Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa
File: Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa (raw, json)
Hash identifier: OuiSoz74OGRgJiBoShoGAfl/wamUvwrfazeBnaRaH+c=
Subject key identifier: 01:AD:1E:7E:C2:01:49:9C:50:FF:84:FF:89:94:18:D3:73:ED:5C:58
Certificate issuer: /CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Certificate serial: 0194236A219D6FF82C3D4600F80C86921151
Authority key identifier: EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa
Signing time: Wed 01 Jan 2025 19:49:05 +0000
ROA not before: Wed 01 Jan 2025 19:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199946
IP address blocks: 185.37.196.0/24 maxlen: 24
185.37.197.0/24 maxlen: 24
185.37.198.0/24 maxlen: 24
185.37.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:21:9d:6f:f8:2c:3d:46:00:f8:0c:86:92:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2ecb0f292452a7be94e6960f7ce72016bd1805
Validity
Not Before: Jan 1 19:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01ad1e7ec201499c50ff84ff899418d373ed5c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:dd:f9:a7:e5:73:9d:1d:0f:b6:d2:b8:08:
25:23:ea:8a:61:7d:11:9b:3d:b2:08:0f:49:ba:41:
df:50:7d:28:aa:40:e6:f8:09:f6:c3:b8:06:11:ea:
4a:6b:60:a4:82:cf:90:70:78:ba:18:3d:a4:6c:f1:
bc:e3:0e:c7:5a:28:a3:0b:45:e8:58:1c:ca:b5:23:
43:0d:d2:18:af:2f:9d:c6:04:ac:d0:b7:81:94:bd:
26:fb:b1:7c:b8:ea:47:a8:98:3f:cd:1d:b1:05:6b:
c3:5d:f5:80:f2:46:39:14:31:21:36:0e:aa:20:7c:
1e:c3:64:12:7f:9b:27:dd:2c:11:56:6b:48:73:b7:
76:d7:75:d4:06:8b:58:b2:33:10:1a:a7:a6:53:87:
42:3e:8a:5d:32:f2:74:a4:6d:fe:85:5e:02:c5:89:
dc:d1:2b:37:48:7f:69:74:48:69:b6:dc:02:ba:c2:
a1:ec:0c:a8:1a:60:7e:48:f1:52:05:4c:c1:49:3e:
ed:c0:30:c4:ab:aa:6b:cc:73:94:21:29:36:b6:fc:
3e:d3:82:2e:21:07:74:c0:b3:30:5b:68:92:57:41:
53:bd:d5:2a:55:78:7e:fc:36:71:c1:f7:16:3b:2b:
60:cc:01:fc:1c:e7:e4:fb:5a:bf:35:41:62:c8:61:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AD:1E:7E:C2:01:49:9C:50:FF:84:FF:89:94:18:D3:73:ED:5C:58
X509v3 Authority Key Identifier:
keyid:EB:2E:CB:0F:29:24:52:A7:BE:94:E6:96:0F:7C:E7:20:16:BD:18:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6y7LDykkUqe-lOaWD3znIBa9GAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Aa0efsIBSZxQ_4T_iZQY03PtXFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/6y7LDykkUqe-lOaWD3znIBa9GAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
50:2e:68:96:79:ef:11:8b:33:64:4a:5b:01:e8:a8:15:b1:cc:
f9:9c:be:2c:3e:b7:55:43:7a:d2:cc:76:ed:0e:9a:d1:30:d6:
d2:a8:0d:8c:d6:ba:ff:7a:9b:76:a7:df:ff:61:c3:49:7e:1f:
d3:4f:be:04:35:93:2a:46:74:fe:2d:c8:c0:f3:ca:c0:79:c0:
18:0d:80:11:08:6f:98:1c:dd:3e:42:c8:b2:d9:16:ca:f1:b0:
0d:5b:ed:6e:fc:78:28:0a:88:12:69:a3:ee:83:82:db:aa:de:
ac:15:38:c4:61:0e:a1:83:27:2d:46:58:c1:61:9d:22:ca:40:
2d:86:61:2c:26:b9:d0:d8:2a:1b:c7:83:6a:be:20:df:ba:2b:
18:19:77:6a:ae:31:82:1c:f3:15:b4:85:7e:69:6d:56:f3:9f:
c3:39:da:25:1c:ef:66:0a:bf:0e:25:b7:57:2d:87:0c:98:3b:
86:3a:21:ac:a2:3b:77:5b:1c:f3:56:22:70:db:93:f6:a7:a2:
91:b2:36:88:f6:ba:22:67:38:ea:9d:e4:dc:15:0b:45:a9:d0:
66:6f:14:c2:49:51:88:81:67:75:20:5d:a6:78:24:e8:1d:82:
86:a7:9e:75:45:f2:b2:d1:8c:35:8a:22:6b:2d:4e:ef:75:09:
b9:5c:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:12 2025 by rpki-client