Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/en8k-90PXTgGYH8oSoBljn8zBlI.roa
File: en8k-90PXTgGYH8oSoBljn8zBlI.roa (raw, json)
Hash identifier: WKoDTE31M9JGFXyywLbU8kBebgj7WFFGX+iopkVFe0g=
Subject key identifier: 7A:7F:24:FB:DD:0F:5D:38:06:60:7F:28:4A:80:65:8E:7F:33:06:52
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01969EFCCF8386E7FF12F4A4E7211103A202
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/en8k-90PXTgGYH8oSoBljn8zBlI.roa
Signing time: Mon 05 May 2025 05:48:10 +0000
ROA not before: Mon 05 May 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 81.29.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:fc:cf:83:86:e7:ff:12:f4:a4:e7:21:11:03:a2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 5 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a7f24fbdd0f5d3806607f284a80658e7f330652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:6c:63:e4:09:9d:23:2a:00:31:e6:34:49:
7b:b4:6f:74:17:92:0a:86:22:aa:00:6d:ba:9f:44:
e2:e4:59:b3:91:ab:16:86:e9:57:87:a6:74:d7:61:
3c:d4:5a:43:bc:7d:18:80:7e:7a:9d:52:62:5d:3d:
22:5b:51:dd:ba:d2:8d:c0:31:99:02:71:de:e8:70:
9a:db:70:45:10:93:f0:0d:d7:57:4a:99:b8:81:58:
eb:ee:fc:34:00:eb:1e:6a:21:b8:e7:80:46:be:95:
6a:1b:f8:4d:ed:ff:42:8a:cf:5d:2d:78:15:ab:d8:
66:c6:8a:ee:f9:db:c0:2d:4b:f0:d5:79:d8:3b:90:
8e:66:02:e0:58:65:0a:e2:4a:11:d4:62:26:c0:5a:
0c:87:6b:69:b7:23:ae:90:51:ac:b7:03:1a:91:8b:
bc:e6:f2:78:12:4c:50:10:0f:53:36:5f:92:d3:bc:
68:77:72:a2:8e:98:27:92:17:92:0b:cd:6c:ea:1c:
0d:32:d8:be:d8:cb:47:cf:3b:20:e8:e1:76:fd:e3:
b6:8d:95:78:8b:77:60:fe:dd:c1:4e:15:16:00:6d:
d8:b6:67:c5:f7:2c:6f:b4:40:4d:0c:7a:e6:a3:93:
db:5f:91:41:8d:66:fd:ae:8e:12:3b:d6:31:e8:82:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:24:FB:DD:0F:5D:38:06:60:7F:28:4A:80:65:8E:7F:33:06:52
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/en8k-90PXTgGYH8oSoBljn8zBlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.156.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e1:c8:f0:e5:e9:2b:54:5b:48:6b:36:08:77:b6:8d:79:1c:
1e:64:4c:79:4a:fb:62:bd:d3:a2:20:54:6b:7e:70:26:61:8c:
11:26:29:c1:fb:d8:75:42:97:2e:e8:8a:18:27:15:4c:75:76:
fc:3c:fb:0d:08:88:ae:3f:79:fd:71:b1:77:ce:39:53:15:bf:
9f:b1:2f:66:69:fc:84:6f:7b:69:68:27:e1:fb:c1:ef:1e:68:
b8:f8:1f:2d:d2:9e:ff:a1:23:39:86:03:06:47:35:c2:d0:62:
52:67:18:94:25:fa:0c:72:b8:6f:8e:48:39:c3:97:65:00:df:
dc:08:f0:b7:3f:08:0f:9d:29:f3:63:d4:87:dc:da:9a:18:36:
f3:9a:49:43:81:8e:df:ad:98:69:12:3e:2e:2c:18:a7:f2:a3:
67:c4:de:f1:e4:ee:e6:8f:1b:d9:5e:a3:b0:cd:0d:c2:bf:1c:
a8:2e:8f:99:21:7a:09:fc:58:01:d4:11:85:7e:f3:49:43:b1:
46:2e:0e:10:c2:1d:41:31:90:e7:4f:91:c4:ca:e7:af:d7:6a:
46:ee:d0:51:c4:01:18:00:e3:ba:09:e5:13:65:91:0f:f0:2e:
27:fe:ce:51:b6:a4:82:6e:6f:37:30:b5:8f:2f:66:06:48:a7:
33:16:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:46:05 2025 by rpki-client