Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eCPiKGoZ-1c5jJusuO_RG5JLZvA.roa
File: eCPiKGoZ-1c5jJusuO_RG5JLZvA.roa (raw, json)
Hash identifier: lWCjs6sfu7+bJQuTV2AQy2cJa9GvbJ37cddie2VQ0aQ=
Subject key identifier: 78:23:E2:28:6A:19:FB:57:39:8C:9B:AC:B8:EF:D1:1B:92:4B:66:F0
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274847BCB4C4A7684BC541EB22186E2B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eCPiKGoZ-1c5jJusuO_RG5JLZvA.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204821
IP address blocks: 185.231.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:47:bc:b4:c4:a7:68:4b:c5:41:eb:22:18:6e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7823e2286a19fb57398c9bacb8efd11b924b66f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:71:e4:2e:4d:7a:fc:3f:c6:c2:f2:a7:f4:
d3:c3:dc:a2:ff:c7:45:35:7c:af:cc:81:c7:6a:1c:
28:4c:ed:72:84:3a:9f:01:ee:6b:9f:da:e1:7d:a4:
8b:d3:64:1d:cd:a3:7b:79:d1:da:b3:da:16:f5:68:
c3:ae:69:e8:c4:93:a4:4a:0d:fc:34:f6:e0:fc:c8:
71:51:d1:50:9a:e5:d0:25:f2:0a:fc:7f:37:b6:49:
2f:7c:04:bb:a4:fb:ac:7c:34:36:a4:54:b6:b3:34:
c3:a4:05:da:9f:68:1b:9f:09:e6:99:d3:ad:7d:7b:
ea:89:fa:56:2a:aa:c1:2e:c9:e2:b9:a1:63:72:37:
5d:53:15:8f:be:84:17:e0:3f:e6:86:11:e3:9c:69:
3b:bf:d3:77:31:7e:a0:54:0e:a6:ba:d2:61:22:6e:
49:ee:f2:1c:49:dc:d9:a0:a8:a2:00:89:31:c8:ca:
a4:b6:78:7a:de:ad:e1:2c:2d:51:0d:8c:e9:ab:a0:
f2:49:3f:04:9c:bc:8c:c2:11:82:a7:ad:e7:64:68:
1d:34:24:8d:3a:9a:18:98:ae:00:a4:60:32:f9:8c:
4b:95:30:35:b5:8f:f7:9a:4f:41:7f:ed:52:30:01:
c2:3c:ef:bc:44:dd:a6:ba:ba:75:2e:d4:03:09:91:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:E2:28:6A:19:FB:57:39:8C:9B:AC:B8:EF:D1:1B:92:4B:66:F0
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eCPiKGoZ-1c5jJusuO_RG5JLZvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:7d:20:4c:26:b9:86:b6:1b:cb:7c:0c:db:b8:19:cd:6e:4c:
73:d2:e1:04:40:94:28:b2:b3:b3:a0:1b:e8:2c:f0:82:61:b9:
b1:2e:4a:7d:e5:9a:4b:9c:b4:b9:5a:de:fe:9d:e4:9d:26:26:
60:72:fd:34:42:94:9f:32:c1:00:99:74:3d:ea:80:39:78:76:
42:25:59:cf:b5:16:1c:ac:6e:ca:a6:88:c8:f9:8f:2d:ef:07:
c9:b4:98:c4:ac:02:e4:b1:06:92:3a:5a:76:67:a4:25:0b:d5:
55:dc:22:c0:ea:3f:9e:ab:21:1d:96:9f:d3:25:ee:bc:45:20:
27:72:31:04:c0:83:2a:c1:e7:d8:2e:29:16:72:1d:ac:33:92:
66:04:0c:b4:b3:ec:bd:a7:6e:25:52:bd:9d:04:50:92:a6:25:
15:08:f8:17:07:20:4b:87:cf:0f:ef:e3:b2:c9:e9:d4:b9:9b:
b0:1c:13:ba:27:86:d5:d0:fd:7d:c4:d3:25:9c:fa:a6:75:87:
4c:27:cd:5b:68:dc:e8:29:76:2a:9b:2a:70:c4:d2:61:d1:67:
5a:a2:5a:84:e0:73:26:48:0f:ce:2a:71:f8:84:ab:1e:58:aa:
47:ad:e0:d6:e8:92:d0:d4:e7:2e:d5:4a:10:8b:22:67:48:3c:
32:30:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:19:52 2025 by rpki-client