Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/EO7_sAa5INTWdb0sB8KoIZTsSpE.roa
File: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (raw, json)
Hash identifier: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=
Subject key identifier: 10:EE:FF:B0:06:B9:20:D4:D6:75:BD:2C:07:C2:A8:21:94:EC:4A:91
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 0194258F461105A2840D04EDFDC3DF194233
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/EO7_sAa5INTWdb0sB8KoIZTsSpE.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60337
IP address blocks: 2a0a:7d80:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:46:11:05:a2:84:0d:04:ed:fd:c3:df:19:42:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10eeffb006b920d4d675bd2c07c2a82194ec4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:81:5b:56:ba:20:1b:08:d0:10:d0:5f:da:ca:
cc:d3:b5:65:c0:78:f2:d7:28:c5:56:d2:13:85:78:
c7:78:a6:02:5a:a3:0e:78:2b:c8:77:3e:5e:81:eb:
3c:97:84:2e:c2:0c:9b:0b:87:e1:29:d8:6c:66:46:
f6:83:ba:c7:e7:56:a4:04:5c:5c:26:15:11:3d:98:
80:01:d5:11:bd:6e:75:bf:42:fa:96:e9:fa:5d:9d:
f2:b6:4d:fd:03:54:f4:9f:fb:94:33:7e:58:58:39:
34:95:f8:e8:f4:cd:2d:cc:66:11:93:3f:b0:0e:84:
5b:7f:84:a4:6b:85:dd:02:cb:ae:45:27:fc:ea:71:
58:be:05:29:49:ef:3e:a1:81:dc:a4:78:51:37:64:
a5:8f:35:ff:6c:50:03:dc:9f:51:b0:fb:9a:b4:ca:
39:e9:3d:c9:dd:b2:5e:0f:cc:2f:7e:9c:9f:f0:11:
85:d3:43:5f:c2:c2:bd:30:09:87:15:b3:ff:4d:a9:
4c:5c:0f:ab:92:bb:63:c7:b0:31:04:ca:85:16:0a:
ba:4f:18:6d:d2:7c:c5:ba:f9:da:78:3e:ce:ff:2b:
f2:07:38:b6:74:6f:3c:be:aa:70:c1:9a:21:29:36:
59:4d:39:11:69:6c:f5:fa:89:41:1a:db:f6:cb:ec:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EE:FF:B0:06:B9:20:D4:D6:75:BD:2C:07:C2:A8:21:94:EC:4A:91
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/EO7_sAa5INTWdb0sB8KoIZTsSpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d80:1001::/48
Signature Algorithm: sha256WithRSAEncryption
81:de:5a:10:a3:f9:ba:97:b6:37:e1:f4:b5:ac:36:e4:72:27:
7f:dd:d1:ec:ff:36:2a:6d:74:a5:51:60:ed:33:15:ff:fa:f5:
e8:1f:ca:4b:1a:a8:e8:41:16:7f:0b:37:ae:57:76:d4:4f:20:
c9:e3:b0:14:d8:24:58:75:b9:87:a1:22:1a:62:2d:5b:a3:ab:
9b:a1:2e:84:d4:9f:53:f1:e2:c5:37:fc:4f:62:7a:12:95:89:
d0:e9:4c:77:85:8c:01:19:2b:a7:a7:51:ef:1a:93:bd:3f:3d:
fb:ca:86:ef:de:ba:1a:cd:b0:e0:5d:62:25:c6:e2:17:af:40:
c1:88:89:16:fd:75:6b:a6:28:d1:85:05:51:e4:e5:55:69:af:
8f:d3:8d:e3:f2:16:c4:64:79:ef:6d:a0:87:cc:82:7c:cd:1a:
dd:c6:c1:61:f8:c0:df:02:05:6d:67:12:8a:1e:f6:ed:f6:09:
1e:3a:1e:65:33:60:6e:4a:ce:8a:30:20:bc:0a:a6:c5:a8:be:
f3:ea:21:5c:54:36:09:0c:4f:2d:97:08:ce:b9:04:7b:85:7a:
52:b9:bc:3e:9c:82:30:24:16:89:0e:3c:3b:75:a1:b4:e6:c7:
4a:3f:b1:ac:f9:9d:b8:4f:67:8c:7a:88:dd:bf:5c:6b:e4:5a:
2a:ff:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:41:31 2025 by rpki-client