Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dphn8KkfqQ_E0i0wbfvsn29v2i4.roa
File: dphn8KkfqQ_E0i0wbfvsn29v2i4.roa (raw, json)
Hash identifier: d9kHtIcONnEhA3YB4AvuCGeSaYhRyvspkvUGCFJjnc0=
Subject key identifier: 76:98:67:F0:A9:1F:A9:0F:C4:D2:2D:30:6D:FB:EC:9F:6F:6F:DA:2E
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BB1659A012621D5FAF44B339DE117
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dphn8KkfqQ_E0i0wbfvsn29v2i4.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398779
IP address blocks: 31.40.193.0/24 maxlen: 24
45.141.13.0/24 maxlen: 24
83.136.48.0/24 maxlen: 24
93.177.111.0/24 maxlen: 24
185.240.86.0/24 maxlen: 24
194.62.164.0/24 maxlen: 24
194.62.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b1:65:9a:01:26:21:d5:fa:f4:4b:33:9d:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769867f0a91fa90fc4d22d306dfbec9f6f6fda2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:ec:55:8b:8d:8f:b4:8b:cc:34:00:0a:5a:
3e:a6:60:de:4a:cb:a4:c2:d4:91:b9:e7:db:71:9b:
28:f8:ce:b8:53:29:36:7e:0e:09:9f:90:29:24:6e:
f2:08:94:dc:db:7c:ba:2f:fe:40:a9:12:74:e5:a9:
55:7b:94:b0:d1:03:f8:09:aa:d8:d5:e7:0e:d6:28:
1a:f3:6b:0d:95:43:d3:1c:fa:a3:f5:5c:fd:7c:a9:
58:ce:52:39:0b:d4:48:37:64:ca:b2:61:98:6f:50:
15:ea:d3:b2:a7:c9:fe:40:ee:f6:24:56:0b:24:2d:
5d:14:d6:7b:ce:e2:13:82:8c:65:22:59:69:31:82:
df:34:be:2c:05:e7:55:26:18:66:dc:60:f0:88:e4:
32:e5:f8:23:6e:0a:49:7b:b2:8f:11:06:89:bb:89:
ed:25:64:29:72:bf:97:26:dc:ee:64:53:39:49:a7:
1b:64:46:a2:8a:ba:17:76:8b:9e:92:e4:56:7c:0e:
3b:58:c3:91:50:7b:95:2d:34:0a:22:e3:65:db:db:
ac:1c:87:11:e8:9f:ba:8b:10:12:d5:ff:93:73:87:
ee:72:68:a5:b0:3b:fd:15:10:2e:3e:55:c1:0c:35:
51:e0:cb:77:6b:91:2b:e9:f5:ae:28:c3:34:e1:43:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:67:F0:A9:1F:A9:0F:C4:D2:2D:30:6D:FB:EC:9F:6F:6F:DA:2E
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/dphn8KkfqQ_E0i0wbfvsn29v2i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.193.0/24
45.141.13.0/24
83.136.48.0/24
93.177.111.0/24
185.240.86.0/24
194.62.164.0/24
194.62.167.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6a:08:53:e0:94:62:c3:9c:93:76:e2:47:a7:2d:1a:64:f0:
cf:ac:3a:7d:da:d3:ed:7d:80:9f:7d:9e:11:f6:08:5c:b5:8d:
3c:69:f9:71:55:4a:45:d5:80:de:f9:19:dd:e0:4f:0d:21:08:
2f:d7:8b:45:80:89:0d:1d:4e:70:89:3d:5d:89:75:50:95:68:
6b:77:03:d4:b7:68:fb:46:31:48:65:53:9a:a3:68:71:f5:f0:
d8:4f:41:b1:42:05:e8:26:52:e6:0d:4a:5d:5a:71:ff:cc:7f:
cd:c9:95:1c:cc:73:72:9d:a4:6d:0b:4a:4b:10:5e:84:5e:e6:
f7:e0:bd:37:1f:ce:fb:c9:04:2c:86:13:23:7b:bb:87:38:78:
20:b5:2b:c2:89:1e:16:cd:fb:87:68:e4:a1:66:ea:1f:15:c3:
5a:01:65:da:ca:c7:ed:ae:f1:e5:eb:bc:42:b9:5a:d5:ea:63:
46:0f:d1:02:57:b6:d5:54:bd:11:34:ac:47:45:b1:d8:c9:03:
32:67:b3:d1:42:a1:f9:bf:7b:31:0e:8e:4e:66:68:f3:f2:e0:
16:34:90:57:01:52:1f:44:57:75:3c:33:22:c7:cb:df:b5:60:
36:18:9b:b4:59:ad:5e:25:54:dc:05:b5:d0:67:75:d1:58:cb:
d5:9c:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:54:59 2025 by rpki-client