Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/e-AatlBOQgFaPRuxq1alciEetxE.roa
File: e-AatlBOQgFaPRuxq1alciEetxE.roa (raw, json)
Hash identifier: ULjMZc4AZCoPJqg5C6bBjQVruX7XYcA2xj/WmWQjGdU=
Subject key identifier: 7B:E0:1A:B6:50:4E:42:01:5A:3D:1B:B1:AB:56:A5:72:21:1E:B7:11
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 0194266C36B8EE171864E6B2841F030C6CF2
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/e-AatlBOQgFaPRuxq1alciEetxE.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 185.25.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:36:b8:ee:17:18:64:e6:b2:84:1f:03:0c:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be01ab6504e42015a3d1bb1ab56a572211eb711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:19:42:d0:3c:71:32:8b:27:fb:fa:b9:15:
58:17:4e:e5:1e:ee:f9:01:26:e7:52:d0:08:e8:3e:
95:ee:0c:16:2a:23:0c:83:36:84:1f:4c:70:28:a7:
da:14:c7:61:40:69:90:3b:c4:ff:ff:57:f4:1a:fb:
bb:9c:59:93:c6:1e:63:68:ff:db:29:88:e0:9e:3a:
88:ec:55:2d:b6:2e:d9:2e:02:ca:5a:66:54:53:58:
08:f4:8e:e5:83:8d:de:c4:b7:7c:f8:9d:21:6c:93:
75:2a:b5:e6:ae:66:ae:2a:a2:a8:fd:23:25:e9:e3:
0f:9b:d3:21:84:c5:72:ac:4d:dc:21:36:9d:18:2f:
9e:55:ea:46:a7:b2:24:59:a8:a3:83:35:77:8a:43:
cb:0b:75:89:cd:58:b1:f3:18:b7:27:62:f5:2d:62:
57:ce:dc:72:40:73:8b:c8:6c:f1:b4:7a:cf:b1:c3:
87:1e:22:8b:b8:4a:69:85:ca:13:9e:d4:63:03:d9:
ba:c1:a8:71:8a:46:79:8e:13:19:18:89:67:39:2b:
f2:c7:21:7e:bd:d6:0f:38:01:1d:52:2c:5d:8a:45:
e7:e8:73:b6:cd:c8:4b:65:31:33:37:af:ef:ae:0f:
5b:ea:a9:a1:27:7b:e9:fe:bb:bb:bd:5a:b6:ac:8d:
6a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:1A:B6:50:4E:42:01:5A:3D:1B:B1:AB:56:A5:72:21:1E:B7:11
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/e-AatlBOQgFaPRuxq1alciEetxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.114.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b3:cb:69:39:89:62:be:af:b3:79:5c:b8:2c:6e:94:b9:84:
a9:ae:17:47:04:d5:de:d0:3a:c0:19:cd:42:2d:a3:c2:4e:ca:
66:ce:a1:1c:92:98:54:f1:9f:ab:db:32:47:3d:92:25:da:cf:
f4:70:b3:5b:fd:df:44:42:69:74:a5:80:9a:da:90:04:f2:d7:
68:fb:82:1b:e7:a1:78:b5:a5:e2:4a:9b:94:d6:e6:52:81:0c:
ec:3a:0d:72:cd:22:15:aa:48:d4:78:d3:ae:56:80:4e:4e:41:
d6:c2:a7:68:84:af:10:40:08:23:a8:a9:26:10:33:11:7d:ca:
c4:8b:58:28:15:36:7a:cb:45:82:8e:74:2f:f8:fb:cd:04:f1:
cc:76:9c:9b:0e:1b:bf:58:1b:91:5c:e9:65:fb:a8:29:f8:e0:
06:3b:ca:0e:8d:97:d0:10:f8:48:ec:58:ca:1d:83:87:5f:7e:
c2:0d:7b:53:fd:75:78:ac:6c:d6:32:bd:45:07:2a:39:1f:78:
86:bc:85:43:0d:d0:be:df:d4:7b:10:ed:63:1a:a5:33:8d:18:
8f:bf:7c:0e:5b:c0:4b:93:43:a1:66:98:f6:1a:eb:87:91:a6:
2d:98:6e:28:b3:3e:07:16:39:c9:2e:88:95:73:d9:e0:70:77:
3f:06:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:51 2025 by rpki-client