Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7MXqFmSDn9CysMo06FTHgJQ2_0c.roa
File: 7MXqFmSDn9CysMo06FTHgJQ2_0c.roa (raw, json)
Hash identifier: pRJZ+O4KaYUVDmpuGbM8GWj2rTmrhgZ1My3xSIZT8Yk=
Subject key identifier: EC:C5:EA:16:64:83:9F:D0:B2:B0:CA:34:E8:54:C7:80:94:36:FF:47
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E273CDFF40280434992050060E5A5
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7MXqFmSDn9CysMo06FTHgJQ2_0c.roa
Signing time: Wed 01 Jan 2025 15:48:48 +0000
ROA not before: Wed 01 Jan 2025 15:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 77.74.230.0/24 maxlen: 24
109.105.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:3c:df:f4:02:80:43:49:92:05:00:60:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc5ea1664839fd0b2b0ca34e854c7809436ff47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:0b:59:37:a9:b0:91:ba:49:bf:cd:fc:24:
17:4e:31:b5:9e:fe:d0:0f:54:4d:55:d5:36:88:25:
0b:78:9d:58:08:24:4f:43:f6:2b:93:86:61:dd:af:
ff:a7:de:a9:c8:2b:ca:6c:05:24:df:9d:bc:db:6d:
8a:5d:86:74:79:97:92:e0:93:24:b3:02:d2:a4:81:
d0:65:2a:8b:92:cc:06:4d:ed:be:5c:01:03:4a:0b:
12:0f:32:9d:f0:80:c6:aa:d4:e5:f9:32:92:c1:da:
40:de:01:b0:d8:b5:22:96:98:74:7b:50:6e:0e:7e:
86:ca:f0:74:fc:10:ed:33:7c:be:1a:fd:16:53:25:
d1:82:d3:9a:22:a2:0a:46:f8:a4:0a:ea:c0:d2:bc:
02:b4:28:d9:ad:db:e9:ad:5a:96:e7:da:31:19:4a:
fe:16:77:0e:0a:73:ac:a6:f4:ad:c2:cb:04:8c:af:
c0:32:9a:8d:f3:2f:c4:09:cf:0b:fc:19:ac:b8:2e:
57:69:68:ff:b5:6c:88:da:4c:d3:46:3f:d4:c0:6a:
91:04:c4:89:cc:91:64:64:a8:7a:95:cb:b8:91:ca:
c7:49:4f:6f:92:27:4b:46:42:70:4f:89:43:4e:9b:
cf:be:60:9e:23:af:3f:11:22:31:ac:a5:39:99:b1:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:EA:16:64:83:9F:D0:B2:B0:CA:34:E8:54:C7:80:94:36:FF:47
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7MXqFmSDn9CysMo06FTHgJQ2_0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.230.0/24
109.105.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0b:d2:4a:cd:ac:25:59:d0:30:84:77:33:a6:1a:80:94:92:
fc:06:91:b3:be:3f:af:3d:4e:45:54:2f:b6:53:4b:bb:1c:8c:
2d:7e:8c:12:b2:62:d3:e9:32:1c:11:3b:c9:82:e8:8a:ba:6c:
20:17:4b:a9:b9:a7:7f:20:02:eb:e4:6d:35:da:0d:13:51:f3:
8a:33:df:8c:f8:02:13:f7:96:15:0b:16:cd:9d:08:ef:ae:1c:
07:19:96:fd:59:a9:1f:12:01:6c:51:1e:4a:0a:58:66:b8:26:
f2:7c:f2:f4:f3:09:70:63:a1:50:e7:7e:26:75:89:d3:db:83:
9f:74:e0:bd:ee:02:8b:29:17:31:44:d0:f2:58:e9:76:06:5f:
d4:7d:8f:a9:86:1b:84:4a:c7:91:0b:4d:61:d3:1e:44:63:a4:
56:61:d3:43:fe:a1:be:cc:aa:00:08:62:9c:92:c8:a0:d4:d2:
c5:b7:af:9b:4e:00:32:68:1b:12:ab:36:17:06:76:21:11:41:
7c:03:ec:dd:e3:8e:a2:91:47:bd:c2:2d:62:50:9f:f6:47:d1:
02:c9:e5:1d:8e:15:fd:37:65:4e:82:dc:50:26:75:e4:33:8e:
97:7b:8f:e9:45:fe:dd:0e:2c:1f:66:c6:b6:b4:f5:08:a0:30:
ca:b5:e6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:07:58 2025 by rpki-client