Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/e-hPBYjTfG-K7BrGmoOwHzMBMr0.roa
File: e-hPBYjTfG-K7BrGmoOwHzMBMr0.roa (raw, json)
Hash identifier: qVeTApVYVcNiXmiZEYJZ1hgm7PdoilpV7fst82fx8DE=
Subject key identifier: 7B:E8:4F:05:88:D3:7C:6F:8A:EC:1A:C6:9A:83:B0:1F:33:01:32:BD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01963A658CA38469F5F65C615725BF5661A9
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/e-hPBYjTfG-K7BrGmoOwHzMBMr0.roa
Signing time: Tue 15 Apr 2025 17:00:55 +0000
ROA not before: Tue 15 Apr 2025 17:00:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45054
IP address blocks: 31.184.228.0/23 maxlen: 24
37.9.51.0/24 maxlen: 24
45.159.200.0/22 maxlen: 22
46.161.16.0/22 maxlen: 22
46.161.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:65:8c:a3:84:69:f5:f6:5c:61:57:25:bf:56:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 15 17:00:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7be84f0588d37c6f8aec1ac69a83b01f330132bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:02:7d:16:75:c5:50:49:a9:da:80:bb:08:63:
74:84:8e:24:7c:9b:5c:20:30:e9:72:02:24:4f:a9:
de:2d:42:03:27:00:b3:3c:c0:8d:d2:ce:dc:48:1d:
92:5e:5c:fd:80:4b:de:1e:bf:96:b3:9e:16:9a:9d:
6e:b9:30:02:bc:15:98:55:e8:9b:76:95:4a:e3:e9:
fc:68:7c:9b:71:e1:f8:02:8c:e3:2d:a0:b7:86:47:
5e:3f:c5:86:ca:7c:53:29:3e:ae:c6:87:56:f6:27:
04:95:e7:d2:e4:c0:94:c1:b1:bb:68:2f:80:ef:3b:
0b:47:05:c1:6c:73:33:1b:c4:e8:67:ab:b9:9e:27:
54:ab:55:24:76:30:10:11:a5:c4:f3:e5:93:0d:11:
85:df:7b:8a:8e:05:84:77:d2:a4:e0:1f:0a:68:86:
09:95:67:93:ff:0a:b7:21:03:8a:8f:1c:5c:52:f4:
48:f1:66:63:6e:9d:25:e0:9e:8e:b8:46:7b:b2:eb:
61:21:2c:8a:a5:12:27:86:40:4b:be:94:ee:da:15:
f2:3b:58:2e:88:3e:2f:fe:25:57:9f:86:ce:f5:00:
79:5e:0e:9b:9a:e0:41:80:39:3c:8b:4b:8a:10:1e:
d4:cb:1b:3b:d9:49:09:ea:72:71:1c:78:63:54:2d:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:4F:05:88:D3:7C:6F:8A:EC:1A:C6:9A:83:B0:1F:33:01:32:BD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/e-hPBYjTfG-K7BrGmoOwHzMBMr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.228.0/23
37.9.51.0/24
45.159.200.0/22
46.161.16.0/22
46.161.42.0/23
Signature Algorithm: sha256WithRSAEncryption
38:61:ee:a4:d4:d2:c5:bc:f0:b2:7f:d4:36:0d:ca:57:18:8c:
4e:a7:e4:3f:c7:54:1e:7d:11:8a:fd:12:2e:16:e6:86:f3:ba:
bf:74:15:d4:28:18:a8:f6:9c:78:0e:83:85:86:f5:de:c2:d9:
a9:65:31:ed:ef:3e:77:f8:4a:f0:a4:dc:2f:2c:75:1f:54:74:
f7:fb:40:5f:0b:e6:3c:76:9f:98:2b:f7:a1:07:0b:30:48:18:
1b:94:26:21:b5:87:6c:41:96:75:61:de:82:ed:57:73:a9:ac:
7d:5a:02:99:01:1f:7f:b7:dc:9a:12:b0:da:55:c9:88:90:f5:
57:94:3d:6b:68:00:a3:44:5c:5d:3f:55:36:1c:64:48:03:8b:
88:6e:48:fb:cd:d6:6d:08:90:09:db:6c:ac:48:47:df:9a:af:
6f:7b:3c:a5:8e:0e:c3:c7:6c:78:6f:87:eb:a8:4d:f4:28:85:
69:fc:eb:de:f1:5e:81:86:35:37:2d:43:b2:f2:0e:38:d5:fd:
72:f9:78:ac:2e:65:5e:fe:5d:8b:7b:18:65:14:37:4a:e2:4a:
02:41:7a:cc:91:54:30:97:4b:1e:d6:2d:7b:44:86:6b:bf:4b:
1d:ff:ab:60:92:3f:cc:f2:5a:49:fe:b8:bd:7c:b9:8c:87:b8:
53:6b:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:54:28 2025 by rpki-client