Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/eUynvlBI4OuUX1kGjVQZhKaUnMw.roa
File: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (raw, json)
Hash identifier: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=
Subject key identifier: 79:4C:A7:BE:50:48:E0:EB:94:5F:59:06:8D:54:19:84:A6:94:9C:CC
Certificate issuer: /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial: 019422FC36214D1A232DB45B262159797B88
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/eUynvlBI4OuUX1kGjVQZhKaUnMw.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35086
IP address blocks: 185.95.140.0/24 maxlen: 24
185.95.141.0/24 maxlen: 24
185.95.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:36:21:4d:1a:23:2d:b4:5b:26:21:59:79:7b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=794ca7be5048e0eb945f59068d541984a6949ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:00:fe:47:08:79:af:8e:4f:5d:fd:32:a9:
95:d6:95:44:62:da:63:ea:49:c9:ac:40:58:64:0b:
e6:d3:17:e6:56:5c:e3:cf:cb:a6:a4:5b:34:e2:6a:
51:03:a6:01:c9:74:71:4d:fb:f3:34:2a:c8:f3:b8:
8c:32:2c:58:72:85:64:73:12:d5:60:eb:cf:3e:52:
a5:c0:2e:e2:27:31:60:8b:84:64:46:1e:e4:77:e9:
ac:a7:09:67:ba:cc:8b:a0:65:72:43:91:90:10:97:
5a:85:64:ef:b0:a2:00:1d:d2:3e:21:be:33:be:50:
93:e1:45:90:22:6d:4a:7a:fc:6c:0e:5b:ac:5e:93:
12:30:4e:f5:46:36:47:6f:9c:6f:d0:6c:ce:f3:0b:
39:c4:b4:2f:ea:63:4f:f4:31:22:d8:9b:81:32:43:
62:2d:69:03:38:a8:4a:52:91:bf:85:6f:e7:52:22:
99:fa:bc:ac:73:b6:21:18:ac:83:95:bf:8f:d7:83:
29:a5:74:a8:70:d4:6f:a1:eb:d4:d3:81:91:2c:0a:
dd:be:91:7c:05:0f:6d:6b:da:5d:f6:68:9c:e0:a7:
15:06:c8:7d:20:06:e7:e5:a6:9d:2b:9b:fd:d3:34:
e4:e2:aa:0a:6e:15:19:2a:ab:1a:d2:20:39:dd:fc:
5b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:A7:BE:50:48:E0:EB:94:5F:59:06:8D:54:19:84:A6:94:9C:CC
X509v3 Authority Key Identifier:
keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/eUynvlBI4OuUX1kGjVQZhKaUnMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.140.0-185.95.142.255
Signature Algorithm: sha256WithRSAEncryption
0c:cf:e2:22:49:93:07:02:53:78:b4:6f:cf:10:2d:d2:5b:7d:
d6:42:d3:24:2d:eb:00:4e:5e:42:ab:5d:a4:74:ae:57:fc:55:
14:44:71:f1:2c:04:14:99:53:12:49:59:01:33:f5:db:d4:03:
90:1e:03:dc:bf:bc:6b:3b:80:81:f5:94:81:da:78:0b:7f:8a:
1e:1c:bd:62:96:4d:c6:14:2a:8b:3c:36:10:97:27:1d:6f:83:
07:22:7b:de:84:54:fd:d9:82:31:8b:ab:02:e8:5e:90:e1:cc:
c6:cd:41:6a:f6:e0:b1:96:17:1c:84:d2:b8:32:d7:16:d3:55:
c3:8e:94:a6:46:db:12:31:c9:b5:fa:0d:bf:e4:91:76:97:f9:
73:0d:ab:11:be:8f:7b:68:16:0f:aa:5b:bf:26:e8:4c:df:85:
dc:31:fb:e2:44:78:f4:a7:5b:21:af:36:8a:96:7f:93:53:f4:
e2:fe:ad:d4:31:d9:e4:ce:6b:36:cd:e9:a9:a5:f2:b4:3a:9c:
3b:af:45:04:0f:7d:2e:07:39:17:bd:af:e5:a8:c5:55:ad:3f:
d3:cc:b2:39:41:65:86:2f:eb:f3:d8:32:71:3d:b1:97:1f:99:
e6:cc:e5:06:14:d9:bd:c1:60:8a:1f:c0:82:58:6e:aa:1e:17:
73:b4:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:49:34 2025 by rpki-client