Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/_eEka1D2F9svheD7_1S50A6jg0c.roa
File: _eEka1D2F9svheD7_1S50A6jg0c.roa (raw, json)
Hash identifier: FY3lzS47CrifHw8hxi2Yq9gCSugm8bX/KQaXGUUplkU=
Subject key identifier: FD:E1:24:6B:50:F6:17:DB:2F:85:E0:FB:FF:54:B9:D0:0E:A3:83:47
Certificate issuer: /CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Certificate serial: 0194214463BB9DE9EC9B072E809896A78B08
Authority key identifier: 29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/_eEka1D2F9svheD7_1S50A6jg0c.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.188.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:63:bb:9d:e9:ec:9b:07:2e:80:98:96:a7:8b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2979cc43c2469ffa5cf8b7ac639b01f3a768ac55
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fde1246b50f617db2f85e0fbff54b9d00ea38347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:b8:c3:0b:eb:0e:2a:33:c1:aa:ec:03:13:
f8:4f:55:21:cd:b7:87:f3:13:cf:08:e0:a3:c0:75:
f0:58:06:fd:b3:09:de:89:77:9a:b8:b8:9e:32:6f:
63:ad:e8:71:de:a6:bf:c8:47:f7:6a:f0:96:6e:d7:
aa:78:4b:49:2f:32:22:9c:2e:62:89:fd:c5:18:14:
41:76:7d:79:1c:44:57:ca:ad:01:b6:c3:70:e6:6c:
4c:6a:fe:d9:14:a1:2b:9b:e3:dc:15:1a:ce:32:a3:
34:7f:cc:c8:d8:0e:d2:db:81:42:ba:52:3f:97:c0:
7d:1f:a9:65:13:25:96:fe:ea:0e:5b:37:1c:f5:a6:
55:60:af:a0:8f:be:cf:3b:69:90:84:db:ef:a5:2e:
3c:91:35:23:ec:e9:da:a4:dc:79:86:a2:d1:4a:5c:
09:41:73:90:e5:87:d0:44:ed:88:dc:42:17:72:d9:
c5:8b:3c:30:cd:7f:67:da:80:3f:23:ad:4f:c0:a1:
fa:58:3d:47:9f:07:5f:8d:04:a7:56:f3:19:e9:de:
76:2b:d4:45:6e:18:58:46:ab:b5:94:83:b4:32:87:
7a:1f:83:91:a6:3b:2a:80:8f:ab:3e:25:68:7e:e0:
61:aa:26:53:50:3a:8b:d8:f6:58:88:1c:f4:02:4b:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E1:24:6B:50:F6:17:DB:2F:85:E0:FB:FF:54:B9:D0:0E:A3:83:47
X509v3 Authority Key Identifier:
keyid:29:79:CC:43:C2:46:9F:FA:5C:F8:B7:AC:63:9B:01:F3:A7:68:AC:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXnMQ8JGn_pc-LesY5sB86dorFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/_eEka1D2F9svheD7_1S50A6jg0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e40f9d-00f4-40d9-8b8d-40eaebc1c47e/1/KXnMQ8JGn_pc-LesY5sB86dorFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.140.0/24
Signature Algorithm: sha256WithRSAEncryption
f0:dc:a7:20:31:b3:75:6f:cd:38:82:c0:6c:dc:38:4d:17:ac:
da:29:f1:02:ab:60:bc:c6:5c:f7:aa:a9:ac:d7:4b:18:d3:4e:
d0:a1:a5:ad:41:f5:a1:3c:6c:57:06:a9:91:be:4c:a5:60:91:
66:84:dc:9a:77:77:2d:40:66:b8:9b:d2:3e:2c:f9:09:99:c2:
fb:a5:e2:84:8b:f5:b0:69:54:c4:a8:f7:c4:9e:81:79:e0:c4:
11:b2:4c:ef:99:72:28:ba:1f:73:11:56:3d:c4:58:12:3a:42:
63:cc:03:02:34:1c:dd:91:68:44:3a:0e:7f:e0:92:a8:2d:89:
02:ba:df:18:4e:d6:93:a7:14:80:39:2f:77:70:0d:d4:4a:34:
71:7c:32:5e:75:b8:a8:37:41:ab:ee:38:48:b8:2b:66:e2:ee:
bb:9c:dd:58:03:3c:71:aa:26:46:78:82:e0:5e:a8:90:f7:46:
af:15:60:6e:49:21:20:6b:10:7c:41:ee:ae:22:5a:eb:b5:9c:
8c:b6:98:88:2a:4d:31:67:4d:72:14:b2:96:37:9c:79:5d:5f:
1a:13:66:b3:34:9b:7c:37:09:c9:89:d5:ef:5f:9c:a0:5a:f9:
85:65:bb:cc:5b:5e:38:76:e0:2e:0a:f7:bb:61:0d:a8:cd:eb:
5c:64:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:52 2025 by rpki-client