Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/EuVjqybteP4_2uP1qrjFTh6Ex84.roa
File: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (raw, json)
Hash identifier: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=
Subject key identifier: 12:E5:63:AB:26:ED:78:FE:3F:DA:E3:F5:AA:B8:C5:4E:1E:84:C7:CE
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01942444CBA50F0D19437D12D51F1322DBE9
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/EuVjqybteP4_2uP1qrjFTh6Ex84.roa
Signing time: Wed 01 Jan 2025 23:47:55 +0000
ROA not before: Wed 01 Jan 2025 23:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201160
IP address blocks: 185.163.32.0/24 maxlen: 24
185.163.33.0/24 maxlen: 24
185.163.34.0/24 maxlen: 24
185.163.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:cb:a5:0f:0d:19:43:7d:12:d5:1f:13:22:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Jan 1 23:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12e563ab26ed78fe3fdae3f5aab8c54e1e84c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:8a:f7:18:bd:c0:d4:39:26:5e:6a:a3:40:
50:eb:a3:57:68:c6:30:d4:de:20:d7:ac:75:42:57:
39:38:69:2b:4a:12:f5:74:7b:03:b2:ef:13:10:50:
6e:a1:ed:74:c8:6a:48:a1:ef:8b:2b:c9:bf:0a:ae:
d3:d2:46:93:94:4a:52:df:45:ad:f4:2c:e8:39:c2:
3a:32:6c:7c:0d:00:ec:26:4d:7b:a4:d7:0d:e4:4e:
ed:55:c4:9f:98:9d:97:4e:6e:91:51:a7:e5:c5:33:
6c:da:30:85:d9:3f:b0:fb:06:bf:c8:9a:eb:56:4d:
e4:75:15:dc:c9:67:f3:43:f2:5b:4e:fa:54:7d:5b:
66:3a:52:48:4a:29:f7:76:63:5f:4b:eb:16:df:aa:
8f:3d:fa:94:b8:55:4b:a1:a5:f9:1b:0d:86:93:f1:
94:dc:41:58:96:b9:44:f9:1d:8f:a8:df:85:49:fe:
c9:d9:dd:69:21:f9:d2:7c:dc:c5:31:01:b1:fa:b2:
22:5d:df:7c:58:46:2c:b3:74:bf:10:15:d5:49:4d:
1d:fa:4b:98:de:ef:6d:9b:97:0d:b3:e7:41:c6:84:
0d:b0:0e:2b:28:32:ed:26:93:19:49:9c:ef:7a:65:
01:36:92:81:df:33:2a:23:2f:86:d4:2c:56:35:a4:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:63:AB:26:ED:78:FE:3F:DA:E3:F5:AA:B8:C5:4E:1E:84:C7:CE
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/EuVjqybteP4_2uP1qrjFTh6Ex84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.32.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d8:c4:b5:5c:fd:5b:43:92:03:60:00:84:78:6d:fd:d0:cf:
61:47:f5:09:24:67:77:c2:4a:55:9f:00:a9:3d:13:60:74:3d:
a5:2a:66:56:25:c8:66:bf:fc:25:28:c2:30:08:f2:f4:36:ae:
d6:85:f8:10:65:e9:f0:cc:69:91:87:54:75:ce:71:91:bd:de:
1c:15:6a:09:a7:db:0d:32:1d:4b:97:d7:16:3d:cb:55:26:58:
96:49:7a:54:50:07:09:20:db:3b:47:d6:32:7c:b9:39:43:67:
a5:c0:0b:49:a7:9f:fb:e0:74:6c:b0:bc:83:f7:28:ec:a0:58:
67:f6:ca:b3:0d:27:ae:f9:9f:2f:31:9c:dd:5c:bf:de:23:e0:
60:f1:9f:b5:64:97:e2:56:7e:23:6d:be:1e:b4:af:85:f4:11:
f6:da:e9:4a:dd:16:3e:f8:25:32:a5:3e:bb:72:e9:6f:ed:7e:
87:fe:10:1f:7d:a3:60:bd:9c:ca:9b:a3:b6:fd:69:00:0a:dd:
39:33:08:81:a8:2f:74:71:05:5b:01:66:05:3f:b8:2b:16:75:
36:f3:ac:62:92:5c:63:d2:2f:d6:9d:94:79:e9:35:2b:49:4e:
21:0d:92:84:ff:5b:07:73:f5:99:b2:e9:b7:a8:f8:5a:36:4e:
f0:5a:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:22:18 2025 by rpki-client