Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa
File: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (raw, json)
Hash identifier: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=
Subject key identifier: 13:D1:36:36:15:0A:24:FF:F7:4D:73:C2:80:33:35:85:C1:65:DF:E0
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 019420D61EDB8F148A49A9B58701912934D1
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60145
IP address blocks: 185.55.184.0/22 maxlen: 22
185.55.184.0/24 maxlen: 24
185.55.185.0/24 maxlen: 24
185.55.186.0/24 maxlen: 24
185.55.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1e:db:8f:14:8a:49:a9:b5:87:01:91:29:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13d13636150a24fff74d73c280333585c165dfe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:2c:d2:fd:00:2f:5a:8d:bb:d9:e2:47:4e:
e9:80:67:6a:bc:cf:fb:10:73:54:21:7d:66:0d:3a:
e1:13:7c:af:7f:4c:55:df:05:ef:91:38:8d:d6:11:
1f:c8:5a:11:7c:70:00:5a:b9:7c:3c:0f:5d:bc:6d:
cd:9c:f4:50:06:5f:b4:2d:1a:e0:66:75:38:26:e1:
3d:b2:1c:2e:8f:66:09:57:35:14:b9:14:7b:b5:e7:
ef:f7:c2:fa:9f:44:58:87:2d:fb:c7:a0:0c:42:1a:
4d:22:31:cc:52:90:87:8a:ce:2b:aa:12:34:96:22:
da:53:3b:d0:0f:32:1b:05:6a:df:92:06:14:1a:41:
ab:c5:cf:9d:b7:07:76:84:57:b1:d7:32:52:98:28:
77:9b:b6:1a:86:09:37:19:3d:69:49:a1:f0:e9:f7:
13:9f:e8:e6:b7:f6:ce:47:1c:7f:21:78:c6:f8:3e:
00:38:8e:9f:e9:5c:79:b5:c6:2d:53:05:7d:13:66:
e5:b3:e0:c7:8a:8b:a3:47:7a:b6:54:f4:7b:a2:20:
c4:91:aa:73:bb:c2:d4:61:ab:52:11:cb:6e:f9:c3:
66:a1:7c:fe:b8:00:02:34:12:64:f5:4f:f1:0b:70:
db:15:87:16:b4:8f:64:8f:41:b9:da:34:00:70:39:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D1:36:36:15:0A:24:FF:F7:4D:73:C2:80:33:35:85:C1:65:DF:E0
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.184.0/22
Signature Algorithm: sha256WithRSAEncryption
96:98:6a:82:91:e1:3d:db:b2:ad:9e:3b:85:48:71:59:18:a6:
48:c7:03:97:e7:2e:57:a6:c1:54:55:98:d9:e8:24:1c:c5:64:
4e:49:3c:0d:c0:66:07:23:69:d1:09:0b:87:43:d3:d3:81:36:
60:0f:ee:9b:45:5c:0a:e5:20:26:8b:95:cb:ec:2c:99:f7:d7:
d5:02:9f:67:c3:fa:ca:74:51:90:b4:5d:0c:f6:74:ef:73:11:
31:e6:47:00:0b:f8:00:18:30:7a:2f:34:3e:da:85:76:8e:d1:
9d:0e:76:13:20:ad:98:ee:cd:9a:c9:f5:3b:16:3d:b1:fd:61:
5c:b3:29:f5:47:90:98:87:fb:d2:0d:94:39:8a:3c:c1:33:82:
f1:5a:0a:1d:d0:e3:f9:3b:a0:45:2f:52:86:bb:80:fb:4d:16:
46:e0:b6:b4:75:cd:37:c6:4c:fb:eb:7b:03:28:52:de:fd:e8:
f5:b2:00:dc:72:64:8b:b4:0a:17:af:da:7b:d6:3f:4b:95:e7:
6c:f2:69:d6:eb:3e:f0:10:d7:4c:4d:ce:73:0f:f2:46:4e:ff:
cf:f1:7e:69:da:52:d2:0d:e2:d3:28:c5:40:6c:9b:3c:af:31:
b3:fc:dd:96:6d:ca:ce:91:b9:e1:2e:ad:c4:c2:e3:c2:b2:a5:
17:9c:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:38:16 2025 by rpki-client