Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/po48a2MWEhlAE5KjGT2n1-nt4aI.roa
File: po48a2MWEhlAE5KjGT2n1-nt4aI.roa (raw, json)
Hash identifier: RciP0DTkihCaXUKuuKGuqV/HOeqRVfjuiRLGyDnupMg=
Subject key identifier: A6:8E:3C:6B:63:16:12:19:40:13:92:A3:19:3D:A7:D7:E9:ED:E1:A2
Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial: 0194252205CBAF8D19F1488F8F32FE6585E9
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/po48a2MWEhlAE5KjGT2n1-nt4aI.roa
Signing time: Thu 02 Jan 2025 03:49:34 +0000
ROA not before: Thu 02 Jan 2025 03:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213822
IP address blocks: 185.36.229.0/24 maxlen: 24
2a07:cd40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:05:cb:af:8d:19:f1:48:8f:8f:32:fe:65:85:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a68e3c6b63161219401392a3193da7d7e9ede1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:a0:18:72:66:b7:be:d2:15:ab:65:03:d9:
2e:0c:fd:32:d4:57:52:5c:55:65:16:0c:55:a2:22:
b9:e0:3c:ab:0f:33:6c:11:2d:94:6c:ba:84:9f:26:
a8:02:f3:82:db:4b:6e:8b:1b:07:f4:94:12:55:17:
62:f5:91:52:6a:a7:ee:eb:47:ad:de:27:ca:2f:33:
27:d0:aa:1a:c9:bb:bf:44:d2:c3:39:30:2c:fa:79:
29:8d:18:b1:ad:a8:07:b3:f7:4e:38:c0:59:c0:c3:
ca:43:11:16:ee:be:76:a4:57:ab:2d:93:9e:a4:4b:
b4:1a:91:ea:a7:cd:fa:ed:4a:3a:c1:38:d7:a7:0b:
98:f3:90:d2:28:07:44:e9:0f:e1:f3:9a:9f:0b:9e:
6f:68:b0:4a:b6:b9:c2:e4:b7:4c:bd:33:69:ef:86:
38:8e:36:8c:1d:af:f7:76:8f:a5:5f:f9:a6:cd:ce:
8b:c1:ba:26:65:95:7e:86:67:6b:13:b0:83:bc:8c:
db:6e:83:65:8a:41:ef:95:2e:3d:73:d8:2f:94:0e:
a1:b9:68:ec:58:12:86:2e:6d:ea:d8:22:56:0f:ae:
2d:ae:95:ab:cc:be:4a:7c:c6:df:b4:eb:3c:4a:4e:
66:8a:82:30:75:ea:a9:3c:44:33:53:83:ea:cc:17:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8E:3C:6B:63:16:12:19:40:13:92:A3:19:3D:A7:D7:E9:ED:E1:A2
X509v3 Authority Key Identifier:
keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/po48a2MWEhlAE5KjGT2n1-nt4aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.229.0/24
IPv6:
2a07:cd40::/32
Signature Algorithm: sha256WithRSAEncryption
8a:e6:31:68:28:f6:bd:c6:cf:9b:fa:46:fd:62:4f:41:8e:6d:
ab:e8:e0:cb:18:b8:f8:01:2d:df:ca:df:ca:39:39:35:30:42:
90:18:98:23:50:3e:f0:36:27:e0:73:d7:5b:10:93:93:11:5b:
9c:2d:af:0c:2a:08:e6:78:45:1b:71:ff:f8:89:c1:69:a6:27:
63:e6:bd:eb:eb:bb:28:dd:26:2d:78:9a:c5:a0:7d:54:94:d0:
14:af:7d:dd:ff:f3:dc:21:58:3f:a9:cf:3b:d4:da:1a:35:04:
e0:bd:b6:1e:84:5b:6f:33:96:e5:3f:6b:0d:4f:71:86:61:c1:
e1:dd:bb:2f:46:b4:e9:b9:d8:fe:96:02:7e:d8:2c:83:a2:02:
09:fb:be:76:23:85:44:45:6e:92:55:36:45:0b:79:63:43:af:
6d:b2:51:45:b5:a3:3f:bb:4f:fb:a3:bc:e2:56:6b:5e:14:79:
3b:44:57:3f:d7:1d:03:74:e3:c8:be:14:cd:6c:2a:b2:27:d8:
ff:60:f8:2c:b1:15:f5:42:54:cc:d4:3c:e7:a5:d2:f7:78:70:
87:87:c2:d6:49:f3:92:ec:04:ce:6b:1d:88:e7:b2:86:f3:f4:
91:50:3a:e2:8d:6e:eb:fd:6c:8e:1f:6e:fe:53:4c:d8:21:45:
61:d8:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:57:54 2025 by rpki-client