Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa
File: EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa (raw, json)
Hash identifier: fngf8eQs7Bwu0pM4j6i0WPj4gj/7hDrn6NltGJxnSqw=
Subject key identifier: 11:8F:41:EF:11:CC:97:E4:E4:BB:51:1A:3E:21:D3:31:22:5D:E1:46
Certificate issuer: /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial: 0194274879709DA54E8E5E29A6A0EFDD4FC3
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211669
IP address blocks: 185.251.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:79:70:9d:a5:4e:8e:5e:29:a6:a0:ef:dd:4f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=118f41ef11cc97e4e4bb511a3e21d331225de146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:f4:fa:06:da:57:39:2d:c7:6e:06:31:f2:
3f:aa:81:35:c2:59:29:c1:78:89:35:98:d5:3c:4f:
e9:82:a9:b7:35:ab:5f:4c:b3:53:46:c1:b8:ac:23:
9d:07:9c:5d:12:76:d2:f3:44:cd:25:86:18:8f:71:
46:78:1a:9b:1a:a8:50:2b:e0:5e:26:0a:0e:e2:11:
ee:3c:bc:5d:f3:a3:d1:88:a2:0a:6e:68:34:59:e3:
05:d1:35:29:9f:59:c9:34:85:66:17:00:77:af:3d:
be:67:4a:61:ce:c3:08:40:5a:c4:5a:79:71:49:a3:
3d:1e:be:b6:3a:f8:c4:cc:78:9b:30:80:12:bc:7d:
b3:74:8a:d2:2f:21:c1:a1:06:10:a2:25:66:29:3d:
c8:ab:b3:a8:59:4a:6e:fa:84:f6:f4:0f:12:c7:06:
7b:64:c0:ad:c2:d2:ca:07:de:2b:ed:f6:13:d9:84:
c1:b9:94:8f:2d:8b:eb:fc:12:18:b9:9c:f1:f8:88:
87:12:74:9e:3b:44:10:e6:db:e7:31:08:00:64:ea:
c2:a0:c6:d6:01:87:0e:18:2e:09:1b:62:22:f0:ba:
4e:8d:c1:b5:5a:8b:01:89:e9:91:dd:fd:b6:60:f3:
4b:6b:de:a5:b2:a5:88:2e:d8:e7:e0:79:f7:29:42:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:41:EF:11:CC:97:E4:E4:BB:51:1A:3E:21:D3:31:22:5D:E1:46
X509v3 Authority Key Identifier:
keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/EY9B7xHMl-Tku1EaPiHTMSJd4UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2d:e3:37:83:04:f9:f6:b0:93:9f:f5:b1:1a:d1:5d:bc:b8:
25:11:62:69:54:87:b5:a9:44:ce:a4:3b:13:ef:37:24:a8:c7:
2a:fb:80:7a:f4:03:ef:39:81:69:80:68:0f:94:12:86:ef:72:
df:00:0e:90:5a:01:e7:7a:f7:34:f3:0d:53:02:78:95:b5:da:
97:c3:36:1a:59:c5:4a:a3:80:56:56:cb:ca:89:d1:96:41:e7:
eb:0b:cf:78:55:b3:a9:dc:2b:0e:ba:9a:ce:b5:a0:f0:2f:7a:
b9:7c:b0:18:54:53:ed:e2:f5:41:a1:d6:84:4e:45:c6:f0:14:
1f:7c:73:ac:39:d0:bd:2f:69:7d:25:ad:b9:12:37:27:28:9f:
51:0b:a3:b6:20:27:3e:d0:6b:63:1e:13:6f:1e:5b:2f:92:3d:
00:2e:8a:5a:0a:b4:b6:b4:00:92:d2:3f:06:5a:00:b6:47:7a:
29:13:91:fd:4f:eb:2f:cd:19:4c:61:f1:d0:58:7c:3b:5a:02:
98:23:6a:00:63:e1:45:ff:77:64:d8:7b:86:62:54:39:2e:8e:
36:93:75:9d:f6:b8:5c:4d:db:c7:45:24:80:c5:89:b7:0a:73:
31:ea:b6:c6:e3:b2:ed:db:55:58:2e:df:98:93:ad:3d:fc:31:
d1:79:a6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:03:00 2025 by rpki-client