Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/eUC78a5iIDA3NnkTRgfvxwNqxjg.roa
File: eUC78a5iIDA3NnkTRgfvxwNqxjg.roa (raw, json)
Hash identifier: gOCTr9qoGQ7aucr1ozDn80KAKdoZpLb4iX/BnNIbZIY=
Subject key identifier: 79:40:BB:F1:AE:62:20:30:37:36:79:13:46:07:EF:C7:03:6A:C6:38
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 0196A09B8AF307A81074DF154B98EAF761D0
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/eUC78a5iIDA3NnkTRgfvxwNqxjg.roa
Signing time: Mon 05 May 2025 13:21:10 +0000
ROA not before: Mon 05 May 2025 13:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207905
IP address blocks: 195.39.194.0/23 maxlen: 24
195.39.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:9b:8a:f3:07:a8:10:74:df:15:4b:98:ea:f7:61:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: May 5 13:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7940bbf1ae622030373679134607efc7036ac638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:d3:e5:51:68:59:34:b9:91:47:0d:ea:ca:
7c:55:7d:ec:f1:69:95:64:da:ce:63:9e:60:8f:de:
9b:e0:8f:9e:ed:d1:68:31:23:6e:a2:50:d0:b8:b2:
ae:8c:31:20:e8:31:81:0b:30:15:82:b5:09:e0:26:
1f:fe:ed:66:78:a7:36:e6:27:26:78:10:71:df:68:
10:3f:a1:19:3a:ec:86:49:ab:26:30:c8:23:e0:4c:
a0:eb:ab:ce:a1:eb:0e:d4:d9:a4:ed:ee:2d:06:11:
4b:01:56:da:fb:91:06:9f:4d:e0:80:6f:08:0a:43:
4d:87:cb:c5:01:55:23:3c:0b:84:24:e5:c3:b1:2e:
0f:d0:5b:65:e7:25:10:12:5b:7d:74:e0:55:41:04:
4b:cd:7f:bc:16:cc:e6:5f:f1:38:7e:1c:62:59:d7:
83:f6:78:10:1f:4d:b5:a9:25:f7:dd:72:ce:08:f6:
df:1c:78:9d:74:20:27:2c:bc:f9:3d:35:26:cf:7c:
b5:6e:6d:63:8a:17:0c:5f:d8:23:89:a6:13:85:61:
25:08:ee:aa:4f:93:28:bd:84:8c:1c:78:f6:43:9e:
3a:1a:36:19:08:19:43:21:02:5c:7e:1a:19:df:74:
68:03:35:7f:17:b7:3c:d8:d9:e8:aa:9d:d4:a5:f3:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:BB:F1:AE:62:20:30:37:36:79:13:46:07:EF:C7:03:6A:C6:38
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/eUC78a5iIDA3NnkTRgfvxwNqxjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.194.0/23
195.39.202.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:1c:9c:7c:80:1e:11:fc:8d:3e:07:5f:8e:7f:d0:9d:93:63:
02:5f:e3:49:35:b0:7d:e7:17:38:73:61:08:57:f2:be:ee:57:
1c:04:a5:c2:51:c7:56:59:ad:1f:c0:09:d1:4b:85:7c:24:a7:
12:07:17:b9:da:b2:44:48:65:2c:ba:14:fb:ee:36:4e:7f:9b:
74:db:11:49:2e:a8:f1:b4:81:0d:19:9c:1e:fc:40:65:4d:4b:
7a:c1:b5:ba:cc:8b:8a:b7:98:49:a4:93:ab:5a:e3:d9:a5:ef:
24:6d:34:13:85:56:56:96:f7:83:ec:1f:b0:2a:3a:53:20:4c:
a6:39:8c:61:79:e9:ae:df:58:ca:f5:4e:5d:6b:ec:d8:78:08:
a6:b6:41:b3:30:8a:28:54:95:9b:4b:d8:76:7d:80:32:81:18:
65:58:ad:44:30:61:06:81:f6:d9:93:5e:0f:27:c1:93:0b:72:
20:3d:f4:f1:1a:9d:77:b7:ac:a3:04:a0:7a:47:c0:50:75:53:
c0:54:d7:8b:dc:ff:22:77:05:4a:8d:ad:ec:b5:e0:a2:b2:99:
e3:23:33:a0:b0:a8:df:c4:77:c1:db:92:82:a5:37:a1:48:52:
e3:bf:f1:7c:a2:69:1c:eb:6d:67:93:c4:27:59:97:77:f4:70:
8b:da:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:09:09 2025 by rpki-client