Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eT-abyuDRMyn6JVGEu0pT9gMqNs.roa
File: eT-abyuDRMyn6JVGEu0pT9gMqNs.roa (raw, json)
Hash identifier: qb7Oq+7DWlnf2AoUnF4nTFuNUr+cKI9Qto7AGoTXKkk=
Subject key identifier: 79:3F:9A:6F:2B:83:44:CC:A7:E8:95:46:12:ED:29:4F:D8:0C:A8:DB
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0196B6D3B9C7502D4FC329AD7B7378A5BB2D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eT-abyuDRMyn6JVGEu0pT9gMqNs.roa
Signing time: Fri 09 May 2025 20:54:10 +0000
ROA not before: Fri 09 May 2025 20:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 82.152.142.0/24 maxlen: 24
89.213.104.0/24 maxlen: 24
89.213.123.0/24 maxlen: 24
109.176.14.0/24 maxlen: 24
213.210.52.0/24 maxlen: 24
213.210.53.0/24 maxlen: 24
217.145.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d3:b9:c7:50:2d:4f:c3:29:ad:7b:73:78:a5:bb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 9 20:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=793f9a6f2b8344cca7e8954612ed294fd80ca8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:43:d1:44:6b:13:3a:50:84:6a:41:79:d0:08:
34:92:05:da:7c:b5:b6:6c:1c:a9:83:7c:03:86:0f:
cc:2a:37:03:0c:b4:08:9d:86:95:22:67:cb:0d:54:
a2:6f:ad:b2:7f:18:8c:49:e2:2a:5a:c2:2f:a0:ad:
af:d1:fa:dd:9c:8c:24:10:a7:0e:a7:81:d7:1a:9c:
24:f0:eb:87:e0:47:27:01:0d:1c:00:dd:45:d9:d4:
5b:b5:b8:13:43:d4:a5:79:e7:ef:a7:24:07:82:b6:
cb:a7:70:f7:65:87:d4:d3:15:80:d6:2f:eb:f5:90:
52:10:89:dc:41:e4:f7:0d:0e:05:a1:7e:37:2b:6e:
46:f5:56:7e:88:e6:06:2f:56:3b:3a:23:d6:0b:8d:
91:f1:17:2c:7b:73:9d:87:8e:78:1a:92:74:35:49:
61:e0:37:1f:7c:08:de:21:3a:85:9d:c2:64:b7:af:
03:7f:f9:3a:b8:90:fa:b2:5c:2f:2e:31:37:2f:49:
aa:f0:9d:48:83:db:1e:05:49:f9:2f:dc:00:e8:29:
28:fa:06:da:bd:75:1b:be:0d:27:0f:4c:a3:6e:05:
95:fe:d5:f7:f4:7b:d4:37:0b:6c:20:0d:8d:5c:cc:
d9:a9:7c:7e:1d:6f:11:ee:1f:4c:a7:43:7b:97:e2:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:9A:6F:2B:83:44:CC:A7:E8:95:46:12:ED:29:4F:D8:0C:A8:DB
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eT-abyuDRMyn6JVGEu0pT9gMqNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.142.0/24
89.213.104.0/24
89.213.123.0/24
109.176.14.0/24
213.210.52.0/23
217.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f2:12:88:66:a7:db:44:a8:81:bf:c6:35:2f:4f:27:45:f1:
f1:66:58:88:5d:cd:7a:fb:61:54:7c:0c:6d:fd:4b:4a:03:35:
bf:4c:87:e1:07:62:b0:e6:9f:b1:9f:9e:e0:58:ea:82:5f:a3:
28:94:8a:60:37:b8:43:96:7d:e7:6e:f5:9b:ab:cc:46:73:b6:
c6:2a:19:16:56:92:5b:dd:91:fb:e2:8b:f7:b4:85:07:7f:60:
01:a7:45:f3:d0:e1:b5:e1:14:f4:59:2d:50:01:40:84:9e:50:
64:c8:3b:fd:70:da:ed:bb:45:92:27:d9:3f:06:6a:9c:65:fa:
9e:5f:1e:8d:0c:9a:d9:69:a5:12:65:6d:66:12:f0:e1:cc:10:
df:43:f6:ed:4d:f8:64:f5:f9:59:2a:06:53:a0:02:b1:9d:38:
04:7b:e0:3a:6d:25:37:e6:73:df:1a:cc:4e:e1:84:40:71:54:
95:71:d4:89:6a:0f:32:08:8c:6d:ee:77:2f:c0:d9:25:01:9b:
e5:c2:1f:76:de:85:81:fa:f8:17:88:49:da:a1:3b:65:ac:a5:
53:20:1c:09:14:b2:ee:06:3e:4d:25:2f:fb:23:5e:16:d6:1f:
53:20:ea:64:d7:11:b2:da:eb:2f:2d:59:9d:05:8b:f1:58:04:
85:0f:05:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:26:36 2025 by rpki-client