Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/7ocFAoRHk3yJWF4ccbCKPsPczz0.roa
File: 7ocFAoRHk3yJWF4ccbCKPsPczz0.roa (raw, json)
Hash identifier: 3rzZftACx3aNRwkNijs0bb/ATBefsoIo/62WXVgzLj8=
Subject key identifier: EE:87:05:02:84:47:93:7C:89:58:5E:1C:71:B0:8A:3E:C3:DC:CF:3D
Certificate issuer: /CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Certificate serial: 019426D98CCD897B801E0BEE4465EC68C91E
Authority key identifier: 02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/7ocFAoRHk3yJWF4ccbCKPsPczz0.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149522
IP address blocks: 192.94.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8c:cd:89:7b:80:1e:0b:ee:44:65:ec:68:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0268b930beeca51fbf3543fe79f9b19345cf13d5
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee8705028447937c89585e1c71b08a3ec3dccf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:03:39:d2:82:19:4a:7c:7c:5f:3b:c9:0e:
07:74:80:ec:67:40:20:d5:e1:16:6b:20:0e:e1:15:
8e:d7:c1:aa:97:4c:fe:00:ef:aa:6e:e2:d1:9c:3a:
2b:91:ac:35:9b:ca:17:d7:5a:72:9b:72:4e:a6:bd:
d5:de:a3:ca:b5:69:51:d2:51:be:c6:96:b5:1a:78:
2b:bb:30:a5:5e:ea:f8:75:24:e5:e9:9e:a9:84:b3:
0d:fe:f3:29:55:e2:dc:34:66:22:80:9e:93:be:a1:
d2:cf:7c:b9:6c:fd:71:28:fa:24:4c:10:5d:de:07:
96:85:b8:59:92:2b:61:fe:6f:11:bb:79:6f:b2:d3:
52:41:bf:58:68:1a:cc:86:e1:bc:6a:1c:ba:ce:14:
e6:ec:2d:2b:eb:14:30:4a:87:d6:51:b2:83:29:db:
5f:67:be:96:2c:f2:61:c1:c3:13:8b:45:60:52:d4:
8f:27:6c:f0:f0:1c:06:8f:23:df:d2:6d:6b:d1:bd:
7c:9c:8a:0c:40:46:82:e4:2f:a6:d3:e6:2f:be:34:
3e:c9:89:f9:3f:96:dc:44:63:79:37:17:9c:0f:bd:
a4:45:dc:28:11:bd:2f:08:f4:d7:7f:6d:52:4f:f8:
d2:38:6b:bf:6f:c2:b2:87:64:3f:72:b8:84:33:00:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:05:02:84:47:93:7C:89:58:5E:1C:71:B0:8A:3E:C3:DC:CF:3D
X509v3 Authority Key Identifier:
keyid:02:68:B9:30:BE:EC:A5:1F:BF:35:43:FE:79:F9:B1:93:45:CF:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ami5ML7spR-_NUP-efmxk0XPE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/7ocFAoRHk3yJWF4ccbCKPsPczz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/43cd98-6f8a-44cf-95bd-420f9c8eafa4/1/Ami5ML7spR-_NUP-efmxk0XPE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
77:56:16:38:45:79:a5:f7:f6:3c:35:c8:dc:13:62:36:9b:e9:
51:aa:f9:81:ce:eb:d6:5a:c0:65:90:14:55:47:56:3d:22:c9:
5d:10:73:95:96:74:5e:ad:de:ab:f2:c7:0d:cc:12:b5:98:21:
38:dd:11:35:3d:15:0b:c2:e0:ec:eb:5b:73:38:1c:9d:7c:d2:
a2:0e:6e:b5:f4:8e:ae:e2:29:4a:86:e7:d9:68:bb:e0:76:7b:
b0:2c:f8:e7:87:8c:97:62:45:b0:cb:da:9b:e9:cb:3f:43:9f:
0f:ef:28:a7:26:4a:ba:67:45:12:00:2b:83:f2:04:79:8d:b2:
4d:a7:93:61:ed:39:a2:66:db:df:71:29:7f:9e:de:a0:ed:60:
ae:56:e4:2a:fc:83:ff:ce:2d:c2:6a:f8:bd:c9:52:6b:bb:e7:
6a:cf:21:5d:2e:27:db:8b:3a:5f:b0:55:46:89:8c:08:c3:0a:
da:db:60:bf:c0:1c:56:66:15:76:d6:ff:d6:ff:88:c8:56:07:
30:04:0f:24:04:dd:5a:dd:c0:1c:4b:60:c1:68:10:f2:18:29:
ab:5f:d5:ce:32:8f:85:1d:45:06:21:61:d0:16:65:be:c3:98:
54:b3:84:9e:a9:cd:37:1e:5a:7b:1d:d0:5d:77:31:ea:e1:b9:
4c:30:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:08:26 2025 by rpki-client