Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/G40JELkFkjinZ7Bg4-gGMDe46ac.roa
File: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (raw, json)
Hash identifier: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=
Subject key identifier: 1B:8D:09:10:B9:05:92:38:A7:67:B0:60:E3:E8:06:30:37:B8:E9:A7
Certificate issuer: /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial: 019420684C50B1950A4966D042E5F62A6683
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/G40JELkFkjinZ7Bg4-gGMDe46ac.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208143
IP address blocks: 185.179.34.0/24 maxlen: 24
2a02:6c20:5::/48 maxlen: 48
2a02:6c20:810::/48 maxlen: 48
2a02:6c20:828::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4c:50:b1:95:0a:49:66:d0:42:e5:f6:2a:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b8d0910b9059238a767b060e3e8063037b8e9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:46:a6:ff:da:f1:e0:14:5a:62:4c:dc:bc:
e8:96:7a:70:c4:27:08:91:f9:93:90:fd:b9:4b:31:
ae:81:1f:b4:b5:b6:c1:dc:de:74:4e:ba:a6:f3:0e:
2c:48:09:93:b3:22:c3:8c:6c:7b:26:72:ef:67:6f:
f6:34:b9:59:48:ef:12:97:b4:b0:6f:66:51:0f:9c:
93:32:ae:f9:06:f8:df:c3:85:81:37:96:79:d8:6c:
35:df:89:5e:fa:7e:4e:27:81:8c:83:2d:2c:e1:4f:
a3:a6:a8:66:1d:3c:ee:ce:87:57:15:c9:65:b0:44:
f6:e8:99:64:47:6f:62:4d:7d:bd:d6:22:31:c6:e9:
9a:51:63:aa:d6:53:ab:5f:dd:67:a8:30:15:af:35:
58:cf:f1:ba:0b:c9:42:52:c4:83:14:21:14:c2:4a:
13:ba:7d:78:4b:a1:cc:2a:97:8f:c2:a2:7e:25:ca:
d1:a4:c3:2a:04:7d:17:ae:6d:30:4e:2f:31:d9:24:
31:f5:7d:46:44:d0:e3:a9:65:48:b0:1e:c1:d4:87:
2a:e2:8b:e0:72:66:96:e4:bb:0c:19:ec:d6:4f:04:
e3:fa:5a:d1:8a:bd:19:a7:8a:7b:e4:32:9a:a3:08:
fd:49:36:78:8e:a4:28:7b:58:fa:7b:cb:0b:80:a7:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:09:10:B9:05:92:38:A7:67:B0:60:E3:E8:06:30:37:B8:E9:A7
X509v3 Authority Key Identifier:
keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/G40JELkFkjinZ7Bg4-gGMDe46ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.34.0/24
IPv6:
2a02:6c20:5::/48
2a02:6c20:810::/48
2a02:6c20:828::/48
Signature Algorithm: sha256WithRSAEncryption
79:84:8c:5d:bd:ee:03:6f:0b:4c:3c:95:dd:95:be:f8:16:9a:
22:76:91:fb:ca:a7:03:d8:84:c9:fd:fc:2a:3f:70:57:25:ce:
26:82:bb:e1:62:7e:3b:98:35:24:f6:d2:0a:5a:7f:5c:ab:57:
6d:c5:59:f6:0c:61:30:e6:e2:73:ea:18:46:33:61:ff:d8:ce:
40:e9:19:93:c0:e0:90:48:2c:81:5c:37:d8:5e:97:d0:06:e0:
64:3d:7c:8b:67:90:ea:03:74:95:22:4d:7c:4b:25:1d:2c:f5:
fa:88:a2:19:1a:d2:6b:42:4a:1b:97:fd:5f:3d:e0:81:26:43:
6c:aa:ab:81:58:fc:70:1a:34:35:9a:b1:87:dd:2e:20:ac:7f:
fc:d1:33:15:76:1d:63:ec:f3:a7:12:95:24:dd:3b:d9:bd:c1:
18:fb:d2:dd:0a:eb:fe:e2:f6:d3:38:07:dc:9b:b6:00:38:14:
15:55:d7:bb:4a:a0:b2:5b:89:c8:e5:90:d7:a2:ea:4c:ce:51:
2e:14:d2:29:c2:4c:f5:48:8f:eb:d3:e3:a9:3c:72:ee:0c:9e:
1e:37:ec:eb:3a:c0:f7:f1:27:8b:7e:1a:fe:fa:42:b5:dc:fe:
8d:15:21:6f:40:76:5d:66:43:44:31:65:db:1c:9f:a1:6c:6d:
6c:bb:61:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:21 2025 by rpki-client