Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EE991f9GC1OyucmPam_hDU8NlDI.roa
File: EE991f9GC1OyucmPam_hDU8NlDI.roa (raw, json)
Hash identifier: ZVpYMu55NG2Pjz/Fh0fKR7xWrGYESGdPMW5KSu8KFcw=
Subject key identifier: 10:4F:7D:D5:FF:46:0B:53:B2:B9:C9:8F:6A:6F:E1:0D:4F:0D:94:32
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8360B9BD0E96A143B06639DDD148
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EE991f9GC1OyucmPam_hDU8NlDI.roa
Signing time: Thu 02 Jan 2025 09:50:33 +0000
ROA not before: Thu 02 Jan 2025 09:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196894
IP address blocks: 178.185.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:83:60:b9:bd:0e:96:a1:43:b0:66:39:dd:d1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=104f7dd5ff460b53b2b9c98f6a6fe10d4f0d9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:c9:cc:6a:54:1a:b8:54:bd:e3:d7:48:59:
76:99:de:98:e5:9c:f8:b3:d5:34:56:43:ab:d0:0f:
c4:76:ac:d0:c4:f4:6e:d7:82:7b:18:13:ce:6a:df:
17:4a:00:a2:6f:2f:ac:99:1f:d1:1f:23:ab:c5:b5:
fa:f1:bf:f1:a2:21:f4:7b:b5:47:40:a7:8a:58:9e:
4f:b4:9a:2d:69:0b:b5:96:68:c0:a4:e0:b3:10:e3:
94:29:ea:db:3e:6a:cb:bf:67:ab:db:03:25:83:c0:
80:ac:e5:f5:a8:b6:4a:69:bb:0d:4d:13:53:f6:aa:
d5:8e:50:1b:ad:99:47:4e:f4:0f:ac:b9:07:9b:c8:
42:97:a2:f5:cb:f4:d2:bd:91:a1:47:fb:e7:7d:c3:
9d:04:a1:f9:68:9b:c7:a2:15:12:30:2f:ca:eb:64:
83:6c:10:14:29:4c:c2:95:14:22:b8:27:ec:93:39:
b5:09:ef:e9:a3:30:75:73:2c:4f:a7:05:9f:69:d1:
bc:61:00:aa:8d:b6:b4:d6:99:8a:5f:66:b4:c3:23:
cd:14:3f:3c:c8:fd:2e:66:03:50:d8:b8:8b:14:55:
ea:1c:f6:11:41:7e:62:35:88:5a:d7:63:13:5a:26:
85:76:69:af:ec:da:05:d5:7b:09:be:4b:11:fa:67:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:7D:D5:FF:46:0B:53:B2:B9:C9:8F:6A:6F:E1:0D:4F:0D:94:32
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EE991f9GC1OyucmPam_hDU8NlDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.185.243.0/24
Signature Algorithm: sha256WithRSAEncryption
10:de:29:b4:ee:ac:56:3a:a5:c1:88:4a:22:14:23:92:3d:1c:
13:d1:95:94:eb:5d:0f:b3:c0:ad:3d:39:cb:54:8d:ec:6c:3f:
2c:89:db:4d:da:16:28:94:d1:21:92:1d:3f:58:37:e7:5c:89:
fa:ad:02:53:9a:f2:b4:d1:94:03:69:10:c3:64:a5:7c:95:49:
d9:d4:a9:9a:c6:1b:11:48:b1:8f:2a:fc:e4:f0:ae:91:99:8a:
c9:51:21:e9:b0:db:e1:cd:05:92:29:17:da:3b:87:ad:e1:82:
fc:b5:0c:0e:3a:89:98:1a:bf:3c:a9:eb:e9:85:0f:29:48:67:
b0:b7:42:50:01:14:58:ba:ea:b7:28:15:ed:89:48:e6:51:75:
b9:84:f7:d2:77:47:fc:6e:36:7a:07:e3:1e:60:68:23:d2:e0:
db:98:24:57:22:9f:13:c2:fa:6f:cc:4a:cd:e4:9f:a4:5b:fe:
19:8d:13:08:bd:98:b1:04:be:4b:a4:fd:a9:12:e6:a9:7d:a7:
2e:81:99:34:e9:92:14:a0:74:80:11:87:19:cf:10:d8:9b:e5:
15:2c:8f:fb:ae:e5:aa:80:a3:0f:60:23:9e:9a:16:aa:09:64:
79:b4:3e:b8:a0:a3:bd:70:b7:d4:14:7c:a1:c9:67:39:c3:1b:
c8:02:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:25 2025 by rpki-client