Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/egyYxAR3bwmsGgeknwOtvs63Vmw.roa
File: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (raw, json)
Hash identifier: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=
Subject key identifier: 7A:0C:98:C4:04:77:6F:09:AC:1A:07:A4:9F:03:AD:BE:CE:B7:56:6C
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 01941F8C9492F94B47CFDEB37DEFCCF69914
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/egyYxAR3bwmsGgeknwOtvs63Vmw.roa
Signing time: Wed 01 Jan 2025 01:48:14 +0000
ROA not before: Wed 01 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34471
IP address blocks: 194.104.231.0/24 maxlen: 24
217.119.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:94:92:f9:4b:47:cf:de:b3:7d:ef:cc:f6:99:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 1 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a0c98c404776f09ac1a07a49f03adbeceb7566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:bc:9f:83:b1:d8:5e:e3:e0:c2:2e:a5:4c:
a4:fb:ed:ae:94:d3:8a:6d:0b:24:9e:04:0a:05:08:
1a:2c:87:64:72:64:a4:71:2a:9e:fb:91:b6:cd:7e:
e2:46:08:9a:94:97:29:c8:3a:33:8d:91:51:42:a6:
df:8c:b9:02:fd:12:8e:db:37:92:e6:34:73:1e:a2:
86:61:3f:06:04:91:46:4c:c7:1a:4f:e0:38:23:88:
6a:78:b4:ec:5e:cd:0c:25:a1:cc:ba:6f:77:12:84:
3b:95:25:80:30:90:ea:13:0c:ac:a0:05:86:97:d2:
77:0e:79:cb:51:4c:c9:25:64:58:95:08:9e:d9:c8:
e5:aa:21:e5:96:1d:cd:c5:ec:5d:32:ba:84:ae:21:
30:33:b1:43:ff:9e:d3:91:77:09:b6:42:c0:59:5e:
84:7e:5e:98:a6:47:4e:fd:20:01:75:f5:b8:3f:10:
ef:f4:9a:f3:0f:9b:3e:0f:07:2e:cf:75:9b:dd:47:
87:d6:7f:f1:07:7c:aa:13:b2:89:07:d1:0d:c4:7d:
fc:9e:b3:bd:ae:9f:58:25:fd:40:14:5f:32:56:8c:
86:77:1a:cd:5e:15:f6:b2:a0:4b:71:f7:4b:0e:b0:
2a:6b:a1:28:80:3e:32:1b:51:cc:ae:bb:e9:3b:69:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:98:C4:04:77:6F:09:AC:1A:07:A4:9F:03:AD:BE:CE:B7:56:6C
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/egyYxAR3bwmsGgeknwOtvs63Vmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.231.0/24
217.119.141.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3b:37:4e:25:44:cb:0a:31:6b:23:da:4a:d1:bf:ba:d1:ea:
90:75:99:51:bd:84:83:41:42:60:7d:25:20:35:45:20:48:71:
46:b2:1d:d4:5e:c7:06:1e:1d:2d:0a:4b:cb:1f:cc:05:61:ea:
66:da:02:d4:53:a5:15:3a:41:ad:f9:79:bc:96:6e:70:b8:fb:
84:9c:e4:a2:e6:1e:06:ec:59:bc:76:44:df:62:0a:a9:76:a5:
0a:73:a9:82:07:c2:1a:8e:09:91:0b:b1:eb:a6:0b:b6:0e:4f:
9e:d1:26:36:e0:27:81:26:15:5d:a9:d4:83:b8:f9:38:6d:d1:
06:77:a0:fc:f6:9f:f6:98:5c:78:1f:34:7c:f8:63:ac:45:32:
a1:1c:f3:81:90:ce:d8:98:8e:97:3b:c0:fd:e1:28:d8:ae:d7:
73:c5:93:28:85:5a:a6:69:34:20:5f:d1:93:99:1d:b0:7e:b2:
38:87:29:1d:46:cf:63:62:00:f2:b9:94:ab:cd:59:35:e2:ca:
e4:41:c1:0f:dc:13:cb:74:a5:90:6c:db:0b:2f:82:df:9d:b4:
d0:7b:c0:0d:08:d0:77:db:49:23:2c:bb:a7:5e:b6:77:00:29:
68:5c:4b:22:f7:76:67:ad:70:db:92:58:af:f1:30:cf:3e:92:
d0:e4:28:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:36 2025 by rpki-client