Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7apJOyp0LATwvU2j5dIsjEWpC7g.roa
File: 7apJOyp0LATwvU2j5dIsjEWpC7g.roa (raw, json)
Hash identifier: PD+79uf5qzQQkUCfuXokELiusnktAp9x8YalY9Zh2Qo=
Subject key identifier: ED:AA:49:3B:2A:74:2C:04:F0:BD:4D:A3:E5:D2:2C:8C:45:A9:0B:B8
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B23A12C2520D89188813140A4CA9F4
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7apJOyp0LATwvU2j5dIsjEWpC7g.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196943
IP address blocks: 109.205.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:12:c2:52:0d:89:18:88:13:14:0a:4c:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edaa493b2a742c04f0bd4da3e5d22c8c45a90bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:0b:42:9c:d3:b0:66:11:6e:c8:8c:b2:b5:
42:10:10:54:3d:d5:e1:95:95:bd:8a:aa:e6:3b:3f:
8d:8e:9d:e4:3b:1e:6f:1e:4a:50:9f:bc:3a:89:a4:
05:10:f9:c8:f4:43:42:f4:ec:ea:7e:70:cc:3c:92:
97:71:1e:c0:7f:8c:8a:8b:0e:19:3e:63:bf:b3:17:
fe:da:b5:81:cf:61:1e:f6:e2:c4:bc:6d:05:a7:37:
49:ae:67:f3:75:09:f3:89:bf:e0:7c:dd:c9:f4:26:
a1:37:c4:c5:89:b1:7e:67:60:13:32:14:4a:5c:63:
60:3e:ca:ba:fc:bb:ce:95:b4:c6:58:01:d5:8c:51:
a2:27:fb:90:6e:78:a4:97:ac:6a:06:90:cf:a1:a7:
da:cc:23:af:15:03:36:95:a7:2c:3e:d5:8d:65:49:
4c:c1:a8:87:5d:d7:1a:f1:27:67:99:d9:9b:c4:7d:
51:23:d5:7c:2b:8a:e0:51:61:e0:40:c4:74:d3:28:
15:f3:7d:33:3e:08:9a:da:c6:3d:ad:4f:90:01:23:
6c:14:fc:a6:c2:c4:f5:c3:ac:d4:bf:1d:d0:60:c8:
f0:96:4a:43:41:fe:bc:10:7f:36:cd:1e:59:db:24:
16:e0:9a:07:5a:f4:0d:54:98:20:21:f6:19:6d:ce:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AA:49:3B:2A:74:2C:04:F0:BD:4D:A3:E5:D2:2C:8C:45:A9:0B:B8
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7apJOyp0LATwvU2j5dIsjEWpC7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:75:9b:30:f4:e1:75:ca:55:07:9e:b8:d3:6f:c5:0a:36:f0:
66:8b:6b:87:ee:95:6a:61:2a:ba:51:e1:78:83:96:52:64:67:
f5:9a:ba:e5:e4:a7:3b:c9:ee:45:05:9c:c0:78:06:83:32:04:
b4:5c:08:72:c1:11:7f:f5:9a:fa:af:f4:4d:1a:b8:db:67:52:
12:20:70:6a:a8:9c:56:37:0f:c8:35:4f:9c:14:21:bb:fc:18:
1a:58:5e:9c:6b:73:3b:2e:2f:d6:58:ab:38:e0:be:a8:d6:48:
ff:3d:12:e9:86:b1:ce:c6:4c:c1:11:45:b8:c0:7e:89:e6:e2:
fc:d4:6b:a4:57:b5:d9:fa:e0:2c:54:6c:68:48:24:ae:cf:dc:
3f:82:b5:e9:77:59:a9:b6:a0:f2:3e:d4:54:53:7f:a2:2e:60:
4a:ec:4e:12:d4:c5:aa:ff:35:f9:4b:d7:a1:e1:d1:c8:56:88:
d1:fd:f1:94:68:68:13:cf:04:9c:44:95:e3:12:d9:d7:40:2a:
6f:b6:73:7c:15:99:78:b6:4b:d5:51:5b:b5:02:72:cc:cf:59:
9e:1d:5b:19:ac:43:20:ac:96:bd:a7:e7:7c:35:c7:a5:47:b8:
da:99:c9:79:63:2d:26:6a:f0:68:f3:73:1c:4f:52:6a:b9:e8:
b4:96:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:29 2025 by rpki-client