Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/H9wALBVXz4YwYBX3cpmTiB3IeME.roa
File: H9wALBVXz4YwYBX3cpmTiB3IeME.roa (raw, json)
Hash identifier: gBTMmmcoRwZuz+Iunak49khAmqfa7PJZOswCtQszyKI=
Subject key identifier: 1F:DC:00:2C:15:57:CF:86:30:60:15:F7:72:99:93:88:1D:C8:78:C1
Certificate issuer: /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial: 01942444AEF3985F3C968985197712824942
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/H9wALBVXz4YwYBX3cpmTiB3IeME.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 31.25.12.0/24 maxlen: 24
31.25.13.0/24 maxlen: 24
31.25.14.0/24 maxlen: 24
185.197.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ae:f3:98:5f:3c:96:89:85:19:77:12:82:49:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fdc002c1557cf86306015f7729993881dc878c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:0a:3b:ea:23:5c:86:bf:2d:b8:40:b7:f7:
fa:3f:b1:d4:2a:b4:6c:27:f4:a3:f8:26:9c:62:ed:
f2:3f:9e:15:ce:48:b3:e1:1e:90:19:87:3f:9a:67:
5e:10:15:db:b2:94:76:92:c0:78:58:18:12:81:79:
fd:42:c0:4f:69:47:1f:d2:3a:70:97:8a:2f:74:03:
d2:e6:c0:60:05:92:38:4d:37:4b:17:30:01:88:ea:
05:58:e8:2b:35:63:8d:57:92:18:33:88:97:3b:7b:
21:2b:90:f4:e4:3b:d1:ea:e1:a0:54:e8:aa:e8:75:
bd:db:53:f3:e9:f9:26:dc:8b:fa:40:f9:15:d6:61:
a3:f4:a6:0a:25:0e:d2:30:0f:c7:77:fc:cd:e8:ae:
a9:5f:d0:e4:b7:97:b1:81:7d:bd:d2:c0:98:3d:f7:
54:66:10:30:30:87:e1:35:17:b4:28:db:45:e7:c4:
01:ee:90:ef:cd:40:c4:ea:df:61:1c:9a:fa:af:80:
21:d9:f9:e1:27:0b:7f:80:59:59:be:75:3d:10:2b:
fb:84:32:a3:7b:bb:8b:b2:8c:12:c3:7c:c4:da:ed:
36:87:d4:1d:3c:d5:d5:74:20:34:8f:41:c1:58:08:
bc:e8:43:be:df:ea:fc:91:54:f0:78:a8:a4:e4:fe:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DC:00:2C:15:57:CF:86:30:60:15:F7:72:99:93:88:1D:C8:78:C1
X509v3 Authority Key Identifier:
keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/H9wALBVXz4YwYBX3cpmTiB3IeME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.12.0-31.25.14.255
185.197.148.0/24
Signature Algorithm: sha256WithRSAEncryption
95:19:ed:cc:be:8d:e7:bf:75:e1:70:b8:0f:27:5c:29:13:4b:
65:d4:95:e2:b4:e3:1b:c3:3f:78:f1:ae:86:5b:2e:94:3e:21:
ed:52:3d:5a:c5:e6:75:5c:03:31:c0:1a:c9:1e:36:07:79:65:
6e:e0:84:87:c5:2e:21:9f:32:50:ae:b3:63:99:6b:bb:c5:79:
a7:6c:47:ec:4e:f6:64:73:2b:61:f4:08:7f:dd:b5:6a:31:8e:
a8:7e:2d:c7:e0:00:59:31:80:cd:68:a9:b1:97:a8:e1:12:39:
a5:a1:2f:bd:ff:fc:77:61:d0:7a:3e:f0:23:1c:30:7d:d2:2a:
29:98:52:23:c1:43:b4:c6:7c:28:ed:a1:a0:75:92:c2:0f:3b:
50:f6:50:07:24:f6:db:2e:47:25:f5:4e:16:6f:22:87:03:5f:
19:1e:cf:c5:06:ba:b4:d1:4b:f5:5c:26:27:de:de:3a:6d:47:
70:74:d4:3c:17:27:74:cc:c2:00:ad:70:34:c0:19:c9:eb:4d:
37:b5:ed:01:66:f2:c1:f7:1f:e6:f2:6e:38:1f:59:e6:20:b1:
ab:c6:b1:4b:04:fc:2c:1a:b1:37:b5:d8:4c:e7:d8:d5:f2:0d:
c8:88:e2:df:c9:32:ca:92:60:6f:6a:6b:7a:90:61:0b:41:7c:
2b:fe:99:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:07:37 2025 by rpki-client