Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa
File: E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa (raw, json)
Hash identifier: +q1K5JLt0dsMSZaPj7YZ2RC5IuCiyKA1uPousYIHDvA=
Subject key identifier: 13:EA:E6:A8:53:D0:E9:AB:07:0C:DA:94:66:25:5E:E2:19:8B:69:34
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 019424B36DD837DABAF36BCA65C87659A02E
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 31.223.185.0/24 maxlen: 24
45.113.239.0/24 maxlen: 24
79.132.194.0/24 maxlen: 24
93.115.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6d:d8:37:da:ba:f3:6b:ca:65:c8:76:59:a0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13eae6a853d0e9ab070cda9466255ee2198b6934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:a5:b7:8c:f8:65:cb:29:a7:ac:f4:1e:86:
63:70:9e:2d:c8:e0:0e:d4:4a:20:98:4d:53:c6:b7:
67:c3:a2:8b:6f:db:15:d1:3d:e5:32:ae:f2:ba:f8:
33:2a:78:ec:df:8f:17:89:ab:ae:6b:76:19:69:a5:
dd:4f:83:2a:30:fb:e1:d6:50:db:fd:3f:1b:07:e6:
fa:f9:79:96:81:5d:15:5b:0e:f3:c2:1d:6f:7e:b6:
62:e2:be:9d:ff:f6:75:6d:dd:bb:84:a1:89:fc:84:
eb:04:fd:8c:46:e2:dd:07:e5:5e:4a:8f:6f:d3:c3:
a9:af:eb:aa:d5:fd:9c:e4:2d:a8:6c:8b:49:ac:15:
87:ef:0c:1f:e1:ac:8f:41:0f:37:d5:5c:fe:b0:87:
28:9e:8e:04:e5:f0:c3:38:38:5d:20:fa:fe:0c:c8:
09:61:8b:18:49:b8:a8:10:63:4e:cc:f1:bb:d2:c4:
53:dd:7c:9d:84:9d:aa:e6:74:32:7b:f7:c2:5d:88:
ec:c1:53:d0:29:53:df:12:c7:d7:85:f0:3c:12:dc:
67:72:b6:be:de:0c:dd:5a:51:9b:4a:84:26:3d:36:
52:5c:da:ff:8f:3a:77:02:87:0e:1d:e0:17:d6:86:
f4:33:e2:5b:93:e0:a3:17:03:8f:55:dc:4c:05:8f:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:E6:A8:53:D0:E9:AB:07:0C:DA:94:66:25:5E:E2:19:8B:69:34
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/E-rmqFPQ6asHDNqUZiVe4hmLaTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.185.0/24
45.113.239.0/24
79.132.194.0/24
93.115.252.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7d:95:90:cb:21:55:fc:96:9e:d2:a8:5c:ea:13:08:8d:0b:
ad:cb:0a:9c:5f:d1:e8:9f:b9:bf:dd:f0:ff:0f:33:20:6f:b7:
0d:1d:90:a7:65:ba:e7:d7:ad:95:30:c7:6c:ba:88:60:31:71:
4f:89:12:b1:16:6f:8a:2e:cd:f6:f3:22:26:99:e8:b3:87:09:
d2:c9:83:5c:46:dd:ee:6d:a4:d3:a1:5f:db:c6:b4:a3:cb:05:
e5:ec:ae:89:9a:d9:e6:26:2e:bb:6e:42:7e:1d:bb:37:04:02:
f4:6e:1e:61:2d:6c:10:a5:3a:a3:48:63:6b:67:22:db:c5:49:
fe:2e:d3:da:be:59:c5:fb:1b:35:10:e2:da:1b:a9:58:6f:38:
8c:af:9b:c5:28:f2:21:e1:d4:e3:ae:07:cc:d0:5e:04:03:1e:
aa:d5:d9:8c:c2:48:0e:7e:61:57:8f:40:81:8f:af:27:3d:a3:
8e:f1:21:a6:d0:69:97:27:ec:8f:f7:7f:43:47:d6:76:33:f0:
d7:41:a6:2f:69:f9:e4:a0:cc:aa:6a:e4:4a:f5:e9:b8:16:85:
b7:a2:bf:7b:b1:36:88:cb:99:13:5b:6d:76:77:49:17:c8:3a:
77:39:7f:6d:e9:76:bb:95:39:ff:da:b1:63:14:f0:10:f2:b5:
56:06:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:37 2025 by rpki-client