Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/eiwsx2FFwfE5TE_nY3h0_knWuU4.roa
File: eiwsx2FFwfE5TE_nY3h0_knWuU4.roa (raw, json)
Hash identifier: CVJTqVDV13ZF8iBRU7zgKf0ItAWnGVc70AQTYAE3fwU=
Subject key identifier: 7A:2C:2C:C7:61:45:C1:F1:39:4C:4F:E7:63:78:74:FE:49:D6:B9:4E
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019424B3D52572DABE6E30D503247DE84B69
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/eiwsx2FFwfE5TE_nY3h0_knWuU4.roa
Signing time: Thu 02 Jan 2025 01:49:12 +0000
ROA not before: Thu 02 Jan 2025 01:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 185.197.176.0/24 maxlen: 24
185.197.177.0/24 maxlen: 24
185.197.178.0/24 maxlen: 24
185.197.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d5:25:72:da:be:6e:30:d5:03:24:7d:e8:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Jan 2 01:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2c2cc76145c1f1394c4fe7637874fe49d6b94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:82:72:ed:52:01:a2:59:f6:dd:b4:45:b2:
e6:7c:cf:3b:d0:8c:ed:47:67:33:dc:ab:56:bc:eb:
c2:26:36:ef:c8:e1:d9:42:fb:6a:c8:dc:7b:80:09:
b2:41:6b:f0:bc:ec:e3:e9:9f:8d:43:58:6f:2b:61:
1e:cc:3a:9f:0a:1c:bb:12:3f:8d:c5:1a:e1:b8:09:
83:e0:94:a8:5b:4b:40:20:3e:c2:95:e3:b9:14:51:
6a:0a:d6:ac:b3:41:3a:7c:a5:23:1e:0f:0a:f2:f8:
7e:bb:10:08:d6:f0:bf:f2:8a:a0:af:f4:73:ea:75:
46:9e:68:9d:63:03:c9:c4:3d:59:db:c7:40:49:4a:
cb:05:8a:69:4b:c7:1e:88:cf:56:79:d4:7e:de:f0:
a1:1c:c9:6c:c4:d4:24:f9:15:90:8e:48:1b:53:da:
64:4b:ba:6b:16:b7:88:9a:71:86:43:c5:c7:8a:25:
2f:2d:00:0a:0c:24:a0:24:f2:e5:9f:a3:7e:9e:bc:
ca:a8:4c:d8:12:9b:56:72:38:df:ad:a5:cd:ca:f5:
1d:56:df:33:4a:3b:7c:c5:fa:8d:23:50:bb:34:e6:
0a:5c:3c:ab:8f:be:37:52:eb:21:da:e6:b9:34:09:
35:59:63:15:39:11:3c:91:10:c5:b2:78:e7:36:fc:
cf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2C:2C:C7:61:45:C1:F1:39:4C:4F:E7:63:78:74:FE:49:D6:B9:4E
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/eiwsx2FFwfE5TE_nY3h0_knWuU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:e7:98:ee:13:55:a6:7a:f1:91:d4:76:a0:ca:da:1b:92:38:
e6:5d:ad:82:22:f5:ce:fe:31:d8:c6:7e:99:d4:27:80:9c:65:
08:96:20:1c:48:ef:28:ef:56:b2:08:96:28:96:33:01:ab:25:
a3:22:18:cf:49:f4:37:88:8d:5c:67:13:a7:f7:fb:95:2e:45:
8a:ed:94:a4:6c:20:f4:53:41:ed:0e:45:02:b7:3d:24:b0:46:
d9:b6:cb:d5:71:b9:41:1f:31:d8:d4:0a:96:d7:3d:c6:0b:10:
21:7f:d7:40:75:15:37:05:e6:79:ef:05:36:5d:ed:a6:1a:7a:
39:24:b7:2c:30:6d:86:b2:6a:a2:0e:22:62:76:06:52:5c:c7:
81:e0:51:38:ed:35:d5:ac:4e:ff:02:91:04:65:7a:c1:12:36:
01:34:c7:19:25:32:f3:13:44:78:06:b5:04:39:cd:b4:28:44:
d7:da:db:46:5d:25:c1:57:50:58:f3:7c:fd:f0:a5:82:8f:27:
94:11:02:05:2b:49:1b:0f:49:58:78:92:a0:53:fd:83:b9:59:
72:27:ba:b7:b6:02:8a:9b:e4:0d:3f:43:e6:6a:86:c5:69:ee:
67:fc:b9:37:08:d7:c0:be:78:18:ae:dc:b4:29:97:71:87:06:
ad:14:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:31:40 2025 by rpki-client