Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa
File: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (raw, json)
Hash identifier: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=
Subject key identifier: 7B:7F:0A:83:C8:82:2A:A3:95:70:6C:7C:67:22:53:BB:52:2B:4F:07
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B5349851424374B8F7395B71A23FEC
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57269
IP address blocks: 86.127.224.0/19 maxlen: 24
188.26.192.0/19 maxlen: 19
188.26.192.0/21 maxlen: 24
188.26.200.0/21 maxlen: 24
188.26.208.0/21 maxlen: 24
188.26.216.0/21 maxlen: 24
188.26.218.0/24 maxlen: 24
194.55.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:34:98:51:42:43:74:b8:f7:39:5b:71:a2:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b7f0a83c8822aa395706c7c672253bb522b4f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ed:61:17:80:ce:0c:7d:1e:24:3d:36:fc:64:
a8:39:90:17:bb:53:f2:92:bd:cd:47:37:1a:64:aa:
cb:52:23:93:ab:4b:f1:e2:b2:14:ba:21:57:df:a9:
fa:00:38:04:80:42:6f:8c:23:e4:a6:bb:20:18:64:
86:5a:26:0e:ed:af:fd:5d:04:bc:12:fb:47:1c:1f:
20:74:31:9a:c3:18:11:ba:01:a1:ee:ee:f8:4f:c8:
07:0c:80:1b:18:f4:cf:9b:5b:96:9e:e2:d7:3a:60:
55:90:e9:f1:b0:29:24:74:2e:72:d2:e6:a1:35:92:
31:f0:e8:75:73:7d:0a:c7:4c:b5:df:3e:5a:bf:e8:
1d:1a:79:00:93:23:06:1c:03:bc:24:b8:05:c3:fe:
a0:9d:ad:eb:71:cc:bc:5b:e0:07:61:04:a3:b4:89:
c2:a2:7c:9b:53:5b:b2:f0:42:cc:a6:42:04:d8:fb:
89:65:bc:5d:6a:50:e0:b6:6d:a6:b4:54:c4:5b:e4:
0d:a4:0b:f8:c7:80:13:96:e9:9e:8a:7b:47:a0:88:
00:34:89:b5:bb:80:dd:ca:39:b6:c2:05:ba:26:ee:
4c:48:a4:cb:27:70:f0:e3:af:de:81:f5:e5:83:d2:
bd:fc:e6:22:5d:d4:37:a0:0f:11:51:02:74:3f:ff:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7F:0A:83:C8:82:2A:A3:95:70:6C:7C:67:22:53:BB:52:2B:4F:07
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.127.224.0/19
188.26.192.0/19
194.55.169.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d1:44:8d:78:49:13:f2:cb:c2:80:6b:c8:0b:30:78:0e:9d:
f5:79:8b:25:7f:08:76:1a:df:de:c7:f6:60:c8:ac:a8:69:b7:
0d:af:aa:f0:9a:80:ae:19:7d:97:1b:3e:59:7b:a6:ce:17:90:
a1:bb:0e:86:bc:3f:b2:dc:65:51:29:a7:d8:07:03:b6:0c:36:
dc:31:d5:8c:29:ff:45:bf:5f:d3:ce:1b:f5:23:2a:c6:27:7b:
6a:48:60:15:32:2d:4b:68:77:7b:c6:7e:3b:34:22:6a:90:f9:
6f:81:61:f5:78:a6:f6:f1:b2:f5:e8:e8:00:b9:bc:4d:23:00:
75:4b:2e:ad:d9:18:03:b8:7c:9d:ac:42:34:8d:82:91:71:75:
1a:a9:e6:8d:fb:3b:e9:8f:2b:9b:d3:0d:fe:e5:64:89:50:db:
42:07:e2:12:c5:7f:5c:8e:62:2b:9c:07:ef:db:9e:e9:b6:07:
75:e0:26:e3:c4:30:ec:e2:9d:e9:88:f1:0b:f7:9b:e0:d8:de:
8a:26:e2:b0:c9:d6:69:ed:2d:d0:3c:ee:62:f3:d0:0c:26:cd:
33:74:64:df:43:f1:97:41:1c:35:5f:b4:e4:8a:88:ed:c1:6d:
31:58:d2:53:85:41:1d:9a:bd:46:bb:38:43:c1:a5:6e:02:c3:
1f:bf:60:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:33 2025 by rpki-client