Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/eeGo9wragRSvkLaXijzUVv6g1UQ.roa
File: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (raw, json)
Hash identifier: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=
Subject key identifier: 79:E1:A8:F7:0A:DA:81:14:AF:90:B6:97:8A:3C:D4:56:FE:A0:D5:44
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 0194F96B3F4461F770D8BA6F7E171469FAFA
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/eeGo9wragRSvkLaXijzUVv6g1UQ.roa
Signing time: Wed 12 Feb 2025 09:09:02 +0000
ROA not before: Wed 12 Feb 2025 09:09:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211908
IP address blocks: 185.239.176.0/24 maxlen: 24
185.239.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:6b:3f:44:61:f7:70:d8:ba:6f:7e:17:14:69:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Feb 12 09:09:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e1a8f70ada8114af90b6978a3cd456fea0d544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:4f:5d:9e:b2:35:68:5e:56:6a:df:1b:2e:
98:45:13:87:c5:2d:56:17:78:d5:c0:8c:fe:12:ad:
71:1f:68:08:39:8e:d4:32:81:21:48:58:d1:26:19:
87:1b:c3:10:a8:cd:f7:40:71:40:ce:fe:88:a5:28:
da:d8:05:8b:86:92:4a:bd:ac:49:c8:00:7d:d1:dd:
40:4f:b5:9d:1e:fb:11:09:1e:36:30:01:c9:09:a0:
94:98:b4:d3:04:34:46:56:61:f2:d2:0d:7a:ef:18:
17:db:f8:9a:57:eb:9e:e6:77:4d:8b:a7:51:de:69:
b8:99:4e:65:f0:a3:a8:54:e6:0e:fa:61:63:33:04:
24:67:56:51:c5:03:16:1b:27:5f:9f:c3:2a:a1:69:
cc:73:bf:55:54:ef:8f:7f:e6:be:bb:54:84:2a:01:
9f:01:b1:4d:3b:5c:f8:92:39:7b:19:67:ef:0c:71:
6a:cb:bf:2e:e9:9b:4d:d6:d6:93:6e:cf:76:11:b4:
26:34:57:b8:9c:32:c5:b3:a5:b0:05:d5:0a:21:48:
ef:06:91:6c:44:0e:31:3e:84:fa:7b:07:8d:54:14:
e3:76:88:db:3d:95:20:9a:82:87:d0:f7:3b:9e:05:
13:de:f3:b0:33:8f:4b:7a:6a:13:a0:df:d0:e0:29:
66:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:A8:F7:0A:DA:81:14:AF:90:B6:97:8A:3C:D4:56:FE:A0:D5:44
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/eeGo9wragRSvkLaXijzUVv6g1UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.176.0/24
185.239.178.0/24
Signature Algorithm: sha256WithRSAEncryption
84:35:53:e0:5c:35:ac:29:b9:25:6a:dd:57:f6:38:8e:66:ee:
fd:eb:c7:22:b3:2a:d6:ba:c8:39:e0:7d:1c:a4:26:75:d5:04:
a2:29:33:2d:3f:ef:a9:fc:dd:d7:66:ae:75:9d:8a:97:d1:d7:
bc:95:90:d8:be:56:e7:36:dd:9a:bf:cb:6e:7b:47:36:ea:de:
f0:e3:79:8b:15:c2:47:66:f4:83:87:f2:ed:ff:8d:25:f8:51:
a1:2a:8d:6e:12:24:85:ac:89:09:e9:58:73:c2:40:f6:12:cb:
3c:47:83:8a:b1:20:8a:ab:54:f7:c5:76:78:78:9c:a5:85:74:
32:53:fc:53:b3:6d:31:28:18:a6:e0:1b:d8:5a:3e:87:8c:86:
e7:05:4f:a2:1f:50:97:d3:f7:1f:77:23:c5:b2:82:cd:83:4c:
9d:4a:a9:ef:93:77:1e:e0:c2:4f:8c:70:8a:09:b0:b5:e5:cd:
20:0e:7a:7d:37:6c:12:68:7d:01:c5:1e:b5:b3:13:90:08:01:
36:1f:3b:7c:41:ad:a3:e0:64:d7:9d:5d:64:34:bd:6f:6f:77:
82:05:99:4d:de:93:1a:a2:86:8f:bf:65:3f:8a:6e:16:49:54:
d6:7c:cb:c8:dd:fe:98:89:dc:85:e2:07:93:8c:ad:8e:61:00:
d9:19:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:01:37 2025 by rpki-client