Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa
File: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (raw, json)
Hash identifier: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=
Subject key identifier: 78:8C:34:7A:1D:D8:10:FF:9B:60:D7:90:A1:C3:AB:41:E3:53:F4:7A
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA5FEE44A14121FB251B99025BA27
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202709
IP address blocks: 193.42.210.0/24 maxlen: 24
194.50.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:fe:e4:4a:14:12:1f:b2:51:b9:90:25:ba:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=788c347a1dd810ff9b60d790a1c3ab41e353f47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:5c:af:92:cc:61:44:ad:ba:be:0c:de:b4:
cb:c9:70:3f:1b:09:b2:70:ef:f5:99:ab:18:96:c5:
8b:27:ce:08:03:82:7e:65:32:4e:db:2e:49:7e:0e:
e4:d4:f1:e7:88:0e:04:ce:04:95:7f:78:2e:c4:b1:
72:47:e1:c9:5b:4b:a3:80:ab:7f:d1:76:fe:25:eb:
4d:5b:6c:74:67:0e:cf:81:b9:7e:d2:18:96:69:a8:
72:63:83:15:71:f1:5b:fa:5f:24:a6:81:fc:03:bb:
5f:1d:da:28:27:0c:5b:b3:73:8a:14:33:26:46:05:
76:a9:a6:10:09:b0:73:a7:23:5b:43:71:7e:a9:0b:
de:ea:38:6e:79:dc:df:28:84:cc:a9:e0:a9:77:ac:
76:8b:b3:e7:2e:7e:11:7f:4f:5f:bb:9c:f8:6b:aa:
7e:84:8a:27:46:25:e9:cf:62:f7:45:9f:2c:5b:17:
28:0e:25:4d:78:2e:cc:b2:17:53:4e:fa:b1:b8:46:
59:fb:2c:07:7a:03:f1:22:c9:8f:31:c7:63:1a:b6:
49:69:3a:af:8e:09:bb:b4:ed:8a:3b:bb:62:f8:72:
b8:1c:a6:3c:fd:bd:8e:e4:ff:ab:3c:1b:79:d5:76:
6e:3c:d2:46:0b:3b:01:16:3f:14:95:cb:90:f0:03:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:34:7A:1D:D8:10:FF:9B:60:D7:90:A1:C3:AB:41:E3:53:F4:7A
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.210.0/24
194.50.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bf:af:e8:07:3c:0f:30:f4:a5:19:79:34:a8:0d:fc:ac:69:
f0:ed:27:f4:c9:b5:31:48:d0:18:58:48:d9:20:19:34:35:51:
4e:25:5a:4a:0d:db:a1:38:84:b2:b4:63:f4:51:19:6e:11:bc:
f2:65:77:e1:a0:a6:37:65:7d:61:49:95:80:e5:0a:6c:50:53:
19:55:ae:56:8a:06:7c:cf:6d:b1:09:f6:e2:47:3f:3e:33:fb:
99:c6:51:cd:6e:99:98:0f:74:46:f4:b4:f8:f7:98:04:8e:87:
77:96:a1:3a:9a:be:69:9c:c7:cf:71:03:9b:63:89:f9:52:a5:
4f:31:ec:9b:9a:08:f7:79:56:2e:e0:f5:b4:89:53:61:f2:26:
a2:54:5d:6e:c2:e7:2f:11:93:39:b1:85:59:1b:ea:94:a0:10:
73:37:d8:06:d1:18:b3:a5:0d:38:83:44:c7:95:f8:d2:1f:20:
41:80:f6:be:11:50:4f:66:c5:56:1b:f2:a3:82:e7:e5:ac:50:
d8:98:f3:3c:37:30:c8:eb:9c:a3:9e:fb:d6:48:82:6c:c6:2f:
fd:30:49:94:40:92:f5:f0:69:b6:a2:c5:43:b8:56:f1:33:6d:
54:53:0b:6d:9d:56:ed:f1:4b:af:ff:8a:e2:56:b1:77:4b:37:
de:86:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:12 2025 by rpki-client