Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/EeLRgO3GSNTdWjLQ_pS_HLbHl98.roa
File: EeLRgO3GSNTdWjLQ_pS_HLbHl98.roa (raw, json)
Hash identifier: OnP72kAga7d3UPgFVMewJG1a7J82ZtFCt11uXXUwZXo=
Subject key identifier: 11:E2:D1:80:ED:C6:48:D4:DD:5A:32:D0:FE:94:BF:1C:B6:C7:97:DF
Certificate issuer: /CN=f32be982060a43734d0ad126ad46da2f395c9def
Certificate serial: 01969F9D0705E677148EEC2648FEC59D5E77
Authority key identifier: F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/EeLRgO3GSNTdWjLQ_pS_HLbHl98.roa
Signing time: Mon 05 May 2025 08:43:10 +0000
ROA not before: Mon 05 May 2025 08:43:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.37.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:9d:07:05:e6:77:14:8e:ec:26:48:fe:c5:9d:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32be982060a43734d0ad126ad46da2f395c9def
Validity
Not Before: May 5 08:43:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11e2d180edc648d4dd5a32d0fe94bf1cb6c797df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:04:cb:32:8e:d9:cb:8f:57:1a:bd:02:da:
7e:e6:5b:26:c0:02:f6:67:15:1e:3e:28:34:d9:74:
fa:f8:45:44:90:15:dd:4f:3b:7b:31:b0:f2:35:e9:
38:9b:93:04:b8:12:27:df:50:26:34:19:24:eb:9a:
fc:5c:e5:20:2d:d8:b0:f2:6e:24:3f:56:72:e2:c6:
f8:de:36:25:b0:5f:74:33:4f:6c:6e:ab:23:84:c7:
4f:2b:98:47:cc:49:7f:ac:51:3f:cd:3f:5a:1b:78:
ef:4c:4d:5e:ee:2c:57:cc:96:77:fb:f2:b3:0b:0b:
a0:59:ff:23:ce:6b:09:af:3c:bd:1f:ea:3d:6c:d5:
45:f2:0b:cf:a0:be:7b:42:05:cd:59:cd:17:f5:bb:
52:45:2f:8d:1b:4d:f6:36:bb:7a:b8:52:a7:29:cc:
8d:f6:04:c5:db:40:30:7c:cc:e7:2a:22:9d:46:c4:
59:3b:79:55:06:7e:64:45:38:8c:12:b6:36:e6:52:
d9:21:ab:a0:4d:f2:f6:b7:4c:b3:53:39:19:1c:ac:
27:c5:74:7b:bf:84:af:81:33:f0:a3:09:84:e9:3f:
5d:54:ed:39:b7:cb:81:c0:22:1d:9e:36:d5:0e:83:
b4:8f:20:fb:a1:d2:dd:80:de:b9:20:e7:dc:94:59:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:D1:80:ED:C6:48:D4:DD:5A:32:D0:FE:94:BF:1C:B6:C7:97:DF
X509v3 Authority Key Identifier:
keyid:F3:2B:E9:82:06:0A:43:73:4D:0A:D1:26:AD:46:DA:2F:39:5C:9D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yvpggYKQ3NNCtEmrUbaLzlcne8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/EeLRgO3GSNTdWjLQ_pS_HLbHl98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/da3b1d-7acf-451f-b68b-99bcbe6d7f63/1/8yvpggYKQ3NNCtEmrUbaLzlcne8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.203.0/24
Signature Algorithm: sha256WithRSAEncryption
51:41:67:e5:45:94:8c:73:1d:6d:78:c6:50:84:81:90:bb:2d:
7c:2d:c9:89:b0:ea:d5:38:0d:55:6e:bd:06:1e:b9:13:67:df:
f0:08:67:55:34:90:45:5c:9d:96:7e:93:87:57:69:99:1f:68:
e6:de:bc:db:00:d0:d9:52:a2:ad:c7:72:45:ee:3b:aa:f4:b5:
99:65:ae:78:14:ef:9b:96:38:f5:bf:fd:bc:7c:18:70:5f:e6:
8d:d2:b7:e0:73:55:62:50:dc:22:8b:e2:78:36:a6:7c:c8:11:
fb:bb:20:b8:5d:fb:1b:7e:7d:88:1a:11:8b:7d:6c:73:c6:fb:
d1:f9:75:4c:ac:2c:f9:00:03:d4:c6:79:05:a1:b8:c5:46:48:
90:84:57:42:bc:04:7a:ce:f6:b7:87:c9:aa:5c:5a:28:f3:5e:
0d:d3:82:7c:77:ab:11:e4:29:d1:57:dc:c2:e9:80:23:da:1d:
02:34:f8:bf:7d:27:1d:85:a4:66:71:4c:f7:67:95:74:11:ec:
1b:fa:67:f4:5e:14:3d:73:83:dd:c0:13:a4:f1:b0:1a:6d:89:
05:2d:c8:78:bf:58:83:34:40:35:cc:ad:d2:f3:ba:ec:8c:5f:
87:57:de:07:9b:ff:fe:f7:4a:54:08:5e:27:e1:55:51:52:6f:
ef:22:01:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:15:18 2025 by rpki-client