Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa
File: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (raw, json)
Hash identifier: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=
Subject key identifier: 10:83:91:81:BE:BE:20:78:17:5B:1B:53:E8:AB:83:94:D0:B1:94:04
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 0194252177AB4F612EEEF519F343679EE3A7
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209342
IP address blocks: 185.54.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:77:ab:4f:61:2e:ee:f5:19:f3:43:67:9e:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10839181bebe2078175b1b53e8ab8394d0b19404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:21:7b:19:21:b5:9f:e6:3e:74:8c:db:9a:
74:b4:29:8b:e7:cc:9f:ee:0f:e5:44:64:a7:43:1e:
8a:e5:12:db:42:73:67:30:45:fa:8b:b5:80:67:43:
88:61:8f:ec:39:26:b3:ee:5f:16:c7:29:26:2a:87:
b8:9b:d6:79:06:28:a5:ed:5b:35:07:c7:af:da:e8:
5f:9c:95:3c:61:f8:b3:e0:cd:49:67:a7:99:a7:3c:
dc:d8:60:f0:b0:a4:97:e7:26:04:dc:38:b0:22:46:
9b:a6:20:ad:da:c4:37:14:0e:74:1c:dc:1a:4c:fe:
7c:8f:ee:e8:eb:3d:31:1a:3b:03:c9:39:01:55:76:
dd:94:e2:c3:56:cc:59:50:1e:47:63:7f:2d:d2:59:
84:18:81:06:05:3f:84:55:75:5d:8d:53:da:3c:f6:
82:f8:3a:07:73:33:00:88:34:73:a1:4c:a3:79:ef:
1a:85:5f:64:41:37:cb:ae:21:a2:83:89:f1:a9:60:
f4:98:d1:ce:76:f5:1f:4c:1f:c8:d1:49:cf:dd:71:
6e:fa:da:3c:5f:56:9c:1d:79:52:24:67:d6:c1:11:
09:eb:38:2a:53:97:ad:28:45:65:76:bb:4a:6c:7e:
1a:cc:29:29:a6:a6:76:0b:fb:c5:87:48:b9:22:cb:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:91:81:BE:BE:20:78:17:5B:1B:53:E8:AB:83:94:D0:B1:94:04
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:21:64:22:5e:87:b8:49:d9:b8:1d:98:d0:3a:6d:68:a0:a7:
9f:2d:bc:10:1e:e2:c2:35:0b:9f:19:a4:6f:9b:4f:0f:4e:b5:
9e:bb:5e:e7:ee:64:cc:e2:59:23:68:05:df:96:48:31:d0:40:
99:5d:11:c9:52:a5:c1:23:b1:b3:3e:43:e7:98:2e:5a:7b:ff:
4e:99:5f:65:9f:7e:e4:75:a8:f5:e9:0a:89:5e:b0:65:03:d1:
24:82:09:98:95:bc:46:76:75:e1:1c:57:7c:9d:8f:91:7b:cd:
21:df:04:3f:51:e6:d1:dc:23:f1:02:d8:66:a6:ce:eb:d9:26:
2c:40:d9:ba:88:1e:47:ff:40:45:4b:b2:93:0a:c4:ac:ae:01:
de:61:f8:8c:c1:37:23:0d:59:b6:7e:b2:13:9e:62:a1:41:88:
72:92:e3:1f:3b:9f:b3:f2:fd:7d:45:57:6d:19:95:c3:72:f7:
61:b6:c8:86:fb:00:7c:94:e7:e5:67:c5:60:41:78:16:93:bb:
a6:cc:5b:bc:34:75:2e:05:d9:d1:3a:c4:fc:c3:c7:54:11:c5:
7f:a4:f8:a6:18:97:53:12:88:f4:b1:ed:43:0e:24:c1:0c:3b:
b0:d6:ee:5d:03:ba:ee:f9:5d:ce:bd:ea:34:67:4c:3b:ff:00:
f8:16:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:44:26 2025 by rpki-client