Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8WcEwUSj2wOJng1zUkfEtZuaJZw.roa
File: 8WcEwUSj2wOJng1zUkfEtZuaJZw.roa (raw, json)
Hash identifier: 2Hp2+onCzllg33moHxvy6+TiMwQM4+V4QjOVaEEgzAg=
Subject key identifier: F1:67:04:C1:44:A3:DB:03:89:9E:0D:73:52:47:C4:B5:9B:9A:25:9C
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 01941FFA14993960B429D6B87289B05D45EF
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8WcEwUSj2wOJng1zUkfEtZuaJZw.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25437
IP address blocks: 31.40.158.0/24 maxlen: 24
195.20.118.0/24 maxlen: 24
195.20.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:99:39:60:b4:29:d6:b8:72:89:b0:5d:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f16704c144a3db03899e0d735247c4b59b9a259c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:3f:5e:ae:bc:c2:43:d9:04:f6:73:1e:1b:
a6:36:33:e8:a5:b7:a9:02:b3:90:8b:43:b3:3f:39:
a4:33:4a:de:06:23:8e:8d:71:12:2c:77:65:83:1c:
74:e8:03:08:9d:ff:71:b0:77:97:05:43:f3:34:0d:
49:48:40:57:57:15:de:f1:a3:9b:ed:5b:47:09:cb:
65:57:c7:29:fb:52:e3:bf:45:28:bb:68:f9:e5:29:
7a:66:98:a4:0d:98:63:01:c7:51:4e:9c:ce:a3:7a:
2a:3c:dc:78:ea:2b:5e:17:4d:db:18:45:01:e4:82:
7d:89:6d:f3:9b:a9:2d:73:04:a5:b2:2a:4f:d1:a3:
b7:f4:ec:62:07:2c:7f:7b:3b:96:a8:80:3b:de:61:
77:db:75:3d:cf:62:44:24:e6:f1:68:60:6a:d2:06:
f3:2f:ce:6d:e6:38:79:cc:4d:ac:c0:69:61:e4:a4:
d5:71:db:5d:d1:16:1b:46:a2:cd:c6:46:c4:28:ff:
45:f5:6d:61:b2:64:b7:32:3b:5c:a2:97:d4:98:d1:
81:5a:0f:d0:19:d9:16:32:63:ae:82:34:a1:46:77:
f0:0f:7b:4c:d7:b4:19:15:74:c9:6f:d9:0b:39:7b:
8c:6d:eb:fd:3c:92:90:2a:d7:9b:e5:d1:ae:11:12:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:04:C1:44:A3:DB:03:89:9E:0D:73:52:47:C4:B5:9B:9A:25:9C
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/8WcEwUSj2wOJng1zUkfEtZuaJZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.158.0/24
195.20.118.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:5d:2a:64:08:35:96:4e:17:06:cb:04:67:33:26:39:bf:a7:
65:11:5e:c5:df:76:bd:8e:10:14:55:51:41:4b:ec:47:4f:58:
20:41:f0:c9:c0:28:5b:17:7b:e6:dc:ad:55:07:3f:53:99:6c:
ab:4a:7d:d1:bd:ca:7b:ad:b8:a2:57:85:c3:b2:b0:5d:cb:c1:
9c:a9:1e:58:30:45:d7:47:2b:46:fa:b0:85:6f:e4:b8:22:a1:
e5:d7:c9:af:bc:7d:de:29:aa:52:74:ca:43:21:0e:3a:8a:e0:
3f:0e:26:d7:ea:e7:3e:19:da:67:b1:bd:b2:6b:4e:a7:71:c2:
58:1a:42:5c:35:45:03:dd:a7:44:94:0e:35:16:bf:1d:02:30:
9f:43:cf:69:91:cb:4d:04:11:ec:bd:22:f2:9b:bf:e5:a0:e6:
23:39:68:24:36:70:97:d0:05:c8:7c:16:1d:33:e5:c0:35:80:
3b:70:de:9e:92:b5:56:4e:e4:92:29:e4:75:f7:84:b9:79:d1:
c7:98:2f:64:1e:b2:16:12:f0:04:81:41:11:0f:ee:3c:00:d1:
68:ef:0e:29:36:90:72:1e:ea:05:ee:88:3a:98:0e:fc:3c:f1:
7c:60:bb:ff:27:21:b7:ce:2e:29:d4:8b:13:c3:d7:1c:ae:ee:
f8:10:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:32:29 2025 by rpki-client