Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EFIa_JYJk106gyODGi5b9LAwQ68.roa
File: EFIa_JYJk106gyODGi5b9LAwQ68.roa (raw, json)
Hash identifier: RTA2CHcFDTf1MDhvwhOXu5wbTcfOpvua0yxMUpiDlaQ=
Subject key identifier: 10:52:1A:FC:96:09:93:5D:3A:83:23:83:1A:2E:5B:F4:B0:30:43:AF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019648AABD1606C0D802175568509EF4689F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EFIa_JYJk106gyODGi5b9LAwQ68.roa
Signing time: Fri 18 Apr 2025 11:31:11 +0000
ROA not before: Fri 18 Apr 2025 11:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63473
IP address blocks: 151.241.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:aa:bd:16:06:c0:d8:02:17:55:68:50:9e:f4:68:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 11:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10521afc9609935d3a8323831a2e5bf4b03043af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:5f:a2:d9:0d:ec:8e:18:0c:d2:0b:55:c2:
77:77:45:1d:46:a7:75:0f:62:04:0b:5a:dc:6a:14:
79:82:ec:e7:ef:4d:60:d9:62:75:8a:41:ce:13:b9:
f4:6f:ad:1c:5b:44:a3:c0:47:7e:c8:92:5a:4e:eb:
56:aa:d1:8b:4c:66:02:fe:00:a6:f6:8a:7a:d9:e0:
2f:92:87:da:09:65:48:0b:fc:3f:a5:40:36:59:e1:
8e:89:71:34:19:46:3f:5c:3f:12:6c:b4:54:dc:c9:
bb:e3:37:3a:c9:6d:9c:a8:62:4f:44:8a:6e:bf:ff:
0d:9c:7b:da:4a:88:d5:4d:d5:8d:a1:9a:23:4a:c8:
ac:f6:3d:70:fd:a1:53:6a:bf:47:06:c8:3c:15:8d:
cf:da:ec:bc:e9:de:b2:29:79:3a:88:fa:0a:c7:b1:
3b:8e:07:62:42:48:fe:8c:25:a4:6d:d5:2a:ea:18:
5d:96:f8:8e:b6:a4:31:bb:83:9f:e3:89:1a:0f:16:
10:34:b1:ab:4f:f0:e1:66:87:c4:3d:c3:30:5a:3e:
4c:1e:a8:04:14:95:74:a7:f1:ba:d8:bd:f1:db:dd:
08:d3:3d:ee:e7:30:d4:60:64:4c:83:57:7e:5f:5d:
09:dc:e6:32:cc:42:0b:50:41:60:38:1a:52:51:0b:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:52:1A:FC:96:09:93:5D:3A:83:23:83:1A:2E:5B:F4:B0:30:43:AF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EFIa_JYJk106gyODGi5b9LAwQ68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0a:68:4e:2f:d3:58:92:e4:a9:30:ff:7f:cd:01:92:0a:bf:
7f:31:d9:c0:7c:3e:36:1d:14:bf:f3:75:09:21:1d:19:7a:2a:
f6:62:66:32:c2:a1:08:ad:2c:5a:fd:83:3c:68:c5:bd:2e:e7:
40:52:19:fa:e0:71:0e:d8:a8:5d:5e:bc:c2:15:83:90:7f:f2:
72:e6:1f:3e:4b:a4:c8:da:d4:d6:0a:a6:75:fd:9c:3b:16:e7:
75:bf:d9:aa:fd:cc:21:f8:a8:9d:e2:8a:5c:d9:7f:58:25:90:
4f:4e:64:74:19:ef:0b:78:b4:6b:d8:10:f5:06:83:ec:15:2c:
c6:42:c1:49:d2:1e:64:c4:f5:5e:0f:c7:84:17:ca:39:e5:f4:
d6:0e:4b:66:ea:18:09:70:1a:fb:80:20:6c:ea:8a:8c:86:f3:
7d:3c:a3:31:b2:7b:7a:7a:99:ee:ad:69:40:b2:1e:f1:d0:bc:
23:4a:7f:02:ea:5e:80:a1:ed:a1:6d:a5:12:db:c1:b6:6c:14:
9a:80:58:d5:50:52:ce:de:3b:6f:b5:b7:59:b9:69:e6:73:e9:
ce:e8:87:69:7b:37:33:33:16:51:6a:1d:34:80:94:cb:fb:e8:
10:dd:8d:ae:8b:3e:72:39:a8:05:61:57:3b:1e:e2:dc:9c:46:
09:a3:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:10 2025 by rpki-client