Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/eHfcFIuh7a0rJe6KKja_O8myTZY.roa
File: eHfcFIuh7a0rJe6KKja_O8myTZY.roa (raw, json)
Hash identifier: GXSPQsoUru8NRUfB62M8YLlBncATWqQP9KOtIR+XCk8=
Subject key identifier: 78:77:DC:14:8B:A1:ED:AD:2B:25:EE:8A:2A:36:BF:3B:C9:B2:4D:96
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 0194258E812C78BD88BC6DC91C8BE73687DF
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/eHfcFIuh7a0rJe6KKja_O8myTZY.roa
Signing time: Thu 02 Jan 2025 05:48:03 +0000
ROA not before: Thu 02 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214941
IP address blocks: 185.163.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:81:2c:78:bd:88:bc:6d:c9:1c:8b:e7:36:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Jan 2 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7877dc148ba1edad2b25ee8a2a36bf3bc9b24d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:9b:92:05:08:6d:88:1e:3e:4b:2f:aa:59:
e9:ed:c8:ec:66:87:29:b2:1d:e6:04:dd:c7:54:50:
73:d1:20:ea:19:7b:bc:a7:c7:06:15:b6:6e:a3:7e:
37:50:d6:d0:56:f9:5c:8a:49:a2:fb:7b:f6:f2:9b:
41:5f:53:49:10:d3:f8:0a:d1:71:7f:e7:9f:0d:4f:
14:c1:76:c1:aa:9e:92:0f:36:41:b7:ec:91:2b:7e:
dc:22:dc:52:97:b3:dc:7d:f1:e3:d6:af:03:6c:bc:
46:85:a4:c2:e2:56:e6:97:bb:f9:82:8d:0c:6a:58:
e4:b6:a1:b2:d6:5a:fa:d9:76:82:13:59:d4:43:34:
89:6b:cc:2d:77:6e:b4:0e:9e:0a:ec:49:cf:f4:69:
77:c1:bf:76:3b:2f:1d:51:38:b5:f9:dd:3e:81:52:
d8:bd:f5:e3:c5:ab:f7:76:fb:23:9c:5b:13:30:cb:
45:74:a1:94:8d:63:87:7a:4d:db:ed:d0:7d:4e:f2:
53:9d:c2:00:1f:77:19:e7:03:95:a5:66:b8:80:4f:
dc:1f:a0:b0:28:9f:5a:ba:51:56:b6:4e:49:24:96:
97:e5:71:43:29:73:19:8a:3f:95:36:a2:c1:7d:c6:
00:59:4c:9d:cf:80:e7:e8:58:b1:aa:32:6d:18:35:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:DC:14:8B:A1:ED:AD:2B:25:EE:8A:2A:36:BF:3B:C9:B2:4D:96
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/eHfcFIuh7a0rJe6KKja_O8myTZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.130.0/24
Signature Algorithm: sha256WithRSAEncryption
49:be:5e:4d:a8:c5:6c:09:86:d9:f5:75:b9:43:60:80:91:cd:
08:90:e3:bc:a8:ae:22:65:7a:44:94:9e:83:03:ce:e7:75:93:
37:cd:28:c7:03:be:1b:03:5e:52:f2:65:cf:d3:92:3f:a0:5f:
19:3f:bc:cf:39:a9:d9:e8:0a:0d:69:98:fb:48:8d:85:9c:5e:
cf:f0:9f:55:17:2c:c7:31:73:ec:1f:59:a4:a2:d3:a8:6c:3d:
18:d8:11:e9:47:34:84:2e:83:66:f1:8f:b2:be:bf:73:9f:7d:
30:cf:24:7f:73:d7:cb:0f:d4:7d:07:8c:14:33:b6:d1:26:96:
56:8d:af:35:9b:72:62:aa:82:85:0e:69:5f:8a:7b:24:76:2d:
2e:17:5a:ac:57:af:96:87:39:7f:98:82:b2:33:88:14:ef:a0:
b7:98:61:51:cd:7e:ea:8f:a6:46:1f:84:01:13:85:57:76:b0:
86:00:69:2f:32:fe:9c:bd:7a:74:c3:4e:31:6d:ad:17:f2:99:
a7:c4:72:96:3a:5c:0b:8b:81:df:5f:7e:17:c8:68:f2:aa:33:
4f:67:24:43:31:70:d5:c6:0b:28:84:83:6c:5e:05:43:73:cc:
a4:83:e8:d0:69:bd:7f:bd:22:54:d6:b3:5c:38:45:f1:9c:c3:
d7:98:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:34 2025 by rpki-client