Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa
File: 0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa (raw, json)
Hash identifier: kji0fDrg1UCCF1e89e3x4DtqXEf9lBqkRhHoCvYmuiw=
Subject key identifier: D1:E8:C8:6E:0B:F9:C0:F6:30:C3:F0:03:9D:9F:18:FE:10:2D:F9:18
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01947305C968EBDFCFF647C2700DAD4D2331
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa
Signing time: Fri 17 Jan 2025 06:49:06 +0000
ROA not before: Fri 17 Jan 2025 06:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 185.243.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:05:c9:68:eb:df:cf:f6:47:c2:70:0d:ad:4d:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 17 06:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e8c86e0bf9c0f630c3f0039d9f18fe102df918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:6a:3d:8a:91:cc:6e:64:1e:f7:04:b3:67:
68:e2:40:9a:a8:95:c3:6f:d2:a4:ee:87:16:2e:0b:
cb:ac:38:64:3e:5b:78:74:d0:7c:db:b5:6b:a6:cb:
69:17:79:14:b0:fb:8f:39:bb:01:e9:a8:c3:49:43:
83:93:4c:c5:53:a3:49:fd:d0:d4:45:31:79:d1:31:
a8:96:8c:3c:7f:c7:84:40:04:d0:19:77:50:2f:20:
81:fa:a0:81:af:5a:ef:f9:0f:b4:7f:ee:44:d1:1f:
ef:b4:ef:88:eb:1d:00:50:8b:1d:20:52:4b:a2:b1:
6b:91:90:b8:96:f0:9d:9b:d9:3c:70:44:dc:3c:e0:
13:a2:c3:56:24:d2:d6:d1:30:36:5e:82:a7:7b:0f:
2c:d3:0c:db:3e:fe:4a:8f:a9:16:f7:87:26:8f:d9:
7d:88:36:6c:a1:83:5f:3a:a8:8c:df:3b:23:4e:82:
91:09:88:7e:74:8c:4c:b6:ca:13:02:bb:18:73:82:
4c:54:f9:b9:8d:fa:9a:b4:cb:4f:b5:8e:22:10:b3:
e9:82:4d:b5:44:29:75:56:a1:47:8b:c0:57:16:02:
42:8e:1b:6b:86:26:96:df:16:bd:dd:42:c3:cc:11:
bd:f7:00:aa:bd:1d:be:6e:3e:21:be:1a:df:01:e1:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E8:C8:6E:0B:F9:C0:F6:30:C3:F0:03:9D:9F:18:FE:10:2D:F9:18
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0ejIbgv5wPYww_ADnZ8Y_hAt-Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.4.0/24
Signature Algorithm: sha256WithRSAEncryption
25:98:a8:41:05:73:dc:99:48:bd:8f:2e:13:7b:d1:c1:c6:eb:
cc:d2:cb:af:ff:ca:97:10:b6:c0:a8:7a:96:18:bb:2e:3d:37:
1e:e3:49:da:73:7e:c4:e8:7b:b4:58:c5:16:8c:b5:25:ad:64:
9d:14:24:7d:c2:6b:f9:65:82:48:6b:d6:0c:14:68:01:95:21:
6c:a6:c6:5d:26:db:fe:40:37:50:42:81:ac:97:bf:94:03:b5:
81:d4:59:54:64:e5:83:0e:92:80:a5:ca:7d:2f:32:ef:7a:2c:
4e:34:8e:b1:2c:d8:31:ff:5b:3d:dd:cc:63:56:1f:68:0b:63:
50:94:eb:06:5f:5a:91:33:81:3d:4d:64:8e:60:11:e8:b7:7d:
6d:4e:d0:66:4a:fd:47:1c:87:9a:22:88:88:2e:c0:5a:b8:8b:
51:70:cc:6f:8a:1f:a0:cc:8b:95:1b:9e:fe:e2:be:71:94:06:
3b:fe:20:c0:2a:89:87:18:8f:0d:b2:81:ff:b5:e7:54:d6:07:
2e:f4:02:66:dd:ad:76:6a:ed:ad:ba:73:54:d2:79:c3:84:b3:
46:3a:b5:f5:98:e8:3a:94:10:63:67:a8:e3:28:72:ce:6d:9d:
74:98:28:53:9c:bf:88:79:45:99:cb:0f:26:cc:06:04:87:67:
50:b0:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:36 2025 by rpki-client