Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/tGECs5OY2cdz8mikBEFoXz5C6d8.roa
File: tGECs5OY2cdz8mikBEFoXz5C6d8.roa (raw, json)
Hash identifier: Bw/zZmttO7DthXv4UKcvtOUWOfn1bWNIO4IyRKEnc00=
Subject key identifier: B4:61:02:B3:93:98:D9:C7:73:F2:68:A4:04:41:68:5F:3E:42:E9:DF
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019425FDBD77E686D02127332360100833B5
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/tGECs5OY2cdz8mikBEFoXz5C6d8.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.148.220.0/23 maxlen: 24
195.191.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bd:77:e6:86:d0:21:27:33:23:60:10:08:33:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b46102b39398d9c773f268a40441685f3e42e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:c3:0d:5e:da:30:d9:f5:c3:71:92:e9:70:
ee:fe:9a:b5:c8:fc:21:61:6e:93:ab:40:da:33:6a:
eb:51:1b:e4:77:66:d1:a5:26:a1:40:86:1a:4b:0d:
33:7d:22:b5:23:c2:4a:d6:d1:f2:89:e6:91:84:88:
7b:4d:ba:28:12:6c:7a:03:01:d5:b7:b2:66:7b:37:
fc:e2:2f:e0:cf:f7:c3:8f:a7:e5:9a:5b:74:6e:91:
b9:c2:6f:2b:30:4a:9f:09:b7:a1:f5:4f:31:40:67:
57:63:f9:3c:ea:34:c3:8d:ee:11:cd:1e:95:77:3a:
08:93:35:88:3c:2a:ba:3e:fd:22:f4:c0:45:f4:18:
1c:ea:3c:01:a2:b0:2e:d1:20:42:9d:c2:0e:83:dc:
67:f2:a3:59:d0:c3:0d:dc:01:c9:22:c5:be:1f:11:
28:47:27:6d:4e:7a:62:b0:9c:8d:83:5d:fb:c2:d0:
60:7b:1a:c7:a4:fa:4b:ff:c6:0f:49:d3:87:c0:b7:
88:f8:da:32:49:fc:3c:2f:4e:ba:09:36:de:22:0f:
51:ca:99:7c:24:14:fb:74:a4:5d:f0:31:63:a8:df:
2f:ec:88:47:88:61:e3:65:ba:71:ee:16:d8:da:e9:
c6:6f:f6:20:c9:be:ba:42:e0:19:33:f1:8e:40:d7:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:61:02:B3:93:98:D9:C7:73:F2:68:A4:04:41:68:5F:3E:42:E9:DF
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/tGECs5OY2cdz8mikBEFoXz5C6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.220.0/23
195.191.102.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:33:12:77:13:6c:3e:91:76:e2:ad:8f:1b:1b:be:44:41:ae:
5a:75:4c:54:55:f4:9f:4a:d5:87:9c:34:de:72:4d:45:b6:eb:
86:bc:8d:f1:c3:a9:01:6c:15:27:d1:34:bd:04:15:ac:ae:1a:
a8:5c:50:9c:14:5a:51:68:f9:16:6c:65:e2:c1:61:f3:50:0f:
e7:71:31:c0:de:79:94:30:70:ab:fe:a6:24:83:13:79:21:6c:
2d:d7:80:0a:59:1f:0f:8f:db:aa:0c:26:84:15:f4:61:23:9d:
94:da:2c:48:9b:28:b7:6a:f0:b9:ea:ed:86:c8:b7:01:2d:3c:
89:bf:78:a5:f1:52:19:be:58:30:c4:c3:e5:3d:51:83:08:61:
06:11:51:2d:1e:37:6d:7b:ba:99:e9:59:85:eb:0c:df:35:61:
4a:42:65:af:8a:55:d7:e3:4c:08:ae:b0:c9:a9:89:7a:f0:44:
76:dc:33:c9:a1:09:3e:7b:c0:4b:b3:7a:d1:8b:6e:9e:8d:68:
5c:4d:1d:42:a2:ca:0e:9a:8b:2a:b2:45:83:c5:a0:8c:2f:15:
1c:1e:c5:c3:9a:fa:f6:0e:e1:e8:d3:08:dd:ed:3b:8a:a9:a4:
5c:b5:df:ae:f6:0f:9f:f4:4e:ee:8f:89:b4:32:ad:5a:4d:96:
5f:d9:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:19 2025 by rpki-client