Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa
File: E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa (raw, json)
Hash identifier: WPWFC02WG9+/fnlvASK2CjILK+QtibLHbpj7hF8B1Rs=
Subject key identifier: 13:A3:E2:5A:1E:47:F8:3D:0A:1A:6B:93:42:44:94:7E:C9:8F:16:EA
Certificate issuer: /CN=3158a934189cf05891f8c4e599d0b98957e99729
Certificate serial: 019425214D7AA397C5ED55A22596ADA804B2
Authority key identifier: 31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 37.18.192.0/19 maxlen: 24
185.140.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4d:7a:a3:97:c5:ed:55:a2:25:96:ad:a8:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3158a934189cf05891f8c4e599d0b98957e99729
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13a3e25a1e47f83d0a1a6b934244947ec98f16ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:02:f4:0e:50:f4:49:af:12:8a:76:61:db:
2e:f9:0b:44:5f:51:89:b4:e1:77:8f:e4:e4:fa:7f:
8c:fb:12:09:97:cf:e8:d7:52:fd:25:e3:7b:06:43:
60:a9:6d:c8:fa:4c:a5:6c:24:56:c6:80:d6:59:84:
1f:6b:2e:10:33:b1:c2:20:15:e2:94:cc:cb:5e:38:
0a:f9:73:9c:a2:9c:f4:db:0c:ea:6c:c4:38:78:f6:
87:b6:54:12:91:9e:af:75:12:57:46:38:c8:4c:01:
69:a2:37:b4:7a:6a:d6:a0:cb:81:07:46:cc:29:42:
b8:23:91:99:47:da:72:6a:ec:b9:ce:96:8f:fe:0c:
0a:c0:66:2b:14:e8:1e:a1:08:ce:bf:ef:9c:8e:d7:
7b:d4:d0:57:e3:50:ff:a8:39:cf:bb:79:f8:df:cc:
59:d5:03:51:83:92:7f:7e:19:7f:cc:d6:d7:50:71:
a1:47:a1:dd:ad:64:2d:39:79:63:06:0f:cb:f8:d4:
61:4f:2f:d2:01:cc:9c:98:5b:b0:d5:f0:3c:f2:ba:
ee:58:fa:a2:3f:0c:13:bd:de:17:43:ce:30:d0:f5:
51:f6:01:9b:c5:06:14:81:15:71:cf:76:39:bc:20:
84:7d:52:2c:bd:95:92:0b:0d:5f:72:1d:ab:28:dc:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:E2:5A:1E:47:F8:3D:0A:1A:6B:93:42:44:94:7E:C9:8F:16:EA
X509v3 Authority Key Identifier:
keyid:31:58:A9:34:18:9C:F0:58:91:F8:C4:E5:99:D0:B9:89:57:E9:97:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVipNBic8FiR-MTlmdC5iVfplyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/E6PiWh5H-D0KGmuTQkSUfsmPFuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cccf8b-0274-4bb2-8dbb-d386d2049042/1/MVipNBic8FiR-MTlmdC5iVfplyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.192.0/19
185.140.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a7:0e:aa:61:a8:27:83:3a:56:7a:d5:4a:23:1d:05:6b:8d:
f1:39:34:99:d4:1d:ee:60:ce:68:5f:de:67:8b:0c:d6:51:24:
e8:af:31:70:1d:b5:e8:9a:da:f1:db:97:14:72:47:b7:60:65:
bf:e3:b9:c8:84:68:f6:8a:b6:f1:9c:b3:87:bf:38:90:99:16:
89:64:e4:74:99:73:97:d9:67:09:33:01:08:d0:01:3f:c5:6b:
6b:ce:4f:63:07:93:ca:49:87:9c:38:78:28:e4:6d:51:8c:95:
ac:0a:90:70:bd:30:5d:fa:c1:6f:ad:9e:65:82:1d:8d:fe:f4:
a3:fd:4f:cf:51:b7:7c:9a:6b:2c:c7:e7:34:fb:48:f6:57:a8:
f4:6e:cc:42:f4:f2:45:9d:78:74:b5:9a:e9:f6:4c:b2:55:2d:
f8:01:71:df:83:67:e2:49:29:cb:a1:9f:b2:4d:5d:43:5a:4d:
00:91:29:57:cb:b1:e6:ff:86:e6:00:19:8f:70:a4:1f:e0:ce:
a9:6e:67:f8:4e:d9:eb:ef:a4:df:87:d9:33:2e:27:a7:4f:0c:
7d:eb:cf:bf:a9:9d:bf:d3:67:5e:2c:65:be:fc:1d:c6:12:fc:
23:55:8c:06:00:ff:75:fa:d6:69:23:02:00:e0:29:07:e7:33:
cf:1a:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:28 2025 by rpki-client