Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa
File: ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa (raw, json)
Hash identifier: HgLGglk0S4IATrqUxgAV1S7c2Cds50Oig+WiSSLRjns=
Subject key identifier: 96:7F:1C:6C:38:52:21:FA:78:13:65:C1:F5:23:8C:1E:BE:8F:9E:4A
Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e
Certificate serial: 019424B3B577A9C915C5975DA8034D9B6C0E
Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56805
IP address blocks: 185.63.76.0/22 maxlen: 22
185.63.76.0/24 maxlen: 24
185.63.77.0/24 maxlen: 24
185.63.78.0/24 maxlen: 24
185.63.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b5:77:a9:c9:15:c5:97:5d:a8:03:4d:9b:6c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=967f1c6c385221fa781365c1f5238c1ebe8f9e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:f2:79:b1:c6:12:01:4c:0d:63:30:8b:f9:
91:da:3a:bf:e4:55:1b:43:6a:19:28:a0:db:83:53:
52:66:4e:a7:0b:bc:e8:d4:36:b6:af:32:33:7d:9a:
e4:10:78:b4:93:f1:da:a1:6b:8e:03:6b:b9:c3:64:
01:4b:c0:58:7b:57:8f:6d:ce:d3:ad:4d:37:66:17:
a4:08:4b:68:3b:32:1d:76:38:50:81:66:2e:66:e0:
7d:bd:75:b2:27:fb:8c:c6:4e:a3:f7:ce:20:e1:69:
2b:51:05:ed:0b:2a:bc:f6:4a:13:36:a7:b7:c8:1e:
aa:ad:90:d7:61:ed:b2:2b:93:1c:f2:6b:c8:92:12:
8f:7b:cc:fe:fd:ca:a2:6f:03:d5:62:1a:ba:2e:35:
3e:e6:fc:2a:e1:7d:84:ea:af:84:ef:c2:83:35:a9:
c6:ea:6c:c9:b3:d6:66:49:d1:4a:5d:11:b9:f8:cd:
bf:d0:9e:bf:46:19:58:9d:a3:ce:4b:a0:8a:b6:3e:
4e:bb:99:65:3b:3a:c7:3e:79:42:fe:88:2d:c7:9b:
2e:a7:6d:4e:85:5a:c6:92:8f:09:68:2f:9f:a5:8a:
5a:42:b8:b7:05:be:43:0e:a0:b2:90:d3:e4:be:f1:
fa:31:69:73:0b:a2:35:13:eb:6c:c7:8c:d2:98:ab:
9d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:1C:6C:38:52:21:FA:78:13:65:C1:F5:23:8C:1E:BE:8F:9E:4A
X509v3 Authority Key Identifier:
keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/ln8cbDhSIfp4E2XB9SOMHr6Pnko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.76.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:10:98:74:e5:78:eb:96:12:c9:65:85:fa:27:ca:e1:4e:4d:
b2:00:c3:5f:76:ba:94:09:c9:ac:e5:cb:e8:90:9f:61:b6:04:
08:7d:6c:f2:da:12:47:47:b9:1d:b4:8c:a1:c8:2f:17:ce:33:
73:79:47:bb:29:2c:60:f9:bf:e6:e2:8a:22:b5:8f:2a:d1:0c:
08:a3:80:67:78:fe:b3:03:59:ac:e6:67:28:54:b1:d6:dc:dc:
fe:76:13:0c:81:8a:78:26:b4:1a:78:61:f6:91:7c:39:af:9d:
0e:2c:8c:97:68:31:e2:68:a2:ec:a8:96:5c:78:74:e8:64:e5:
02:c5:00:4c:56:cb:5a:cb:64:0a:48:77:3f:f4:c3:d0:3e:fa:
96:f2:79:d4:fd:09:ac:c6:28:3c:81:f5:69:5d:44:88:7d:da:
93:54:b2:f6:35:b3:5a:df:6e:22:0f:90:f6:ab:84:8e:bf:63:
28:40:f9:a5:cc:ec:8b:5a:11:f1:62:20:58:93:d7:4c:94:8e:
c6:e5:00:2b:70:15:fb:a6:23:d5:4e:7f:0a:a3:7b:65:c5:d1:
8c:8f:5d:d6:e5:4a:df:f9:42:c4:cf:41:6e:cf:e4:64:47:07:
c0:7e:12:41:e3:e8:3e:b6:c2:ed:e4:1f:02:cc:d3:b0:f5:52:
ef:a9:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:04:14 2025 by rpki-client