Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EFCPUv2UqSW-czFi7m9pGfQZa_c.roa
File: EFCPUv2UqSW-czFi7m9pGfQZa_c.roa (raw, json)
Hash identifier: 0UBvToDBOPtRvSnK6YcUitTRHp8ZcMZ+olKKTqMqmtY=
Subject key identifier: 10:50:8F:52:FD:94:A9:25:BE:73:31:62:EE:6F:69:19:F4:19:6B:F7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0194222010A699ACF577B7BCEE4ACC317C68
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EFCPUv2UqSW-czFi7m9pGfQZa_c.roa
Signing time: Wed 01 Jan 2025 13:48:34 +0000
ROA not before: Wed 01 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:10:a6:99:ac:f5:77:b7:bc:ee:4a:cc:31:7c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10508f52fd94a925be733162ee6f6919f4196bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:59:83:62:51:0b:73:71:ce:be:98:cd:c9:
ba:73:4e:51:ec:40:3c:c3:8a:14:1b:00:63:7c:80:
13:d5:4f:33:5f:4a:77:03:c5:a2:86:b9:98:05:e2:
1d:74:49:3e:eb:06:cd:b2:a6:29:6b:24:3a:77:e1:
80:24:07:03:39:9a:ae:8a:8c:ca:f1:da:31:40:1f:
b3:ca:68:56:5e:14:d2:0e:d0:32:5c:52:de:ca:bc:
ce:aa:cb:16:fc:3f:b2:0b:4d:d2:1a:8e:40:a7:40:
a3:39:6e:37:41:b8:54:cb:79:73:04:85:28:0a:ab:
f4:3c:26:ab:14:be:39:44:eb:f0:f5:9c:d7:4a:05:
3e:e2:83:ea:68:ac:59:13:9a:a4:43:7e:ed:24:42:
01:2b:3f:48:43:28:f7:c3:8a:84:8a:45:31:3c:9b:
95:2a:6a:4e:45:ad:c7:4e:06:a4:6c:d5:44:76:4f:
62:f7:b0:fd:1f:8c:12:be:47:67:39:e7:21:88:c2:
60:79:77:28:23:d1:d8:d5:40:13:00:a0:61:78:81:
19:34:26:e4:c1:27:15:dc:99:93:65:57:e8:c8:d1:
f3:d3:f2:90:9d:3f:97:89:f3:dd:75:64:22:23:0d:
a5:fb:d6:90:ef:5a:17:b1:13:74:2f:c1:f0:b8:05:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:8F:52:FD:94:A9:25:BE:73:31:62:EE:6F:69:19:F4:19:6B:F7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EFCPUv2UqSW-czFi7m9pGfQZa_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:64:10:85:9f:9d:a8:f7:27:7a:c6:12:d4:9e:df:9d:cb:f0:
da:54:46:95:07:fd:05:92:f1:fc:08:60:96:bf:25:6b:fa:62:
5c:60:f0:23:b4:80:22:83:bf:b5:3b:44:8a:e1:74:49:fc:ca:
26:df:51:85:e5:6e:45:3a:96:d0:f2:21:58:a1:6f:39:99:d9:
13:54:54:09:72:2d:ee:13:1d:d4:3c:96:21:24:9e:cd:32:cd:
a8:2b:fd:6f:6b:c0:c9:e8:ff:28:17:82:b1:32:c6:32:2a:c1:
18:dc:95:02:91:be:6e:ce:a3:cb:2c:c5:ae:72:8a:7e:86:8a:
46:28:d1:ca:92:5d:d2:21:c7:8a:24:71:3c:94:38:b5:4c:48:
c2:85:55:3a:7c:0d:14:91:fc:50:c4:fd:d3:82:86:b3:14:7a:
cf:8f:7d:99:0d:4d:bb:e6:61:2e:c8:02:89:01:e9:1d:d0:bd:
3f:aa:44:ef:1a:89:11:e5:6e:a7:69:2e:c4:ed:97:1d:d9:a0:
e8:44:bd:1c:6c:4c:1f:7b:09:b4:97:30:b8:b0:83:0c:1d:7d:
1f:3a:10:9a:0b:45:58:a9:da:32:3d:14:66:b3:91:6d:95:3e:
95:e9:64:6c:fe:07:94:d1:94:a4:0a:9f:2e:e0:a2:cf:7c:ea:
44:72:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:53:06 2025 by rpki-client