Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eUtBoT5j0z-IYqDSfwpzibFEqJY.roa
File: eUtBoT5j0z-IYqDSfwpzibFEqJY.roa (raw, json)
Hash identifier: xrripoBlTawer5hRJBFA2IV4xDGQFgwmcY1MUaK5VFs=
Subject key identifier: 79:4B:41:A1:3E:63:D3:3F:88:62:A0:D2:7F:0A:73:89:B1:44:A8:96
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01966CAE161C55E0A05FA3C4D8D043B074BC
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eUtBoT5j0z-IYqDSfwpzibFEqJY.roa
Signing time: Fri 25 Apr 2025 11:21:10 +0000
ROA not before: Fri 25 Apr 2025 11:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.152.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:ae:16:1c:55:e0:a0:5f:a3:c4:d8:d0:43:b0:74:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Apr 25 11:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794b41a13e63d33f8862a0d27f0a7389b144a896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:04:4c:db:2b:26:4f:cd:20:db:2e:2c:90:
03:45:dd:0e:37:4b:a1:96:9e:fc:9b:2d:ea:77:e8:
9c:d1:ac:d5:95:54:a8:ba:49:68:3b:df:43:96:f4:
85:79:12:d8:63:22:0c:0a:52:3f:e6:db:dc:18:62:
e8:2e:6f:5f:4c:4c:74:11:02:3d:81:ab:44:dd:5e:
fe:93:34:31:5c:af:90:46:f8:62:ea:e5:6f:b1:84:
8f:22:eb:00:0f:60:01:8a:a6:0e:9b:a2:45:88:3b:
8f:6e:97:7b:12:3a:bf:c6:65:5a:c0:16:ac:af:35:
43:7b:16:a9:c3:51:f6:fd:80:fb:8e:3b:52:3e:b8:
0e:7f:97:c8:1f:d3:e5:d8:83:d3:cf:81:31:80:ab:
41:aa:43:dc:f3:3b:a7:a1:cd:b3:fb:1f:de:96:ca:
27:dc:4c:a4:32:ec:81:14:0d:d7:d9:cb:82:ef:eb:
19:75:73:40:7c:92:33:7d:e5:a3:10:30:cc:5c:97:
7d:6d:fc:8d:c8:5f:35:a7:ac:eb:2f:f8:8f:6a:56:
4d:b6:0f:71:06:23:f0:a9:00:20:ab:0f:de:96:01:
0d:cb:87:67:96:57:71:fa:48:79:c7:48:6e:77:00:
fe:b6:71:5c:66:b7:69:42:83:36:3c:d1:f7:59:66:
be:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4B:41:A1:3E:63:D3:3F:88:62:A0:D2:7F:0A:73:89:B1:44:A8:96
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/eUtBoT5j0z-IYqDSfwpzibFEqJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fb:67:89:f3:dc:09:98:23:26:04:f4:40:7a:b3:c6:27:16:
31:43:40:28:59:d8:a6:38:82:61:cd:16:af:dd:c2:e8:f6:d1:
ea:f8:d9:19:23:af:7d:ba:2d:43:53:d1:f9:bc:0a:18:e2:3d:
28:88:ee:3f:a8:02:89:05:9e:41:b0:ec:4a:3c:f4:fe:55:17:
53:ec:eb:ad:8e:8e:10:85:ca:07:d2:4c:e5:66:54:b3:2c:07:
d5:38:95:89:c5:27:bd:52:1a:e2:d8:71:61:44:19:34:b0:25:
54:9d:e1:e2:11:a6:95:3b:3b:f9:3d:50:57:5b:9f:df:85:4f:
4b:68:d7:63:b8:4e:c1:a8:78:a3:a4:ff:8f:57:e5:e4:92:75:
bb:7a:3b:fd:1d:62:c4:04:aa:98:3f:58:a0:32:51:62:9a:e4:
49:95:06:88:01:7a:37:a7:03:a9:f7:bd:4e:f3:d8:74:f8:03:
55:df:ea:b9:ca:71:1f:93:f8:1f:11:84:fe:b3:27:17:5b:44:
f1:c3:b8:db:41:bd:fd:e1:68:e4:16:fd:01:fc:ac:a8:8a:d7:
65:4f:e5:38:5f:91:ba:5e:97:65:80:90:5c:97:c4:96:bf:29:
7f:09:b9:01:f1:2e:87:d5:da:cd:a5:ef:cd:b6:6e:31:4d:97:
11:4a:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:14:58 2025 by rpki-client