Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2p0_kEcAb_1QfXoQChRmwjKPk8.roa
File: x2p0_kEcAb_1QfXoQChRmwjKPk8.roa (raw, json)
Hash identifier: 3vNpTazkOZyrEuNo4ZEB146g5i5xdxjdHR8X41sR0G4=
Subject key identifier: C7:6A:74:FE:41:1C:01:BF:F5:41:F5:E8:40:28:51:9B:08:CA:3E:4F
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01942746384F8FFFA548253AB058B3C536A3
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2p0_kEcAb_1QfXoQChRmwjKPk8.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 185.244.29.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:38:4f:8f:ff:a5:48:25:3a:b0:58:b3:c5:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c76a74fe411c01bff541f5e84028519b08ca3e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:26:58:0b:75:bb:71:5f:f8:b0:58:44:5c:
7d:54:5b:6c:d0:27:b0:dc:22:0f:1c:19:eb:eb:9f:
42:f1:f8:74:62:5c:79:af:cb:dd:2e:9c:88:37:b0:
97:ae:bc:ef:de:b4:25:ef:28:6f:8b:bc:ad:85:01:
43:b3:c8:2f:e8:b4:54:9e:24:ab:a9:70:a9:7c:74:
ad:39:2a:79:35:af:30:90:58:b7:65:b5:72:8b:ce:
e4:6d:39:4b:b4:4b:90:fb:80:1d:b5:c7:bc:52:34:
13:c5:3f:c7:99:a8:45:09:fd:35:6e:25:d4:8c:3d:
fe:c3:87:14:5f:40:2c:f9:0f:08:f2:b0:0c:68:5d:
67:42:30:b9:65:09:f4:78:57:5b:8f:98:df:a1:34:
54:a0:df:25:3d:d9:7c:27:29:9d:73:04:a9:55:6e:
4b:34:50:58:73:f8:13:82:9c:32:29:bc:5b:c4:12:
a6:6b:2a:86:b2:8a:55:a3:78:4e:8b:cf:d3:75:68:
d8:bc:16:14:4d:89:3a:a4:a6:1b:5d:60:77:91:b0:
b5:30:81:6d:04:32:12:19:6f:d4:d4:60:c5:4e:6f:
2e:91:8f:8e:96:01:b4:94:4e:53:eb:dd:ab:d2:25:
21:37:78:b3:4e:2c:75:77:29:23:a2:d9:b0:75:1c:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6A:74:FE:41:1C:01:BF:F5:41:F5:E8:40:28:51:9B:08:CA:3E:4F
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/x2p0_kEcAb_1QfXoQChRmwjKPk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.29.0/24
185.244.31.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1a:91:39:f4:44:64:a5:98:54:91:56:d3:8e:02:2b:e2:83:
44:63:d2:0a:4e:cb:2e:f5:2b:af:57:34:fe:7a:da:9d:6f:c6:
af:6b:4b:fd:98:1f:13:23:c1:e6:8e:56:9c:54:da:f4:b6:f6:
95:e0:4b:9e:c8:76:f7:03:8f:b5:76:c3:e5:cf:9f:75:c2:22:
02:e8:95:c9:32:bb:53:59:4b:03:2e:50:8a:4a:26:ab:45:0d:
a2:a1:9f:9d:38:5e:0d:b1:1f:bb:54:4f:97:dc:53:97:76:29:
38:79:1f:ae:a0:b9:9c:04:e4:d0:6d:f6:1c:14:18:20:d5:e9:
30:fc:5e:8b:79:4f:5b:1e:46:82:53:98:f1:cf:14:8d:ae:cb:
29:11:d5:d2:d6:ca:7c:f2:39:0c:63:95:e2:9e:13:57:d2:ce:
90:5c:fe:b9:9b:3e:b7:cc:e6:c7:9f:2c:9b:de:b3:83:f8:37:
de:0f:48:36:c8:60:c8:e8:bf:c5:df:0c:c7:f6:c2:4d:1b:ea:
88:8d:c1:6a:60:66:cf:e2:44:a4:1b:9c:eb:43:19:19:9d:b3:
e6:46:e2:f3:ec:96:f8:0e:c6:8d:f1:6b:1d:3b:0e:be:a8:f7:
40:3e:30:a8:3d:14:f8:d0:bf:cf:c9:d6:af:66:4d:71:f8:6c:
de:54:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:56:25 2025 by rpki-client