Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/eDdWpFT8mYYDchLMDIlwWEtOor8.roa
File: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (raw, json)
Hash identifier: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=
Subject key identifier: 78:37:56:A4:54:FC:99:86:03:72:12:CC:0C:89:70:58:4B:4E:A2:BF
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 01942067E7BC67FB91D18546628CA05EBFB6
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/eDdWpFT8mYYDchLMDIlwWEtOor8.roa
Signing time: Wed 01 Jan 2025 05:47:47 +0000
ROA not before: Wed 01 Jan 2025 05:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210997
IP address blocks: 185.6.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e7:bc:67:fb:91:d1:85:46:62:8c:a0:5e:bf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=783756a454fc9986037212cc0c8970584b4ea2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:85:7c:1c:7b:71:64:fd:b4:c1:00:8a:2a:
23:e9:b1:b7:a6:af:ab:ff:8b:d3:70:9a:a9:16:b3:
19:8c:ba:c6:a3:8b:8a:f7:29:58:8f:b1:7e:31:26:
ac:ff:ca:ee:21:61:f1:ca:fa:fb:82:85:39:1e:3a:
7f:8a:97:0b:85:4d:82:66:10:a3:ea:13:68:48:b2:
6a:96:04:8a:d5:f8:b7:19:33:29:7d:44:c0:fd:8e:
58:70:65:37:09:95:0a:97:08:0f:4b:6f:6b:61:bb:
6d:ab:68:b1:bd:39:b1:77:eb:72:2e:30:b0:1f:49:
3c:58:a1:dd:2e:ff:5e:e2:ae:0f:fd:5d:6f:d7:e1:
d5:f5:aa:c8:7d:7e:26:bd:63:e7:d2:6e:37:75:50:
f6:40:39:b6:86:54:83:00:a4:a0:14:3f:ae:2a:24:
bd:a1:f3:b0:91:ed:54:e1:37:fa:8f:1e:25:fc:15:
53:44:81:59:a5:de:f2:68:e4:f9:bd:30:0c:8f:f9:
07:87:4e:88:9f:57:ab:ea:62:4c:3e:da:89:54:fa:
a2:c8:e7:da:96:3d:e2:b9:78:1e:64:48:77:f5:3f:
f4:58:31:5b:d8:03:40:8f:8c:8a:98:b9:be:da:6d:
2c:54:5a:98:e6:f7:30:5e:22:ba:ed:5c:98:56:3c:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:56:A4:54:FC:99:86:03:72:12:CC:0C:89:70:58:4B:4E:A2:BF
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/eDdWpFT8mYYDchLMDIlwWEtOor8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.31.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b5:f6:db:73:2e:dc:7e:72:17:78:cd:fe:b8:83:a1:4a:4f:
90:ca:38:d1:c3:57:44:4c:68:96:f9:7a:65:ae:c7:0b:dc:f4:
4e:8f:7a:11:d9:8f:8b:b9:e6:d4:77:06:01:0f:be:c5:f7:dd:
6f:fd:d2:7d:66:fc:d4:dc:30:dc:06:f4:51:b8:87:a5:68:0c:
66:42:28:08:e6:0c:46:27:93:89:27:61:f8:3d:bf:69:9d:91:
f4:66:b1:26:a2:60:2d:b4:e1:2d:ec:cb:c9:76:56:38:5d:9d:
08:93:61:cb:28:72:2f:3c:90:3c:eb:c6:a0:97:18:5b:ea:0e:
5b:a8:c9:f0:9b:ff:69:9a:70:ff:a1:f5:65:68:a1:28:85:25:
50:11:2f:e7:2f:8b:2d:99:ea:7f:22:ae:52:9a:dc:8e:86:78:
fb:cc:0e:7a:b3:03:9e:31:86:0d:47:df:d5:41:1c:c0:98:41:
b3:0b:0b:86:b8:25:fb:d5:38:39:a2:7d:f2:60:32:27:a2:c6:
2b:e8:55:db:33:86:03:d1:bb:dc:75:78:99:01:ca:94:fd:d5:
44:eb:e9:a1:68:db:8d:e9:e5:b1:94:94:51:47:b4:8e:07:2a:
02:d7:a1:9b:5d:6d:13:ca:04:f9:c1:6c:89:1a:ce:c4:94:ac:
9d:43:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:01:17 2025 by rpki-client