Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/DEbqDj-D0KhPe_ozDfopNhqgvZc.roa
File: DEbqDj-D0KhPe_ozDfopNhqgvZc.roa (raw, json)
Hash identifier: 6XoIqk1u5dfBbYPK0R4bSxJz+kGjtKoT47/COVdRMu0=
Subject key identifier: 0C:46:EA:0E:3F:83:D0:A8:4F:7B:FA:33:0D:FA:29:36:1A:A0:BD:97
Certificate issuer: /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial: 0194266A1CD55F207DABBD089A662D9EDBA5
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/DEbqDj-D0KhPe_ozDfopNhqgvZc.roa
Signing time: Thu 02 Jan 2025 09:47:55 +0000
ROA not before: Thu 02 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 37.205.0.0/24 maxlen: 24
37.205.1.0/24 maxlen: 24
37.205.2.0/24 maxlen: 24
37.205.3.0/24 maxlen: 24
37.205.4.0/24 maxlen: 24
37.205.5.0/24 maxlen: 24
37.205.6.0/24 maxlen: 24
37.205.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:1c:d5:5f:20:7d:ab:bd:08:9a:66:2d:9e:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Validity
Not Before: Jan 2 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c46ea0e3f83d0a84f7bfa330dfa29361aa0bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:f2:d0:e1:04:df:53:cc:58:53:b9:a9:d2:
5e:16:94:4e:67:de:f1:d5:c1:d4:ef:09:33:e3:97:
a7:fe:1a:41:4b:66:da:69:1d:78:a5:4a:38:47:5c:
fa:8b:32:e0:71:44:b2:ee:ff:3b:7a:ee:02:4e:fa:
e9:93:17:ba:54:84:93:f9:df:e6:4c:ad:4b:0b:99:
df:16:51:d9:d4:70:1b:29:8b:e1:d6:bf:89:ab:df:
1a:3f:e0:05:e4:8e:b1:9d:ce:a6:45:87:df:c2:4a:
15:a5:56:2c:60:6f:3c:d5:cf:b3:87:5a:45:2c:15:
f8:27:a2:88:9c:e1:26:bf:65:5d:cb:d2:4c:ee:06:
08:9f:29:da:99:86:03:c4:aa:26:3b:9a:c3:75:9b:
19:ed:f3:26:5d:a1:ac:dc:6f:d3:c5:94:8c:52:8b:
1c:e7:20:bc:d4:ca:f0:72:28:e5:ab:91:49:b6:94:
a8:d3:2a:5d:a5:79:e9:2e:4f:df:0a:f7:11:29:75:
88:6c:81:01:b1:92:83:8c:d0:6b:a7:e1:48:ff:2b:
ad:64:a5:df:4f:f5:8f:64:ac:d4:31:5e:1d:54:be:
3f:fa:f4:51:4b:10:8c:a2:94:27:10:da:f8:c8:78:
11:24:3d:d1:99:02:0f:a8:88:76:d5:76:7b:e4:2b:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:46:EA:0E:3F:83:D0:A8:4F:7B:FA:33:0D:FA:29:36:1A:A0:BD:97
X509v3 Authority Key Identifier:
keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/DEbqDj-D0KhPe_ozDfopNhqgvZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:46:b1:52:b2:b9:a0:b4:b3:e7:5d:a7:02:bc:50:13:8f:1c:
6d:f3:1e:80:f5:68:62:53:4b:d7:50:0e:b4:cd:64:a9:6b:61:
cd:0b:67:3f:28:0e:85:dc:22:89:16:37:6b:60:5c:d5:d3:12:
30:41:d5:0d:74:60:45:93:37:62:11:80:ea:b2:a6:07:0b:7b:
de:8e:0a:da:30:ae:8b:69:49:b2:2a:6e:d1:e5:23:fb:29:fc:
78:cd:0e:2c:58:68:d8:c2:3a:05:52:48:90:a2:de:41:56:1a:
ec:e2:ae:27:f8:3f:b9:6e:3d:47:90:c4:0d:b9:d5:28:49:7f:
bb:d8:3b:d3:a0:7f:6b:3d:49:54:48:6d:40:d1:3c:54:3c:58:
ac:dc:fa:07:3a:7f:10:62:de:43:d7:ea:47:ca:bd:c8:d7:0d:
49:81:03:3a:0c:96:71:d7:4c:e9:99:a4:ef:aa:20:ad:b9:03:
43:20:96:38:fd:51:be:f9:25:91:d8:9e:ea:2b:79:91:b0:79:
0f:44:3f:05:4d:39:85:f3:04:07:fe:34:88:fb:31:d3:07:4a:
58:91:59:4a:56:b7:4e:21:57:45:5a:e9:c2:1c:0f:ef:39:af:
87:c9:da:b3:b2:87:a6:06:b8:b4:f8:a0:3f:fc:d6:80:c0:1c:
68:94:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:54 2025 by rpki-client