Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eW31QtIw0De2hC-wRcz6BbqJBP8.roa
File: eW31QtIw0De2hC-wRcz6BbqJBP8.roa (raw, json)
Hash identifier: Wc0UbtBVnHavOJyxW2WyHxWo+alMpdJTl5RGV+Bp6cU=
Subject key identifier: 79:6D:F5:42:D2:30:D0:37:B6:84:2F:B0:45:CC:FA:05:BA:89:04:FF
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B96B6AB38AEA7DBCC7EF2E604DBB8
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eW31QtIw0De2hC-wRcz6BbqJBP8.roa
Signing time: Thu 02 Jan 2025 09:49:32 +0000
ROA not before: Thu 02 Jan 2025 09:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200030
IP address blocks: 178.156.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:96:b6:ab:38:ae:a7:db:cc:7e:f2:e6:04:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=796df542d230d037b6842fb045ccfa05ba8904ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:8e:e8:c3:b9:e9:85:b1:35:29:51:2d:ff:
32:15:42:58:ec:81:bd:90:d5:a5:4b:5d:cd:fd:41:
d4:25:9e:4b:b5:99:27:e9:f4:f0:a3:6c:34:e3:90:
ff:ad:1c:2b:47:56:43:c5:ba:75:09:67:22:c8:9b:
0d:36:f3:d3:3d:f6:23:03:14:3b:5f:c8:df:2a:ad:
24:b3:2f:ce:29:26:0c:70:c6:da:77:c7:54:ce:e9:
c9:b5:04:e0:a4:b8:0c:28:9a:4d:05:ab:eb:6a:3b:
53:0f:50:a3:b8:08:d7:35:4b:b6:0d:9a:83:22:20:
e8:e7:13:c4:7c:5a:5b:c1:f4:9f:17:da:ec:8b:84:
da:f2:5e:3c:6c:04:18:8c:cc:72:61:aa:39:b9:97:
7f:fc:7c:37:0d:01:b4:4f:c4:e1:f2:f9:5e:2c:46:
b5:08:5e:7f:8b:01:88:3a:b2:30:f1:7b:2e:1e:03:
c4:25:72:de:1d:65:61:bd:8e:1d:dd:4c:03:03:4c:
13:be:81:d0:bc:01:78:ff:a9:17:0b:28:8d:bf:e2:
16:03:e3:03:e7:62:9c:10:dd:08:7b:7e:41:96:71:
bb:22:99:ec:af:f2:72:e2:9a:02:41:f5:fe:06:7b:
cc:b6:a5:36:cc:00:aa:dd:84:8a:90:c8:07:c0:84:
61:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:F5:42:D2:30:D0:37:B6:84:2F:B0:45:CC:FA:05:BA:89:04:FF
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/eW31QtIw0De2hC-wRcz6BbqJBP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.156.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a2:4f:0e:73:aa:77:a9:ae:03:1a:93:6e:76:b9:1a:5b:79:
10:2b:6b:f3:26:c9:ef:99:9a:b4:75:2e:b0:0c:cc:d6:25:80:
2a:ee:07:29:7b:ef:a1:2b:f4:36:94:cf:42:51:2d:1a:87:41:
ab:1f:0f:20:19:b6:41:9e:df:34:cb:5a:5c:60:78:5f:a6:f4:
31:5f:e8:7b:b8:b7:ec:9e:5f:eb:2d:01:dc:1f:75:5a:a6:ea:
7f:74:42:50:05:b2:f8:00:6d:01:d7:07:1f:34:5b:81:0c:1a:
b1:e1:da:10:36:58:f3:91:c9:1f:fe:52:30:ce:87:e4:c0:12:
f1:bb:fc:95:18:a4:e2:89:d4:cc:5f:2b:31:c5:f8:9a:eb:a2:
68:25:61:07:f7:67:54:09:9d:1a:53:77:4e:2e:21:a6:5c:d6:
10:84:59:b4:c8:d7:3a:1b:27:52:c8:98:2c:67:3a:dc:2c:aa:
e7:68:c7:ff:3e:45:24:07:c8:f3:70:dc:74:09:10:31:7c:99:
ec:58:20:28:2d:2f:4f:bc:ec:bf:38:94:87:b4:a8:08:a3:ec:
64:2a:42:da:22:c4:5f:3c:b0:df:ab:e6:9e:cf:f4:c9:aa:71:
06:82:a2:09:61:f3:fb:4c:4b:0b:68:a5:c0:81:08:55:12:0a:
4c:b0:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:42:10 2025 by rpki-client