Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/eMQhZAA1BBjlcx0eTkggms08VQo.roa
File: eMQhZAA1BBjlcx0eTkggms08VQo.roa (raw, json)
Hash identifier: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=
Subject key identifier: 78:C4:21:64:00:35:04:18:E5:73:1D:1E:4E:48:20:9A:CD:3C:55:0A
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 0194244571ED51DD24F7B44BD5BAF5FF7550
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/eMQhZAA1BBjlcx0eTkggms08VQo.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200939
IP address blocks: 185.42.142.0/23 maxlen: 23
185.42.142.0/24 maxlen: 24
185.42.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:71:ed:51:dd:24:f7:b4:4b:d5:ba:f5:ff:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78c4216400350418e5731d1e4e48209acd3c550a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:fd:da:12:2c:df:47:5d:c7:cd:56:59:ae:
de:1f:ec:e1:67:dc:8e:11:c5:47:a2:d2:34:08:9f:
dd:d7:d2:25:8e:0a:3d:8c:2e:dd:dd:5d:2c:6c:55:
54:bd:6b:79:70:a1:89:7d:91:01:9b:80:4d:86:27:
ce:db:75:b8:73:d4:ff:09:44:ad:a8:c5:ce:b8:5a:
ed:4b:83:1f:62:14:e1:a2:2e:3f:72:09:4a:fb:2d:
e0:ac:81:a1:65:33:d6:8b:2f:40:bc:ae:b6:c1:20:
5c:2c:30:47:4c:7e:12:c4:64:a7:07:93:e1:b5:a7:
72:b1:e9:7c:84:0f:f1:c8:ce:1f:27:8c:12:9f:b0:
ff:ce:86:ac:46:d1:33:71:ec:9e:03:cb:c6:7d:bb:
43:e9:70:92:60:c2:c3:63:ed:26:03:eb:c0:ec:6e:
91:af:2d:24:4c:87:72:ab:b9:92:0c:1a:07:fd:40:
35:cf:dd:5b:52:5e:2a:35:9a:ed:c0:22:5f:71:3a:
1b:f0:3a:02:c1:9d:c3:d1:a2:dd:fc:9d:14:63:76:
4f:09:43:15:68:b9:6d:e3:21:51:57:50:6d:cb:b5:
b0:02:be:59:9b:49:41:ab:af:08:cd:01:fb:97:f2:
1f:7e:84:b4:f0:0e:af:3e:e9:aa:e9:c4:85:05:9f:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:21:64:00:35:04:18:E5:73:1D:1E:4E:48:20:9A:CD:3C:55:0A
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/eMQhZAA1BBjlcx0eTkggms08VQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:fb:e0:dd:e0:4f:26:35:9f:62:a0:dd:42:9b:7d:95:df:91:
3e:15:fa:78:d7:fc:dc:8b:b5:03:a0:bd:5c:9d:96:76:5d:71:
e4:0a:ba:dc:34:04:46:a9:41:bd:cc:54:72:92:cd:31:72:f1:
bf:c6:e6:2b:53:08:d4:da:bf:71:dd:7e:4d:da:e2:8c:8d:1e:
13:c6:04:ef:43:64:3f:78:42:ea:08:9b:7b:f4:20:ac:92:85:
77:c8:60:96:37:be:da:f0:a1:ab:c6:ce:9b:fe:f7:bb:01:f9:
64:24:89:ce:f2:65:53:f2:d7:f7:93:92:5c:ab:5d:0d:0b:69:
ea:8b:0a:28:75:9c:d4:a1:22:8f:4e:0d:40:b7:e1:06:4a:19:
b4:df:66:7d:5f:cf:f3:b3:94:07:22:aa:18:82:08:34:d4:d9:
6e:1d:10:19:8e:ee:77:e1:16:aa:bc:18:38:2d:1a:2e:f0:8f:
ee:75:b4:ac:81:a0:93:39:82:b1:09:50:7c:40:b7:3d:da:fd:
9c:6f:20:58:db:36:9b:65:97:14:d8:08:9b:19:93:97:dd:73:
d4:f2:62:48:4a:2c:a9:77:10:47:c8:03:fb:e2:10:0f:da:5a:
bc:99:3e:e3:12:fb:38:6f:9d:6f:fa:46:d0:c1:4a:a6:94:85:
20:98:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:35:08 2025 by rpki-client