Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/euH012EDGUcPvCsGZK3_XSPmReQ.roa
File: euH012EDGUcPvCsGZK3_XSPmReQ.roa (raw, json)
Hash identifier: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=
Subject key identifier: 7A:E1:F4:D7:61:03:19:47:0F:BC:2B:06:64:AD:FF:5D:23:E6:45:E4
Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial: 019428230E1C43A8B6AB2A30633921373D69
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/euH012EDGUcPvCsGZK3_XSPmReQ.roa
Signing time: Thu 02 Jan 2025 17:49:33 +0000
ROA not before: Thu 02 Jan 2025 17:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16328
IP address blocks: 193.108.32.0/23 maxlen: 23
193.178.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:0e:1c:43:a8:b6:ab:2a:30:63:39:21:37:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Validity
Not Before: Jan 2 17:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ae1f4d7610319470fbc2b0664adff5d23e645e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:a7:19:75:4e:1a:7c:10:c1:dd:6e:e6:92:
1b:eb:a1:56:f6:74:09:e7:1c:32:23:60:58:b5:12:
29:0c:af:14:36:eb:88:53:90:f8:5a:77:97:db:cb:
9b:ba:85:0f:c5:6d:77:3c:5f:f1:d4:1a:d8:27:f2:
c0:66:dc:d3:4d:d6:ae:c4:8a:11:64:cc:af:56:a5:
4d:c1:8e:c5:e0:cf:47:d6:0e:fa:85:b9:48:e0:21:
9a:62:c1:17:17:5f:2a:6f:6a:25:d1:d0:92:70:f4:
d8:9f:0f:85:65:a6:30:78:89:48:65:16:19:37:16:
02:12:03:f5:dd:83:75:fe:46:ff:ff:22:5b:99:7d:
bb:79:d8:f5:54:66:b8:8f:e7:86:65:e0:54:40:23:
12:c9:72:d9:11:0d:30:18:00:8e:64:ab:65:55:3f:
7f:4b:a9:45:8b:c8:3f:a6:2d:f6:47:41:85:a8:77:
cf:a3:21:b9:5e:61:28:f9:1c:50:e4:41:55:0d:ce:
cf:7e:96:97:55:50:9d:e7:dd:ba:07:f9:0c:15:49:
f4:3b:07:45:e7:c9:2f:f2:12:43:02:18:ca:e4:ba:
23:2e:06:0e:61:68:ed:13:e7:31:b7:41:6b:32:9a:
ad:27:95:1b:93:03:87:33:72:fa:38:0a:07:9b:42:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:F4:D7:61:03:19:47:0F:BC:2B:06:64:AD:FF:5D:23:E6:45:E4
X509v3 Authority Key Identifier:
keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/euH012EDGUcPvCsGZK3_XSPmReQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.32.0/23
193.178.222.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a6:7c:26:ec:29:8e:86:b6:95:16:32:2c:42:73:9c:f1:d6:
2e:79:1d:b5:bd:1d:fe:17:60:d7:64:07:c3:db:dc:92:fa:e2:
e8:ed:e5:4f:a6:d9:36:a0:13:c4:77:59:0f:86:8e:99:ec:66:
36:55:9e:7e:7a:5c:a5:c8:7c:55:54:db:a7:b6:eb:07:9f:13:
85:9f:e8:58:87:ae:7b:98:9b:06:f6:09:ab:f3:10:45:74:e8:
91:83:e3:62:8c:92:c9:02:13:f8:09:62:29:f0:0c:ec:53:12:
07:b3:db:c2:71:c2:78:1a:22:64:b1:b5:1f:7e:75:fd:5d:62:
ab:d8:d1:01:11:40:58:c2:e3:de:a4:0a:14:68:48:4c:da:f5:
8e:54:aa:a0:77:30:f4:81:a8:9a:fc:e8:da:00:68:dc:37:cd:
d8:c0:a0:bd:dc:98:a4:3c:52:44:ed:b6:94:14:02:61:91:43:
cc:ff:52:2a:a6:70:3c:83:3d:02:fd:40:c8:2a:c3:11:fb:77:
0f:35:67:7d:0f:74:ee:76:98:aa:09:8f:7d:40:37:23:bc:64:
e8:48:3e:25:b7:cf:f4:00:06:7b:9c:a0:8d:ee:70:ce:73:e2:
4a:aa:b0:c6:b6:d6:41:36:bc:d0:2b:21:48:1a:56:6e:6e:2e:
fb:68:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:10 2025 by rpki-client