Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/8EgilQwuaLeesY5D4MXR98cjsk4.roa
File: 8EgilQwuaLeesY5D4MXR98cjsk4.roa (raw, json)
Hash identifier: W7fEZRR9vQWc1wZaS6T1JTfiycKOFxnx4jwhxIG0rbQ=
Subject key identifier: F0:48:22:95:0C:2E:68:B7:9E:B1:8E:43:E0:C5:D1:F7:C7:23:B2:4E
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 019424454202CE04D56B2D62245FECFD80AB
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/8EgilQwuaLeesY5D4MXR98cjsk4.roa
Signing time: Wed 01 Jan 2025 23:48:26 +0000
ROA not before: Wed 01 Jan 2025 23:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 185.180.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:42:02:ce:04:d5:6b:2d:62:24:5f:ec:fd:80:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04822950c2e68b79eb18e43e0c5d1f7c723b24e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:6f:12:79:d1:ac:2c:b1:dd:bc:1f:c8:13:
30:68:a1:f8:e1:a5:6c:46:97:bf:68:08:7b:e7:b8:
21:dc:4a:e0:01:36:a6:71:0f:e4:e4:46:44:81:4d:
20:8a:4b:05:b9:9d:23:0a:51:8c:a4:37:1e:6f:06:
a1:ac:5a:72:a6:5e:e7:de:ce:b4:34:d1:80:4c:8e:
a6:a4:91:1b:82:97:dd:6b:1c:88:b4:56:55:96:f1:
52:c9:d3:22:55:82:b0:d6:a9:6a:46:46:b4:58:36:
9c:e4:c9:53:2d:07:c7:e3:32:8a:b4:af:c4:40:37:
47:0f:5a:fa:0f:6b:a8:72:09:38:33:14:a0:21:88:
79:8b:c0:a5:b6:27:fc:09:24:02:d9:35:2e:c6:8b:
17:c8:ca:23:62:77:2d:6b:d5:b3:cf:eb:0d:14:40:
21:b1:28:3e:4e:25:1e:da:d6:50:58:c7:a9:ad:1e:
e6:92:59:4d:bc:dc:ef:b0:60:10:00:21:b0:cc:2b:
60:bf:c6:bf:05:27:7e:d6:35:2a:0d:ee:a6:70:4d:
9c:c5:06:30:99:4c:1d:b2:1d:71:7a:1b:26:2b:59:
aa:8b:6d:e6:ad:be:c8:0f:98:48:36:d6:0e:a1:19:
74:ac:1c:c6:b3:75:30:e6:2e:be:fe:68:9c:55:6f:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:48:22:95:0C:2E:68:B7:9E:B1:8E:43:E0:C5:D1:F7:C7:23:B2:4E
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/8EgilQwuaLeesY5D4MXR98cjsk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.195.0/24
Signature Algorithm: sha256WithRSAEncryption
20:53:41:5f:5a:c7:88:8a:9b:a2:08:3d:67:26:9b:9a:ec:13:
5b:75:35:94:75:13:d1:57:ab:7c:a3:aa:af:d0:fc:09:43:1d:
02:3a:10:d4:63:e1:25:10:4b:e2:2d:9b:a7:90:bb:a0:a0:c7:
47:1b:b8:1d:6c:07:a7:04:44:38:12:6c:56:aa:b7:3f:b2:29:
32:c2:dd:2a:21:46:0e:24:78:fd:75:5f:df:15:53:e1:d2:c4:
36:46:ce:72:5d:8e:9e:c1:bb:07:7a:a9:1b:e9:ad:c0:72:f1:
1a:9d:90:ec:1a:fa:d6:30:0c:f6:f2:45:c8:fc:24:62:43:81:
cb:42:e7:6b:ee:fe:80:13:86:d1:9d:e0:98:bc:f4:e9:3e:8d:
0e:45:f7:c8:c7:b1:c1:44:32:83:de:bd:dd:0d:ed:0e:b5:b6:
a8:13:61:42:cf:fc:34:14:2e:58:0a:52:e3:1b:e5:28:ae:00:
cc:34:85:0a:80:a0:c7:02:3e:74:30:21:a6:49:58:c6:ff:06:
92:a3:3a:07:f6:52:2c:7a:4d:09:aa:c3:01:73:5a:b4:f4:d6:
8b:bf:da:d1:8d:83:f4:6e:a8:35:79:be:d4:fb:bb:77:dd:a3:
f0:3c:8c:c5:5a:e1:b1:2a:0f:81:28:13:b4:b5:6b:89:15:de:
9a:c5:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:02 2025 by rpki-client