Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa
File: ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa (raw, json)
Hash identifier: oyaoG9o+HMw8UbuIoU2MjdUmgeJrqz7dNC1WMoDWkeM=
Subject key identifier: 7B:06:BE:8B:56:57:DF:1E:6C:C7:9C:A9:AA:E8:82:1C:67:1D:05:96
Certificate issuer: /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial: 0194266C25148CCF62573C5D534F72D03B80
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa
Signing time: Thu 02 Jan 2025 09:50:09 +0000
ROA not before: Thu 02 Jan 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34154
IP address blocks: 185.237.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:25:14:8c:cf:62:57:3c:5d:53:4f:72:d0:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b06be8b5657df1e6cc79ca9aae8821c671d0596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:6f:c2:1a:5a:c6:00:92:3d:6b:83:91:c1:
63:d2:30:b7:4b:7c:7a:e6:7b:66:8d:a5:ae:34:a3:
a3:7d:70:8f:a4:5e:ac:87:99:6f:46:e5:ce:4a:7c:
b7:ac:58:12:5c:63:fd:9a:d2:44:f6:38:16:b9:13:
e2:96:cb:17:08:23:21:b0:2d:62:07:17:a8:6a:35:
1e:52:e4:4d:1d:16:b1:d6:21:87:76:50:3f:22:79:
51:70:1b:6b:07:12:8d:96:81:82:b7:f7:b0:2f:2c:
d1:96:63:e1:bd:92:0f:ad:e1:ce:5b:1f:36:98:11:
25:f2:20:f4:f9:ac:2a:a1:58:79:5c:7a:47:ec:07:
7c:dc:de:2e:b5:5e:2f:0a:56:9f:f4:b9:f8:81:73:
c8:b2:12:f3:49:aa:89:00:97:fa:77:78:5e:54:15:
f6:a4:03:59:d7:1d:fe:10:30:bf:45:fe:2c:93:f7:
9a:92:a3:e0:f5:bb:61:30:90:70:35:67:0a:02:0d:
47:ab:8e:c1:7d:94:74:83:3f:f0:6d:5b:e3:b5:f0:
fe:ee:6a:8b:51:ff:d0:13:9e:0d:ce:75:07:6f:ca:
97:c6:be:74:91:14:df:28:e0:53:32:a9:82:76:b6:
3b:ea:b6:4a:91:b9:af:89:f0:1d:7d:d2:68:ca:0a:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:BE:8B:56:57:DF:1E:6C:C7:9C:A9:AA:E8:82:1C:67:1D:05:96
X509v3 Authority Key Identifier:
keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/ewa-i1ZX3x5sx5ypquiCHGcdBZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.34.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d2:df:5a:9b:d8:57:a4:5b:2c:1d:22:73:0b:a9:95:3b:52:
bb:64:0c:b2:fd:b4:39:1f:50:ba:d3:bf:f2:64:99:a6:bc:f1:
b3:3a:99:b0:15:9f:7c:6c:4a:16:ce:8d:51:78:e9:03:0e:2c:
70:94:01:47:72:1e:4f:0b:14:a1:bc:e0:c0:6a:1d:b4:1e:a9:
49:30:a4:c5:5a:60:55:9e:0b:c6:1b:3d:f6:38:e9:45:07:ad:
8f:dc:fd:68:68:39:6b:ec:e4:00:62:b1:93:e8:4f:0f:99:57:
dc:b8:6d:c0:88:5f:94:72:b9:1a:7e:3d:e3:77:eb:92:3b:3a:
7b:08:59:f1:84:0d:6d:43:6e:72:fa:c1:b0:9f:3d:d8:d6:10:
be:7f:6d:b0:05:06:3f:57:34:3b:e4:4e:3f:35:67:c8:fb:57:
90:98:36:76:62:38:64:62:34:45:f7:d6:c2:12:2f:38:61:a5:
51:b2:3b:93:73:5b:67:07:8b:78:bd:3c:91:60:74:8e:2a:b6:
2a:49:e8:6f:0b:73:f1:61:79:ff:b9:80:fa:f0:b3:49:46:15:
9c:00:99:0f:ab:75:fc:88:e5:60:0c:f8:ee:48:49:67:7a:ed:
c9:34:7d:7e:09:4b:a2:da:b8:57:0e:23:f5:64:37:20:4a:bd:
b3:68:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:35 2025 by rpki-client