Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa
File: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (raw, json)
Hash identifier: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=
Subject key identifier: AC:F7:30:B9:5F:14:DA:0B:36:9C:42:1C:6F:17:81:26:DD:10:54:65
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 0194979CC090287DB8455907A8070FCA9CE4
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa
Signing time: Fri 24 Jan 2025 09:20:20 +0000
ROA not before: Fri 24 Jan 2025 09:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212312
IP address blocks: 89.184.58.0/24 maxlen: 24
185.242.238.0/23 maxlen: 23
2a12:77c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:9c:c0:90:28:7d:b8:45:59:07:a8:07:0f:ca:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jan 24 09:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf730b95f14da0b369c421c6f178126dd105465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:39:60:be:61:73:66:93:a1:af:0c:70:36:
2d:75:a8:92:72:07:22:e2:bd:d1:d8:67:2d:7e:e6:
ae:b0:dd:19:38:92:d2:7b:76:0d:73:e8:1a:f3:9b:
a7:b2:bd:d8:66:2c:53:e3:47:63:7e:d1:4f:b8:9d:
3c:17:0e:d6:cb:ab:b4:d6:f4:e8:40:f2:30:44:ec:
15:84:25:84:65:bf:93:3e:f9:cf:54:9b:f0:ac:5c:
f9:f4:8b:ec:e4:d6:90:dc:fb:42:c9:99:8b:7d:82:
ac:8e:fa:b9:f5:be:75:3d:3a:34:9c:3b:81:a2:71:
e5:08:e6:6f:9c:d6:a4:0a:77:7b:62:03:78:f5:6d:
2b:c6:80:00:c9:b4:0a:fc:da:82:45:bf:a5:b2:9c:
d4:8e:c3:1e:b6:c2:01:f6:71:49:5f:6a:03:8d:43:
3e:06:10:af:e8:0f:8b:48:31:68:02:62:ac:e5:db:
34:6b:cf:4d:13:26:e6:89:d2:53:c6:03:44:34:5b:
98:2e:f1:49:37:ca:fb:1f:bb:92:4b:df:a7:b1:f6:
93:5f:f6:f0:c7:14:73:de:25:3f:cf:58:48:20:75:
db:a8:14:71:7b:6b:4a:61:2b:f9:f8:60:b7:d4:b9:
e5:61:cf:9e:7e:7d:fe:e5:39:7f:ae:bf:82:b3:d4:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F7:30:B9:5F:14:DA:0B:36:9C:42:1C:6F:17:81:26:DD:10:54:65
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.58.0/24
185.242.238.0/23
IPv6:
2a12:77c0::/32
Signature Algorithm: sha256WithRSAEncryption
41:5b:a2:70:1d:4a:10:02:f7:74:bc:dc:cc:dc:33:00:d1:f1:
c9:68:7b:dd:63:53:97:68:32:88:1b:87:75:46:78:ff:a5:1a:
93:29:9e:13:26:a2:2e:cd:b4:9f:d7:d5:6a:b6:96:a2:19:97:
00:a6:f0:54:3f:d4:18:4e:34:67:2a:1a:1f:cb:d5:33:02:7a:
8a:7c:30:31:ee:6f:ce:ca:3c:d9:38:20:b1:d5:b6:13:eb:2e:
b9:d9:56:dc:f6:98:85:ce:28:06:06:21:5d:4a:34:c3:ee:67:
4e:2d:6d:e9:ab:80:d8:f4:f6:a1:be:e9:34:cf:c2:97:d6:b0:
3a:ea:c6:3c:a3:c1:1e:2f:a6:4e:62:71:92:9b:6a:18:5e:2c:
1b:2a:7b:64:7e:1c:9d:6d:1c:ba:7f:4b:20:b5:06:40:f3:7c:
cf:99:94:56:71:03:10:ff:06:a1:61:b4:4f:22:68:b7:bd:a4:
c5:89:14:f0:7a:13:7c:3f:f4:f0:6b:c7:bb:93:af:98:e8:8c:
d3:67:76:55:77:0b:9c:0c:c6:0a:6a:2c:d4:3e:43:bb:2e:11:
ef:4e:03:4e:c1:5a:0c:f7:c7:73:bb:d6:8a:9e:f7:ad:57:49:
26:b1:05:a4:dd:f3:74:39:f6:89:7e:8d:58:47:56:94:48:cf:
bb:59:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:56:23 2025 by rpki-client