Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa
File: K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa (raw, json)
Hash identifier: +rmjiYwXrF8JZPtQv5BcnXcfYd5CjncGCQcj1Z55VOk=
Subject key identifier: 2B:8C:26:82:72:A7:5B:C8:B7:B4:CE:07:78:29:EB:B6:9B:BF:51:5D
Certificate issuer: /CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Certificate serial: 0194221FA73E125618CF3E9214BF0CEED3AC
Authority key identifier: 79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197651
IP address blocks: 31.177.16.0/22 maxlen: 22
31.177.18.0/24 maxlen: 24
31.177.19.0/24 maxlen: 24
185.217.104.0/22 maxlen: 22
185.217.105.0/24 maxlen: 24
185.217.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a7:3e:12:56:18:cf:3e:92:14:bf:0c:ee:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793d9664e29c0beb92c5673db603ab843e0c4caf
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8c268272a75bc8b7b4ce077829ebb69bbf515d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:55:6f:47:89:0d:51:53:bf:b5:c0:75:29:
c6:9d:35:44:de:38:34:ed:c7:32:75:23:40:77:b5:
84:27:ae:b3:48:62:8f:10:5c:24:d9:7a:a8:b4:bb:
c9:7e:4c:a4:9d:0d:a6:43:cc:46:ae:6b:4e:38:36:
d2:8f:d1:19:35:da:ee:2b:9d:ef:d1:f8:3e:02:58:
86:95:2f:ac:ca:05:fa:bb:a0:ad:ff:6e:b0:e3:94:
21:42:15:f0:18:1f:02:37:7b:01:95:fa:ec:7c:40:
f9:76:37:39:d0:b1:1e:ec:0d:39:f9:c6:89:90:1b:
97:83:5a:02:42:5d:26:87:1f:8d:78:7b:8b:f5:33:
3f:55:fe:be:12:9b:f3:8a:81:6d:1e:ef:aa:70:be:
12:28:b4:aa:7b:b4:32:d1:82:94:58:65:0a:87:c4:
e6:ec:aa:d2:50:8b:82:71:0d:a7:43:4e:10:2e:14:
47:f4:4a:f9:ee:cf:7e:90:5c:5b:00:e0:b7:1e:6d:
94:2d:cb:1f:16:0d:39:16:16:5a:c7:a7:1f:fc:74:
0d:6c:16:8a:f8:38:b1:8f:25:64:06:83:51:9a:64:
dd:de:16:24:5e:51:4e:35:0e:3c:62:ae:f7:32:b6:
fa:37:3f:6e:46:b2:27:05:db:ea:8d:a9:06:90:fc:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8C:26:82:72:A7:5B:C8:B7:B4:CE:07:78:29:EB:B6:9B:BF:51:5D
X509v3 Authority Key Identifier:
keyid:79:3D:96:64:E2:9C:0B:EB:92:C5:67:3D:B6:03:AB:84:3E:0C:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eT2WZOKcC-uSxWc9tgOrhD4MTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/K4wmgnKnW8i3tM4HeCnrtpu_UV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6ee065-7f2e-42e6-9b92-686399000d3b/1/eT2WZOKcC-uSxWc9tgOrhD4MTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.16.0/22
185.217.104.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:f7:d3:75:16:5a:40:df:a2:23:37:68:14:d2:e0:41:87:62:
de:e6:8e:be:b6:e8:db:f5:c3:d9:be:99:6e:17:55:ae:7e:2e:
94:3c:06:92:e0:48:88:da:4e:85:d9:49:f2:2d:66:83:d5:a2:
52:4e:00:f4:73:12:69:2d:35:5e:91:bc:7d:05:91:ee:0e:ea:
87:22:2c:70:b3:0a:0e:59:db:00:15:61:ed:31:f0:55:51:ae:
9b:ae:40:98:d2:c1:37:1f:f8:bf:c7:06:1b:c8:82:30:69:15:
11:8a:40:78:01:b5:3a:4f:32:f2:d1:49:0b:72:48:98:c4:35:
35:85:e2:3e:59:06:18:ac:68:4c:9e:7b:46:66:d6:76:e6:ee:
5f:6f:cc:56:af:d7:d2:39:96:40:50:ba:1d:68:15:10:e5:68:
fe:fb:30:62:24:25:24:54:28:58:d9:cd:ee:bf:0b:de:b5:d7:
8f:8f:34:44:d5:91:c6:24:c0:e9:b6:90:44:37:0f:6d:66:e0:
dc:f6:5f:92:6c:c7:51:1f:03:5b:bd:9f:62:6d:24:4c:a2:12:
b7:dd:90:f6:c9:40:fd:58:cf:74:2d:1d:0f:ee:b0:9d:eb:ae:
ad:82:ed:93:ef:04:9c:9c:e2:a3:fb:e4:81:ba:50:ae:15:43:
c6:f7:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 18:02:49 2025 by rpki-client