Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/RXJMzhMtehSuCCi6uqljNw1_L-s.roa
File: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (raw, json)
Hash identifier: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=
Subject key identifier: 45:72:4C:CE:13:2D:7A:14:AE:08:28:BA:BA:A9:63:37:0D:7F:2F:EB
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019425211A0AE1B41B5AC0703351C7D57B42
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/RXJMzhMtehSuCCi6uqljNw1_L-s.roa
Signing time: Thu 02 Jan 2025 03:48:33 +0000
ROA not before: Thu 02 Jan 2025 03:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34535
IP address blocks: 178.250.184.0/23 maxlen: 24
178.250.190.0/23 maxlen: 24
193.0.227.0/24 maxlen: 24
193.0.230.0/24 maxlen: 24
2a0f:cdc0::/32 maxlen: 32
2a0f:cdc1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:1a:0a:e1:b4:1b:5a:c0:70:33:51:c7:d5:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Jan 2 03:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45724cce132d7a14ae0828babaa963370d7f2feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:83:45:c7:5d:a7:3a:89:e1:53:4c:df:d4:
c4:64:72:32:d7:fe:bc:e6:d3:d8:8b:ea:65:04:b0:
e3:3f:28:3c:cb:62:da:61:4a:9c:c5:80:b0:57:43:
d9:f6:1b:c6:91:10:ac:50:6d:09:a3:e3:b1:da:2e:
d7:c4:7f:75:59:ff:d2:f0:48:10:3c:fa:d0:7a:8d:
e8:47:89:de:d6:20:67:11:96:8b:d7:82:d3:41:59:
cb:aa:c9:bd:b9:e4:97:1d:a6:1e:25:b0:2f:5e:9c:
9e:ee:9e:c6:d6:a7:12:30:b7:1c:a6:9e:bf:06:e5:
0e:44:cf:0a:36:c1:65:bc:01:99:3e:0f:64:1d:ff:
29:d9:f5:81:23:0e:79:8d:d7:0d:9b:0d:a3:6a:7e:
79:a5:04:2c:ab:d4:5b:38:c6:fa:59:c6:3f:02:7e:
9d:3a:a4:c8:3b:aa:6f:95:2a:05:f5:2b:68:12:40:
0e:78:d1:c4:b3:70:7c:91:32:77:3d:21:99:5d:2d:
37:c3:5f:42:69:95:b5:e4:5e:b0:64:cb:e5:eb:8b:
8b:c2:53:b7:e1:04:85:cd:be:d5:e3:dd:0e:d2:57:
b0:78:9e:e4:39:d4:0a:81:c6:b9:7a:1a:ee:12:28:
70:9a:8e:fd:aa:38:50:c3:2b:85:64:7c:89:6d:6d:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:4C:CE:13:2D:7A:14:AE:08:28:BA:BA:A9:63:37:0D:7F:2F:EB
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/RXJMzhMtehSuCCi6uqljNw1_L-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.184.0/23
178.250.190.0/23
193.0.227.0/24
193.0.230.0/24
IPv6:
2a0f:cdc0::/31
Signature Algorithm: sha256WithRSAEncryption
59:4a:08:4f:08:b3:4f:4a:25:44:f9:1b:ed:7d:ad:75:d7:f9:
2c:d9:3c:73:ef:8c:6e:64:48:72:a8:f9:81:0e:57:75:96:8f:
1f:04:3a:c5:7b:7e:33:12:84:d6:d8:8f:58:9c:84:1b:6d:61:
10:ee:90:be:54:a3:8b:44:0f:30:f4:ff:da:57:ef:e4:c5:12:
f7:2e:16:ab:b9:81:9d:06:a7:d7:2e:37:b9:e8:12:a1:7e:19:
d7:b2:7b:9b:00:4c:be:92:d0:21:a6:b8:26:9a:c3:fe:94:cb:
60:4e:77:77:11:8d:f6:13:aa:d9:20:0a:e8:89:54:e4:fd:8f:
5f:49:fd:15:21:8d:c3:6a:b8:ee:a0:85:78:22:fd:84:c8:75:
d0:58:66:ab:4e:79:70:f9:7b:2b:e2:6a:6f:4b:d7:e1:1f:f9:
5f:c6:63:07:d1:cf:da:60:fa:90:0a:1f:ff:c0:95:5f:74:68:
b9:33:e2:27:fc:f2:bb:b7:02:f4:06:ad:e4:45:cf:65:82:88:
76:36:8d:0e:d1:46:b0:b2:97:d8:11:e3:70:25:54:48:b2:ea:
5e:79:7c:17:c8:5e:8b:ee:4d:c4:42:4e:14:fd:3a:37:b7:b5:
31:38:76:7d:01:74:e3:64:b0:69:6e:f9:cb:19:05:da:34:d0:
a1:ab:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:02:58 2025 by rpki-client