d0:d8:17:3f:
f9:17:e4:98:6f:dd:d9:46:ec:e8:05:8d:3a:45:eb:
92:14:4f:d0:50:d7:44:14:ee:b4:c2:55:28:50:55:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BD:77:2F:26:84:12:9C:9B:AC:AB:62:35:82:82:10:C1:BE:41:2F
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/er13LyaEEpybrKtiNYKCEMG-QS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.97.0.0/18
188.228.0.0/17
IPv6:
2a00:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
02:92:c4:70:51:f5:9d:09:c2:29:17:b7:6a:a0:6d:9f:5a:9f:
64:d4:c3:b1:34:cd:e4:b6:e1:31:05:61:24:46:02:df:02:d8:
a2:eb:5c:62:95:17:d2:35:2f:0c:76:c1:af:5c:d0:c0:61:af:
dd:14:af:38:66:bc:10:9c:24:56:e6:40:86:24:e9:0d:e4:6a:
8e:81:86:89:ef:b3:ec:61:b3:04:cd:bb:fa:dc:60:49:f8:bd:
5d:82:7c:a6:dd:2a:e5:11:c5:ee:90:04:16:8a:54:2a:90:dc:
73:24:d0:8d:9d:07:24:db:b0:a1:dc:89:6f:26:db:1d:a0:56:
dd:16:ad:66:6c:05:df:2b:30:2f:49:45:f3:5d:26:74:78:21:
b9:34:65:6c:1c:b1:a5:ed:45:42:1f:09:40:b8:35:f3:e7:92:
5b:36:bb:8d:a5:eb:d9:1d:7e:d7:18:45:fd:4a:b2:ac:c3:fe:
db:21:e9:ed:80:27:1b:42:56:49:43:5d:af:c1:7c:94:9a:b5:
4f:24:14:21:a7:d0:af:0b:d4:6b:f2:56:4d:76:3d:b3:8f:7d:
a7:9c:11:a6:be:ea:8a:ff:b1:65:1d:c6:c3:0b:35:0f:1f:2e:
e4:27:2e:15:9c:cf:3c:fe:8f:e4:14:c7:ea:b0:69:f6:86:64:
e0:0b:27:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:50:50 2025 by rpki-client