Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa
File: EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa (raw, json)
Hash identifier: 0BXHqu+47L7wX/7bQpoeXTrDIxrQJJO2G9WNWOkjsI8=
Subject key identifier: 12:21:93:BE:1C:B8:7A:25:79:56:EF:33:94:55:F0:AD:68:C4:83:F9
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01965CD64CF4C8CD7D3A283397F071CED468
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa
Signing time: Tue 22 Apr 2025 09:31:10 +0000
ROA not before: Tue 22 Apr 2025 09:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 91.193.252.0/24 maxlen: 24
141.105.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:d6:4c:f4:c8:cd:7d:3a:28:33:97:f0:71:ce:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 22 09:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=122193be1cb87a257956ef339455f0ad68c483f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:f4:6c:f5:24:50:93:f7:7a:65:df:76:19:
57:01:3f:a1:a5:b6:1d:50:5d:e3:34:66:67:c7:9f:
7d:8c:84:3a:92:fb:ff:75:28:6e:82:b2:c2:66:42:
32:26:d5:e9:17:0b:de:f7:1c:c5:1c:be:9e:fb:7f:
fd:a9:c0:00:81:a7:1c:7f:b6:a5:c0:f3:e8:5b:61:
d1:15:da:1f:bf:04:87:1f:c3:1c:3d:3e:89:fc:dd:
42:4f:6d:c3:a3:05:c9:06:e5:00:dc:59:48:52:b8:
7d:13:69:87:d9:66:b6:7d:22:a2:03:c4:a1:ba:36:
e3:5b:4d:eb:ea:4e:f4:e9:8f:a0:64:38:64:13:10:
1a:bb:46:99:b0:e6:ab:00:f6:58:9c:fd:aa:4d:62:
5f:50:30:8d:a0:88:2a:88:ac:7c:d9:00:85:5a:34:
d7:b1:99:b5:e4:f1:d7:2e:97:ef:c1:72:71:f2:2e:
f5:d7:d2:bd:91:01:23:fa:a4:95:a5:3d:7c:7c:82:
9f:c7:60:16:59:6e:b1:14:81:f9:22:2d:92:82:30:
ee:6a:d2:81:09:65:44:c7:b9:8c:0d:c7:5e:a7:7a:
91:2f:67:0a:56:3d:7b:71:56:70:4c:6b:0d:22:61:
ce:25:d6:ee:d4:d6:94:38:c4:f8:c3:4f:1c:60:dd:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:21:93:BE:1C:B8:7A:25:79:56:EF:33:94:55:F0:AD:68:C4:83:F9
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/EiGTvhy4eiV5Vu8zlFXwrWjEg_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
141.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:98:88:77:11:91:40:84:8c:ee:3b:cb:dc:e8:06:2c:44:13:
2b:6b:c5:d1:02:0f:74:d7:21:ae:40:8d:8e:35:7c:d8:59:fd:
d1:21:f2:5a:b8:89:73:c4:6e:d6:be:87:ae:c3:ed:2c:29:e5:
ce:2f:7f:57:e8:28:88:48:c1:2c:d7:31:ff:c9:f6:f9:5e:72:
08:fa:96:d6:20:6f:fc:19:5b:33:09:78:d1:ae:62:85:f7:21:
9c:62:a2:2f:c1:e4:5e:29:34:9c:2a:b1:a8:6e:11:72:bd:c1:
a5:6a:dc:0e:3b:26:55:be:17:bc:9b:2b:fe:36:40:91:d0:5e:
7e:34:9d:ab:f1:3f:4c:11:dc:5c:aa:f9:73:ca:a3:73:f4:b9:
0b:1e:fe:61:7f:47:b8:d4:e8:6a:57:6b:2a:df:fe:27:5c:6d:
f5:3f:17:2a:02:6d:52:d0:60:3b:f7:6b:1f:8c:c5:ca:84:6f:
4d:93:85:b5:5e:22:dc:20:46:1c:31:11:55:b2:31:1d:fb:d5:
a7:aa:6c:78:a1:d1:4a:71:59:e1:fa:63:e2:9f:f7:0a:16:33:
57:0c:d9:ae:00:ca:e3:a6:2f:3a:87:f7:dc:b6:63:65:26:bf:
fd:e3:ec:68:fd:a3:b2:32:9a:2e:90:d7:95:76:19:d0:60:bb:
4a:7b:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:34:18 2025 by rpki-client