Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bQU8cG0tem51FIDKjNFSoCEKHg8.roa
File: bQU8cG0tem51FIDKjNFSoCEKHg8.roa (raw, json)
Hash identifier: KO5kLCmpqLEYOi5rOAsbyJRXDHrshZlGM/zfN81K9s4=
Subject key identifier: 6D:05:3C:70:6D:2D:7A:6E:75:14:80:CA:8C:D1:52:A0:21:0A:1E:0F
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5B621F395C7A23C0184D802C8551E
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bQU8cG0tem51FIDKjNFSoCEKHg8.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216236
IP address blocks: 37.139.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:21:f3:95:c7:a2:3c:01:84:d8:02:c8:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d053c706d2d7a6e751480ca8cd152a0210a1e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:0e:f4:fb:90:f1:ed:18:c7:9b:69:90:97:
93:c6:b3:b4:5b:4d:8f:4c:85:40:2a:b1:5a:53:29:
13:39:30:b7:5a:96:e5:37:3e:67:b2:ee:c6:f5:c8:
4b:e8:ba:fd:1b:80:38:53:23:c9:b5:87:08:7d:bf:
56:00:3c:1d:77:14:6a:3d:66:9b:52:6b:44:0b:e6:
b2:2b:73:0a:0e:53:e4:7b:e3:32:40:be:0a:81:11:
b0:1a:23:f1:b1:89:65:58:ab:45:0e:61:24:b5:13:
b2:a6:91:8d:a0:3e:09:55:77:e7:19:49:58:e0:80:
07:9c:dc:85:39:7a:c1:7f:76:5b:5c:46:b3:66:0e:
3a:df:0a:83:ea:4d:cd:d8:39:9d:8a:bd:14:b7:71:
20:43:87:09:52:f3:58:aa:43:32:fa:ff:c5:ee:f2:
25:73:66:31:87:21:32:76:e5:86:55:55:d1:e9:2e:
b3:28:93:fe:34:f2:df:d8:f9:00:78:52:e8:f3:16:
5b:77:3e:57:f5:66:30:f1:3b:28:1a:2f:7c:d2:80:
3c:44:bd:f0:4e:b6:0b:ef:99:27:8f:ae:a9:97:20:
f9:47:97:24:14:96:68:d1:54:8c:bf:a1:fa:94:94:
bb:37:34:17:de:42:27:23:d9:38:9e:b0:e3:1c:46:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:3C:70:6D:2D:7A:6E:75:14:80:CA:8C:D1:52:A0:21:0A:1E:0F
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/bQU8cG0tem51FIDKjNFSoCEKHg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.38.0/24
Signature Algorithm: sha256WithRSAEncryption
59:36:9b:a4:5a:22:03:1d:b6:7f:c3:73:93:e5:49:b8:d8:8b:
d0:c7:9b:fb:c7:19:08:45:ee:50:0f:8e:72:51:7b:21:ae:88:
a2:d9:9e:78:58:f1:46:f5:30:9e:1d:7c:d4:6c:6b:98:ec:9c:
33:70:62:56:e2:90:a3:05:2b:4a:dc:f8:06:2a:d9:d2:01:98:
69:20:56:79:c4:74:5f:bd:cd:02:19:33:10:3c:8b:bc:c4:73:
77:c6:63:11:eb:bc:86:3a:10:03:16:04:27:17:d9:2e:f7:43:
21:7b:c1:07:06:6c:4c:6a:e1:96:b8:55:de:c0:47:86:ff:fc:
cd:29:31:cd:ec:da:6a:36:e8:3f:80:5f:ae:19:b6:90:51:ab:
44:02:7e:76:e7:46:dd:67:d9:43:fc:1e:20:63:76:e9:11:b0:
4f:63:e7:7b:a2:fa:e7:24:02:2c:76:8e:f3:3b:dd:a2:b7:4c:
2e:01:61:37:fc:a4:f5:3c:46:e6:b2:22:25:67:5d:0d:30:32:
5f:f9:04:b3:8e:d6:c7:29:df:da:03:11:12:81:36:f1:35:5e:
49:39:69:02:1a:68:8e:42:49:6a:d3:70:22:fa:08:25:c5:91:
e3:a0:89:12:f0:a0:14:f7:78:28:60:73:2e:9c:8d:d8:a7:09:
ea:65:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:06 2025 by rpki-client