Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/_oQZGq-xsgpE_WLGIURnDSFrBnc.roa
File: _oQZGq-xsgpE_WLGIURnDSFrBnc.roa (raw, json)
Hash identifier: KeGRH+oG+cnDL/Vprs+PX1DlQtTCAw0VDd1F5GouGeA=
Subject key identifier: FE:84:19:1A:AF:B1:B2:0A:44:FD:62:C6:21:44:67:0D:21:6B:06:77
Certificate issuer: /CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Certificate serial: 019422FC3DADC9092BD97127E6C1E921DF73
Authority key identifier: 12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/_oQZGq-xsgpE_WLGIURnDSFrBnc.roa
Signing time: Wed 01 Jan 2025 17:49:03 +0000
ROA not before: Wed 01 Jan 2025 17:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 378
IP address blocks: 185.187.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3d:ad:c9:09:2b:d9:71:27:e6:c1:e9:21:df:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12173d1b3e231c57b3519e8d4e547868606c4fd3
Validity
Not Before: Jan 1 17:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe84191aafb1b20a44fd62c62144670d216b0677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:64:d0:00:f9:50:fe:88:95:b8:cc:ea:f8:
58:57:f0:dd:aa:bf:b3:03:3c:a6:d8:8e:58:48:3d:
d2:0a:61:47:97:ab:84:91:81:74:38:dd:d3:89:c4:
9c:f0:61:b8:10:ad:0e:06:fe:1c:f1:bd:45:2f:5c:
dd:f0:5d:e1:85:5e:e2:4a:51:90:cf:7b:02:33:58:
1d:82:52:8a:37:bc:04:d5:39:df:44:fb:30:18:3e:
65:56:43:63:db:69:d9:aa:d6:b8:47:b1:8d:ce:43:
93:cf:82:59:6c:44:91:c5:4d:2f:fd:55:6f:6c:11:
69:40:90:bf:67:da:29:cb:70:95:a6:b5:cf:db:89:
ce:bc:13:50:54:fb:bc:2c:fd:2d:85:eb:af:a5:c3:
5d:91:c3:8e:1b:e8:f4:bc:18:3f:05:f1:f8:e9:9c:
25:0b:25:6f:57:1b:e9:69:b2:a2:74:4e:e8:42:76:
4e:5d:8b:5e:69:79:9e:a2:d5:d6:bd:42:f0:9f:b4:
b2:de:9e:39:a0:97:2a:ee:14:6a:55:6a:7a:b8:b4:
4e:0e:93:02:de:a2:f9:95:3b:44:d1:5d:d7:c6:96:
5c:1e:63:8e:dd:5f:b7:d8:44:24:83:2a:80:3e:f9:
fa:5e:86:9b:d1:90:4d:3e:4e:ac:1f:c0:42:0b:c6:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:19:1A:AF:B1:B2:0A:44:FD:62:C6:21:44:67:0D:21:6B:06:77
X509v3 Authority Key Identifier:
keyid:12:17:3D:1B:3E:23:1C:57:B3:51:9E:8D:4E:54:78:68:60:6C:4F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/_oQZGq-xsgpE_WLGIURnDSFrBnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/733f74-0dbe-443b-8431-3f8372d968d0/1/Ehc9Gz4jHFezUZ6NTlR4aGBsT9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.36.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5f:26:f6:30:09:0d:de:75:d6:9f:67:7b:90:43:dd:d5:57:
eb:25:dc:29:19:79:08:53:7b:6c:94:b7:03:9e:a8:93:36:b6:
c4:75:87:8f:5f:82:d2:b1:1f:e2:94:04:3b:23:8c:5d:ed:8b:
f4:70:bb:ed:e3:8b:86:46:2a:64:c3:11:18:6b:10:c7:7c:e6:
dc:a3:32:28:cc:a9:ee:15:86:3f:43:09:00:c3:e0:0b:6f:de:
8e:a8:6c:64:5d:62:c8:b5:b0:f9:a1:b5:be:79:44:24:b5:8b:
50:be:75:cf:f9:02:ce:33:07:71:7b:47:93:bc:24:f2:83:36:
ea:de:69:6a:9b:50:c8:a4:76:e9:30:98:70:ff:b3:84:51:47:
8f:a0:28:eb:53:93:fc:b1:bf:cc:c1:f3:58:84:4d:1d:49:f4:
6d:d6:8a:1c:ce:60:b1:e3:ea:d7:bc:76:f3:4c:21:27:c2:fe:
02:e1:18:b7:d8:64:72:97:45:e1:07:6d:77:b5:67:34:b0:86:
1e:29:dd:4d:2b:c2:95:85:8f:e5:a4:16:ec:b6:d0:57:4a:43:
0d:ea:1e:9a:42:bd:b9:58:37:e4:45:e0:de:40:5c:f0:93:a0:
93:f7:c3:33:4b:f9:d7:e7:59:be:d5:71:dd:d9:5c:e3:2d:b7:
2b:fc:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:22 2025 by rpki-client