Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Dt8KpzQHfsTjelSmFx4DiuHdjUQ.roa
File: Dt8KpzQHfsTjelSmFx4DiuHdjUQ.roa (raw, json)
Hash identifier: v693obMNpiyavTKSS+P020o8NrwGbMsVQee3TQsjjKE=
Subject key identifier: 0E:DF:0A:A7:34:07:7E:C4:E3:7A:54:A6:17:1E:03:8A:E1:DD:8D:44
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8E16879C4C4F8CCF795D62288AE0
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Dt8KpzQHfsTjelSmFx4DiuHdjUQ.roa
Signing time: Thu 02 Jan 2025 09:50:35 +0000
ROA not before: Thu 02 Jan 2025 09:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216379
IP address blocks: 178.185.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:8e:16:87:9c:4c:4f:8c:cf:79:5d:62:28:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0edf0aa734077ec4e37a54a6171e038ae1dd8d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:0d:17:00:62:cb:f3:d7:17:84:31:24:83:
a1:71:77:7a:c7:62:1d:54:90:f0:e4:47:7f:f0:6f:
8a:7f:eb:2e:d1:ed:b5:a0:15:4c:d4:36:d6:11:73:
71:a9:b2:9d:9c:54:35:1a:f5:85:c2:28:fd:6c:df:
17:4d:7f:c8:3b:1a:aa:3c:f6:76:8f:ee:8d:89:b4:
aa:d5:ae:e9:88:6a:fc:8b:60:d6:79:c6:6c:be:bc:
45:f0:54:67:c9:10:c7:93:6a:4e:07:0e:a8:fe:78:
12:3c:78:46:06:ca:fb:74:70:c6:62:4b:4f:6c:c0:
0d:26:87:24:71:8e:a9:a4:39:bd:4b:11:dc:6d:b5:
20:16:9d:97:06:92:d1:df:fc:bd:42:fb:15:2e:ba:
1b:fc:60:a6:5f:71:49:a5:d9:d6:55:6b:10:5b:61:
6b:7c:fd:39:f8:a6:26:0e:3a:8b:c1:3d:fb:90:eb:
7a:58:4c:5b:cd:4d:e7:c7:a8:fd:18:00:9e:ab:bc:
04:2f:41:48:85:ac:2d:08:df:ea:0f:be:44:0f:86:
e7:c3:80:d3:fe:27:17:74:4f:5b:cd:1a:f4:92:d9:
82:d0:91:53:aa:d4:1b:64:38:fb:fc:e3:f6:99:45:
b6:a6:a1:88:a4:c6:7e:18:1e:8f:ac:15:8c:64:f9:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DF:0A:A7:34:07:7E:C4:E3:7A:54:A6:17:1E:03:8A:E1:DD:8D:44
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Dt8KpzQHfsTjelSmFx4DiuHdjUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.185.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a7:35:46:04:a2:3e:80:a5:c0:4a:23:a0:1a:ed:ff:8c:a3:
1a:ad:cb:dc:e8:7c:d8:4b:07:1a:fa:94:d0:29:31:f4:12:5c:
7b:3a:9b:99:c2:77:9a:74:23:b6:9e:73:72:f5:a4:3a:12:82:
ac:ca:00:ef:4e:37:cf:84:ab:1d:8e:4d:81:b2:bc:01:40:bd:
9b:af:cf:50:ee:0f:4e:e0:a1:d2:07:4c:29:eb:e0:29:ed:55:
67:94:fd:58:ac:e2:6b:9b:9d:a1:58:9d:25:7d:72:b5:a2:df:
b4:81:e5:3a:89:71:a0:c4:2f:e1:4f:39:c3:26:01:bb:75:09:
59:00:8d:31:ff:64:c1:34:fa:83:5d:9e:a5:0c:e7:25:7e:ba:
7a:34:79:5d:01:2f:56:2a:ca:76:bc:90:e9:06:ae:fb:c1:e7:
3c:79:d4:6f:c0:cb:6f:85:ba:31:55:14:8b:ba:c7:65:05:3f:
6b:76:c0:98:32:02:5b:a6:0d:3d:40:ed:34:51:af:5a:7a:87:
1a:da:99:89:96:00:f8:b6:ea:0a:15:5b:ac:17:06:4e:e3:84:
85:40:8c:56:2a:26:ab:81:d8:31:60:3a:fc:5e:13:4a:d2:60:
2b:96:93:bb:ca:71:28:ab:18:3a:aa:68:d2:2a:53:07:50:81:
61:86:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:03 2025 by rpki-client