Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/52yRIEJtEfgFBpWr58fadnScoJw.roa
File: 52yRIEJtEfgFBpWr58fadnScoJw.roa (raw, json)
Hash identifier: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=
Subject key identifier: E7:6C:91:20:42:6D:11:F8:05:06:95:AB:E7:C7:DA:76:74:9C:A0:9C
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019681CD325CB63BACB2A6A5DB7CEA45AE9F
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/52yRIEJtEfgFBpWr58fadnScoJw.roa
Signing time: Tue 29 Apr 2025 13:47:10 +0000
ROA not before: Tue 29 Apr 2025 13:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 31.42.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:cd:32:5c:b6:3b:ac:b2:a6:a5:db:7c:ea:45:ae:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Apr 29 13:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e76c9120426d11f8050695abe7c7da76749ca09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:8e:91:cf:2b:a9:33:4a:e2:92:ba:fc:f5:
0e:35:6f:1b:31:55:69:cd:72:e1:fc:1c:b8:c6:20:
4f:a4:d3:83:b8:01:78:0b:f8:03:b0:0d:69:fa:eb:
95:bc:07:21:8f:64:2d:62:5a:6b:30:30:93:4f:65:
3e:9e:c5:63:e2:00:5f:00:cb:5c:0c:0e:63:95:16:
20:b7:f8:d2:da:1a:c4:27:07:0a:4d:51:1c:a4:da:
70:3a:1d:99:3c:93:a8:7a:c9:7c:4a:de:df:83:a5:
58:52:86:1d:44:f7:76:6f:c7:33:90:07:b4:3e:9e:
c2:92:49:b7:ed:d9:ea:8a:99:a4:33:5a:15:bf:74:
dd:52:18:55:e4:f3:d3:53:d5:a0:32:1d:3f:8e:a1:
41:c4:94:76:d4:f6:0b:18:54:14:1f:34:88:8e:f7:
a4:43:74:62:94:d4:52:c5:c9:39:8a:d2:c5:e6:51:
02:1c:f5:15:db:24:2f:9e:0d:bc:48:71:dc:00:13:
eb:3d:4f:e5:eb:27:f5:75:6e:86:38:51:44:7b:0e:
ad:ee:ce:71:a7:d3:db:b6:2f:37:2c:f2:8f:54:a1:
70:6e:46:93:ef:fa:d0:e3:95:25:7e:fa:d7:6d:3d:
a8:ed:1c:3a:93:dd:b4:a3:a8:b5:73:6f:2a:6c:78:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:91:20:42:6D:11:F8:05:06:95:AB:E7:C7:DA:76:74:9C:A0:9C
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/52yRIEJtEfgFBpWr58fadnScoJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.126.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ea:eb:e5:f7:c5:ab:8f:df:4c:1b:4c:4d:c4:18:69:1a:31:
c2:89:82:e9:6c:bb:7f:0b:e2:ae:aa:12:fa:99:23:88:7f:bb:
5e:97:79:1e:ec:22:b2:53:26:f3:c1:ac:f6:a5:ee:82:b3:52:
64:6c:d9:cb:4c:95:f5:10:25:5d:72:ec:01:49:a1:8d:d4:30:
42:f4:c8:4d:18:09:fd:2c:e5:de:83:44:b7:97:cd:19:4d:bc:
7e:ee:f1:8d:98:d6:e1:5c:c5:f1:4d:82:d4:4a:ae:f5:37:91:
23:f7:30:22:1c:64:51:5e:f6:36:c5:96:03:90:7a:3c:42:af:
4a:e5:89:c6:40:f3:6c:d9:e8:59:0f:85:cb:97:88:6f:81:14:
d9:fc:9a:e8:74:40:0e:34:3a:8e:dd:76:8e:22:62:97:40:50:
6a:be:46:fe:65:48:33:6d:e9:32:bc:d2:b7:66:30:83:3f:bb:
91:2c:c3:98:ea:46:6c:3f:08:78:e7:8b:65:e8:70:10:59:40:
a8:2f:a8:eb:eb:91:3b:2b:91:07:eb:df:b3:43:fd:96:f1:bf:
78:9a:ee:58:10:5c:23:76:48:c7:66:35:41:35:9c:3e:57:11:
2a:b1:fe:a5:a4:f6:e2:af:56:4b:90:c3:4a:23:91:6b:2f:80:
14:f4:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:26:39 2025 by rpki-client