Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/dnyAO2e2MHHQ1XFb2CgMjxPEqcc.roa
File: dnyAO2e2MHHQ1XFb2CgMjxPEqcc.roa (raw, json)
Hash identifier: c0VoSxfboUw4trXfnDtHSy3KMTHFMkoTCFwVZzWFcm0=
Subject key identifier: 76:7C:80:3B:67:B6:30:71:D0:D5:71:5B:D8:28:0C:8F:13:C4:A9:C7
Certificate issuer: /CN=eee573084100b41d7cc1e447295ba71d019d5192
Certificate serial: 01941FFA0EA3C29C9FDB0B441B45ECF763B0
Authority key identifier: EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/dnyAO2e2MHHQ1XFb2CgMjxPEqcc.roa
Signing time: Wed 01 Jan 2025 03:47:48 +0000
ROA not before: Wed 01 Jan 2025 03:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 185.114.108.0/24 maxlen: 24
185.114.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:a3:c2:9c:9f:db:0b:44:1b:45:ec:f7:63:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee573084100b41d7cc1e447295ba71d019d5192
Validity
Not Before: Jan 1 03:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=767c803b67b63071d0d5715bd8280c8f13c4a9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:e4:f6:00:9d:bf:d5:89:de:df:a5:81:45:
42:44:5e:34:9a:cf:18:98:f0:ab:4f:74:33:59:f1:
b2:58:27:19:8d:51:ae:6e:dc:0c:eb:d8:d6:2b:5f:
10:86:da:aa:c5:d6:9e:10:b3:61:cd:e6:98:1f:29:
2d:41:14:c2:db:24:37:d4:5e:08:49:33:17:76:3d:
d5:8b:ae:a2:c1:05:d9:44:76:e7:cc:57:d6:aa:4c:
d5:2e:58:f2:11:f6:e9:8e:92:97:7b:b0:5f:c9:38:
1c:d7:c8:93:89:f8:1c:4c:96:31:c6:5e:4a:45:08:
39:06:db:de:72:96:9c:d7:e1:80:eb:e2:94:5c:ae:
0c:68:94:c5:06:9c:00:cb:86:ca:52:f8:51:2a:1a:
85:b7:53:28:5b:5e:c5:4b:6a:54:16:e7:c0:c4:8c:
48:13:0b:cb:2a:4e:e1:20:b1:9a:10:2d:88:6e:4b:
2b:eb:f5:17:2e:7c:7c:8b:78:b7:cd:67:92:b4:cc:
cc:27:7a:ad:8a:4f:d2:2a:6f:e9:d1:0e:6e:af:d6:
32:f7:2c:34:fa:bd:c7:52:d4:ee:cc:97:be:59:6b:
b2:6e:d2:8e:7c:48:58:75:8f:08:50:23:4e:e4:53:
1d:2e:37:12:bf:b3:9b:94:bb:e2:91:8d:aa:73:46:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:80:3B:67:B6:30:71:D0:D5:71:5B:D8:28:0C:8F:13:C4:A9:C7
X509v3 Authority Key Identifier:
keyid:EE:E5:73:08:41:00:B4:1D:7C:C1:E4:47:29:5B:A7:1D:01:9D:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uVzCEEAtB18weRHKVunHQGdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/dnyAO2e2MHHQ1XFb2CgMjxPEqcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11a864-d1cb-4000-b2bc-19ee3d8b577e/1/7uVzCEEAtB18weRHKVunHQGdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.108.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:72:60:17:75:43:44:79:08:93:b4:b9:0f:b5:20:87:6b:c0:
d8:8c:b7:93:91:df:9d:0f:d0:b0:54:54:6e:07:04:c3:7f:f9:
24:00:9e:6d:2d:be:a8:cf:82:cb:50:80:03:05:35:a8:88:0d:
03:4b:fb:40:79:68:7f:c2:2e:20:3e:19:fa:0e:08:d7:4c:0a:
f8:25:35:44:16:4e:d5:00:b4:5b:41:32:18:d4:c7:55:ac:88:
14:78:68:9a:4f:cc:92:b6:59:49:92:29:2a:d3:dc:a5:b9:75:
16:b3:74:f5:25:2a:63:42:ec:f7:d7:6b:fa:6d:84:0c:01:0c:
51:37:6d:31:27:45:ee:da:84:16:dd:0e:5d:d5:a9:18:6b:c7:
26:44:ea:37:f4:70:0f:8c:61:72:13:86:f8:ef:d9:70:13:7e:
11:b0:c7:6a:59:f0:4f:ff:d6:01:96:cc:16:94:e0:ba:0b:06:
b6:d4:32:57:48:9c:70:87:45:29:42:2a:5c:9f:63:7f:a1:0b:
83:7c:fd:31:72:0e:12:af:de:3d:d4:cc:ea:f2:49:4c:30:da:
a5:92:e7:7b:d9:06:89:a9:8b:eb:9c:8b:8a:67:af:27:75:37:
39:b9:49:da:ca:78:1f:e3:e4:a7:e3:83:22:5a:3f:7c:29:a9:
33:56:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:35:27 2025 by rpki-client