Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ETN8QHIyryapaJmjoM3ECXryN-A.roa
File: ETN8QHIyryapaJmjoM3ECXryN-A.roa (raw, json)
Hash identifier: WdBvGRMmsIYdfXiH6W0xJOuPciG8AXZo+omUaskYZi8=
Subject key identifier: 11:33:7C:40:72:32:AF:26:A9:68:99:A3:A0:CD:C4:09:7A:F2:37:E0
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0194895D15E049D4151AC4BB3434CBB1F655
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ETN8QHIyryapaJmjoM3ECXryN-A.roa
Signing time: Tue 21 Jan 2025 14:56:06 +0000
ROA not before: Tue 21 Jan 2025 14:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198926
IP address blocks: 185.124.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:5d:15:e0:49:d4:15:1a:c4:bb:34:34:cb:b1:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 21 14:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11337c407232af26a96899a3a0cdc4097af237e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:c7:43:78:17:99:d9:5b:83:f1:b4:79:56:
99:bc:b7:60:fb:2a:7f:04:dd:99:3a:63:7b:dd:d0:
4b:dc:43:f7:68:d4:8b:6d:36:06:7f:42:cd:18:25:
e1:cb:7c:de:db:26:55:db:6c:31:fb:5b:ea:e9:97:
5b:1c:ef:a2:f4:0e:ec:6b:56:3f:0c:a1:fe:a0:be:
0e:e6:68:3a:bc:12:05:1c:ee:09:17:db:a7:96:7b:
2e:9c:0c:f4:d4:4b:9b:5d:76:11:82:ff:ea:d8:85:
54:57:d0:8c:bf:3b:44:4a:0f:63:13:06:94:03:8f:
f5:0c:17:67:ce:23:b6:33:e5:3d:cf:19:04:2e:f6:
3c:6a:de:51:1f:83:77:b8:c7:f7:51:56:f8:d7:f1:
7e:1a:80:a3:75:6b:b3:e1:11:a4:71:d3:e3:a0:7c:
3a:c1:a9:1a:75:a9:c0:72:ad:31:a5:92:17:4c:5d:
aa:19:6f:13:f5:8b:0d:d8:d5:01:8d:9d:80:a8:0d:
60:af:de:94:67:ad:93:34:0a:d2:e1:64:af:11:3a:
a2:09:e2:63:61:53:da:7f:11:1f:9b:2d:b9:1b:ec:
8d:6c:c7:3f:64:44:b6:d7:d8:95:6a:dc:35:79:21:
9f:c6:d4:3e:62:d4:13:47:55:84:13:57:8f:d8:25:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:7C:40:72:32:AF:26:A9:68:99:A3:A0:CD:C4:09:7A:F2:37:E0
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/ETN8QHIyryapaJmjoM3ECXryN-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1b:82:bf:16:a2:47:5f:7f:02:7d:b0:70:d5:6d:73:15:62:
f3:40:84:cf:48:d1:19:f5:e6:b6:b0:c3:4d:c0:19:5d:57:70:
4c:6d:20:7f:6b:46:94:c9:63:c0:c0:ec:6f:b0:a1:4f:a9:2f:
93:6d:6d:9a:d5:b6:9d:54:c8:27:4a:d0:74:1a:4b:06:2c:cd:
1c:a4:ef:20:c5:be:6b:f4:df:ae:f3:be:c4:80:7f:a5:63:0b:
10:18:af:cb:bc:f0:f0:55:a1:2b:87:ef:bf:6d:25:24:9f:35:
f6:5b:e8:18:18:e7:51:e0:59:9c:e6:3e:f7:6e:5e:d6:db:9d:
a7:45:27:d2:1a:95:75:61:9f:59:6c:7d:50:d4:91:0f:de:34:
7d:f8:fd:07:1e:55:e2:d1:68:f7:a8:44:f7:d2:94:17:44:da:
40:b2:a9:bb:f4:d3:13:b4:f8:8d:d5:12:20:e9:42:67:b4:fc:
32:0d:10:11:15:81:1c:e4:fe:51:ba:49:60:73:e0:28:60:75:
6f:f3:fd:98:da:e9:5a:f5:83:35:c8:48:68:2c:65:79:bd:b2:
1c:0d:53:ee:15:aa:c5:fc:03:7f:d7:e6:8e:be:b7:4f:32:22:
94:1d:9e:a2:ab:57:28:7a:ee:08:0a:d2:df:84:7c:31:49:fc:
4d:c0:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:28:51 2025 by rpki-client