Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/EoaADIl_LSn4PTQDKd1ZzjG0AGg.roa
File: EoaADIl_LSn4PTQDKd1ZzjG0AGg.roa (raw, json)
Hash identifier: QhWdZKgKEBiDDlAwI8AUTWfu/eEM4dQdoqBKjsEhccU=
Subject key identifier: 12:86:80:0C:89:7F:2D:29:F8:3D:34:03:29:DD:59:CE:31:B4:00:68
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DA795E83900E1CA9261905BBF2BDF
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/EoaADIl_LSn4PTQDKd1ZzjG0AGg.roa
Signing time: Wed 01 Jan 2025 15:48:16 +0000
ROA not before: Wed 01 Jan 2025 15:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197633
IP address blocks: 31.44.192.0/24 maxlen: 24
31.44.193.0/24 maxlen: 24
31.44.202.0/23 maxlen: 23
31.44.204.0/23 maxlen: 23
37.122.229.0/24 maxlen: 24
37.123.0.0/20 maxlen: 20
185.5.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:a7:95:e8:39:00:e1:ca:92:61:90:5b:bf:2b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1286800c897f2d29f83d340329dd59ce31b40068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:1c:ca:17:5d:60:11:b5:e8:23:d6:a6:c4:
c1:60:31:8d:b2:97:94:a7:b9:5d:77:c0:7f:63:c8:
89:a4:cb:eb:87:8e:25:bf:14:ef:7e:db:0b:50:0a:
5f:44:fc:b0:a1:dd:9d:df:41:01:ad:98:6e:35:52:
4d:96:a3:cd:c7:89:95:73:a6:62:36:10:c7:a1:7c:
71:d5:e1:3f:8c:e9:89:97:9f:86:66:07:7a:74:e7:
cc:64:a3:f9:e9:7d:9a:3c:af:88:86:b1:a3:d8:64:
c6:10:06:c7:a3:1c:23:00:0e:f3:40:3e:26:ac:79:
0b:d3:2d:5b:ef:92:ad:2f:e7:a9:cf:c9:4d:dc:c5:
74:34:f4:2a:b6:25:0f:c8:92:ab:5e:6c:79:21:76:
da:64:6e:36:86:d9:dd:84:08:1c:b0:c1:4d:3e:f4:
32:11:d2:76:fe:03:5c:8c:80:d9:f3:2b:cd:17:ae:
f3:f5:07:b6:1c:b4:42:8d:23:49:c1:e9:73:9a:92:
d6:8f:48:8c:24:3f:10:d1:59:17:7d:2a:5f:c6:ab:
e5:0d:75:dd:d4:9f:e3:7d:24:1d:11:ce:e1:02:e9:
f3:61:14:ec:bf:3d:dd:2a:ff:84:5d:e7:b2:5e:29:
bc:f5:e3:7b:d5:fb:b5:7e:e0:9e:58:c6:70:c7:8c:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:80:0C:89:7F:2D:29:F8:3D:34:03:29:DD:59:CE:31:B4:00:68
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/EoaADIl_LSn4PTQDKd1ZzjG0AGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.192.0/23
31.44.202.0-31.44.205.255
37.122.229.0/24
37.123.0.0/20
185.5.176.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f5:f2:4e:78:fb:26:39:87:ab:25:0e:ab:c4:e7:67:e4:74:
2d:16:d1:07:b8:fb:8d:80:67:cb:5a:10:dd:1e:d3:83:66:e1:
9e:63:8e:79:80:b9:27:67:21:23:e2:d7:4a:76:b0:5d:9e:2e:
2f:f3:ba:36:67:37:f5:ac:d6:76:bf:d8:9b:97:79:4f:c8:4b:
a4:bb:3d:60:74:c5:6a:fc:91:bd:b7:e6:d6:56:49:55:91:e1:
f1:3a:7f:0e:4a:83:a0:b6:c9:94:8b:8f:65:a7:c5:2c:9d:36:
21:57:eb:91:08:29:7e:5d:6d:8c:06:ea:d8:09:f7:0b:ef:91:
e0:33:14:f3:f1:d4:40:e1:67:3b:da:ff:d3:07:33:2b:18:38:
66:af:a0:8d:05:aa:6c:36:d4:96:f4:32:ff:ee:20:19:3a:44:
86:78:e3:f2:eb:ef:01:76:39:a8:4a:ce:53:45:d9:f1:67:23:
b3:37:e6:37:2f:e9:01:c4:c1:f9:69:d5:fb:ba:81:c4:1a:fd:
31:3b:c0:0d:8f:b4:66:88:cd:40:b7:35:ab:fa:ff:57:9d:da:
6c:92:db:10:42:87:d8:37:6b:c4:c0:07:84:c9:f8:c7:c6:84:
c0:a8:76:1d:7d:95:8e:6d:58:f7:5b:aa:a0:71:21:1a:d1:cb:
1c:37:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:42:04 2025 by rpki-client