Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa
File: 1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa (raw, json)
Hash identifier: jxxIlpO+0WHC3wFwCkHj3JuHjD6nZEUilknF8lXMaCM=
Subject key identifier: D5:E7:3C:93:F5:8C:B3:FD:8B:74:B2:89:89:FD:1F:A7:F1:88:BF:04
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 0194266B86ABC3EDBFC182C84B23A2EEA5F5
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa
Signing time: Thu 02 Jan 2025 09:49:28 +0000
ROA not before: Thu 02 Jan 2025 09:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203598
IP address blocks: 62.228.240.0/24 maxlen: 24
87.228.203.0/24 maxlen: 24
93.109.224.0/24 maxlen: 24
93.109.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:86:ab:c3:ed:bf:c1:82:c8:4b:23:a2:ee:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 2 09:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5e73c93f58cb3fd8b74b28989fd1fa7f188bf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:ac:85:cf:d9:c2:79:f7:b6:99:b1:46:5e:
29:aa:40:4a:b8:73:c0:3f:9f:91:8f:44:0f:7c:c2:
ca:64:c6:fb:c2:8c:92:3b:91:8c:4d:48:54:1c:b2:
d4:c8:71:0b:1f:51:f6:b1:2a:3f:fc:66:8a:ec:49:
f0:66:85:22:3a:05:74:e6:c6:d9:f5:c6:7b:f1:9d:
93:2b:34:e2:21:58:8d:0d:25:56:4f:78:37:84:f3:
3c:8d:2b:69:f2:49:4d:17:91:ed:e0:96:4d:84:bd:
5c:eb:7f:4a:c9:6d:b8:75:f4:fc:10:8e:ab:8d:40:
5c:65:7a:ff:a7:3d:b7:59:d9:f7:44:12:0a:ef:98:
3a:e1:a8:da:92:ab:2d:f5:0e:6c:e3:f3:d9:16:ab:
33:dc:af:b5:78:29:06:02:b5:3a:d3:27:6f:d2:b4:
3c:b5:83:9a:65:d6:6f:3e:c4:3b:90:e0:bd:e1:e0:
a2:f6:1f:41:e4:be:20:02:36:7a:7e:6f:6e:35:47:
7e:02:8a:91:f7:6e:73:59:ac:4c:8b:1a:6b:82:4b:
23:bd:77:c7:75:4b:f6:2b:4c:bb:94:ef:34:fc:f9:
6d:e4:20:e0:12:10:d9:84:33:68:50:42:a0:7e:fa:
00:73:a7:92:e4:7c:2a:3e:47:72:b5:ae:cc:32:d3:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E7:3C:93:F5:8C:B3:FD:8B:74:B2:89:89:FD:1F:A7:F1:88:BF:04
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1ec8k_WMs_2LdLKJif0fp_GIvwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.240.0/24
87.228.203.0/24
93.109.224.0/23
Signature Algorithm: sha256WithRSAEncryption
39:d4:3d:fe:e5:c3:bb:2e:61:5c:8c:25:03:96:ea:00:35:e9:
b0:09:24:bf:d5:fc:cc:1f:df:2c:8d:81:ed:11:0a:a4:5b:af:
0a:76:b9:7a:d1:49:dc:c1:1f:8d:9a:92:79:dc:15:fc:d3:17:
87:3d:ed:11:bd:75:36:87:e3:42:23:f8:14:04:3d:69:d6:83:
f2:8b:3e:11:72:f0:7f:44:d6:60:f5:03:a6:e0:86:7f:30:6d:
b5:bd:e4:8a:40:7d:b2:93:29:c8:ba:31:09:bf:c4:41:1e:c8:
2d:51:66:eb:37:94:94:3b:4c:f2:76:da:3b:75:df:2c:73:5c:
07:3f:41:c1:2a:51:2c:d7:dc:9e:c9:00:ab:dd:d0:ea:41:e3:
82:42:f9:92:36:5f:c5:67:3f:7b:41:81:3a:88:74:e2:d9:c4:
5f:d3:08:04:d5:48:9c:ee:03:84:be:7a:15:a4:ba:10:d5:dd:
9e:eb:07:06:a6:64:68:09:c4:5e:53:da:d8:5b:54:1e:7a:4f:
86:dd:03:83:cc:5e:a9:1c:ef:b7:e4:70:4b:ac:c8:e2:a7:88:
e3:ff:d0:28:10:a9:46:01:cd:cc:c4:b2:56:d0:b3:d8:50:8d:
f4:3d:bd:1a:8d:08:89:69:d2:cd:3e:eb:26:2a:16:3b:20:a9:
ac:d4:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:27:21 2025 by rpki-client