Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/xAERLAW9yeSp7-IVDIC_ELETFQs.roa
File: xAERLAW9yeSp7-IVDIC_ELETFQs.roa (raw, json)
Hash identifier: 8vMoTFjOsjQqMO21PnDb5Vdq3wS8nDT+pMvDuXAJq8o=
Subject key identifier: C4:01:11:2C:05:BD:C9:E4:A9:EF:E2:15:0C:80:BF:10:B1:13:15:0B
Certificate issuer: /CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Certificate serial: 0194258EBC2DF5D8B1C2BF70D47C7528B638
Authority key identifier: EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/xAERLAW9yeSp7-IVDIC_ELETFQs.roa
Signing time: Thu 02 Jan 2025 05:48:18 +0000
ROA not before: Thu 02 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35362
IP address blocks: 176.113.160.0/22 maxlen: 22
176.113.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:bc:2d:f5:d8:b1:c2:bf:70:d4:7c:75:28:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9887ba5f457d797afdac2c5551defb453d88f3
Validity
Not Before: Jan 2 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c401112c05bdc9e4a9efe2150c80bf10b113150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:26:a6:af:62:09:9b:03:12:b7:df:ec:28:
30:92:b3:f8:25:98:44:98:bd:4f:cb:50:75:37:88:
00:3e:de:0d:ec:3f:a7:f2:9c:e2:03:00:96:1e:b1:
10:84:19:01:dd:b9:b7:66:47:87:73:30:1b:47:0d:
81:44:5c:12:3e:a6:a7:b0:40:27:a6:e8:fa:8f:96:
ef:06:67:e2:47:9b:f6:f3:bb:d4:52:84:cd:f0:79:
06:37:63:d8:2e:70:24:ba:11:e9:ee:b8:13:9f:66:
7a:2d:9f:92:3b:1a:7a:d8:5f:30:d8:df:85:c3:cd:
c9:28:d2:fd:18:6d:3f:aa:4f:44:22:57:c0:46:65:
2a:01:11:4e:e8:6d:05:83:9e:cd:56:e4:50:08:54:
58:fd:e7:81:88:47:61:02:da:e7:67:87:a7:ab:e4:
e1:06:e5:65:d3:30:d2:ac:36:b9:12:ee:b0:88:51:
3c:6e:0f:b5:fa:fa:f7:15:1b:9a:1a:fe:f3:12:cf:
b8:5c:7f:e1:f9:ad:0b:c1:30:cd:78:6d:12:23:86:
ba:d9:cf:94:22:87:5e:66:bc:8c:93:dc:67:ae:74:
af:14:fb:c0:6c:26:84:46:e5:55:bb:14:46:8e:44:
5d:74:bd:5f:76:61:23:0e:6f:1b:ee:8c:7e:03:2e:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:11:2C:05:BD:C9:E4:A9:EF:E2:15:0C:80:BF:10:B1:13:15:0B
X509v3 Authority Key Identifier:
keyid:EE:98:87:BA:5F:45:7D:79:7A:FD:AC:2C:55:51:DE:FB:45:3D:88:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7piHul9FfXl6_awsVVHe-0U9iPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/xAERLAW9yeSp7-IVDIC_ELETFQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b8a454-a699-4269-b676-63ae2eace298/1/7piHul9FfXl6_awsVVHe-0U9iPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.160.0/22
176.113.168.0/21
Signature Algorithm: sha256WithRSAEncryption
56:cc:09:87:28:6f:f6:3c:c5:49:57:84:70:fe:aa:4c:0f:d5:
27:f4:bd:e8:b4:b7:35:12:dc:c0:2f:95:c8:97:13:97:5a:ce:
46:fe:40:df:02:26:72:7d:01:e5:12:93:ab:5f:34:28:5f:46:
78:f5:89:c9:fe:e9:c6:0e:c1:26:52:55:f0:fc:72:0c:ca:ec:
9b:27:a5:6f:67:54:6f:e9:0e:02:24:87:9d:9f:7e:cf:0a:58:
4f:a5:af:ba:d9:33:fd:31:b7:af:08:b2:e9:b8:23:2e:47:e9:
dd:1b:d6:80:c0:ff:89:7f:e7:02:d2:1f:4d:c4:06:ef:0f:52:
89:65:62:4d:d9:18:8d:47:2e:84:25:6b:3a:95:29:48:33:b8:
89:b5:7b:4e:c9:ad:8e:11:ad:f0:d6:fc:0a:0c:bb:1b:ea:e8:
cd:93:c2:6d:f7:78:3e:65:be:25:4d:71:a0:2a:a1:8e:58:2b:
dc:d1:a0:a3:0b:ae:ce:33:66:84:50:2e:94:3c:e6:10:f2:cd:
14:5c:df:57:f6:a8:23:36:bd:2b:15:68:42:99:f8:ff:30:33:
ad:33:1c:35:40:f4:44:7d:13:a3:29:7f:72:82:b4:d6:a0:f9:
99:20:4f:54:1a:ec:60:12:5c:57:ab:3a:ee:f5:da:f0:6b:b6:
c0:80:b2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:34:15 2025 by rpki-client