Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/7loUqY3SMQ476AvW8cBj_oE5D0w.roa
File: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (raw, json)
Hash identifier: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=
Subject key identifier: EE:5A:14:A9:8D:D2:31:0E:3B:E8:0B:D6:F1:C0:63:FE:81:39:0F:4C
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019427B5202D53634EFAADB11F3D817B4AB6
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/7loUqY3SMQ476AvW8cBj_oE5D0w.roa
Signing time: Thu 02 Jan 2025 15:49:29 +0000
ROA not before: Thu 02 Jan 2025 15:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:20:2d:53:63:4e:fa:ad:b1:1f:3d:81:7b:4a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jan 2 15:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5a14a98dd2310e3be80bd6f1c063fe81390f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b5:39:9b:22:b2:8e:07:1c:42:fc:66:e0:5f:
f9:4a:b7:0a:10:fb:f8:9f:0b:7b:3f:dd:3c:4c:95:
84:e5:b1:41:b8:f8:18:17:ad:29:44:8c:3e:87:45:
22:2b:80:00:28:df:8b:6d:0b:fa:53:36:ed:f5:44:
38:09:88:21:a7:74:49:5c:09:1e:3a:0f:e1:33:96:
8c:d4:ad:80:1a:38:f3:59:44:0c:93:32:8a:a5:5b:
51:b4:a5:22:31:ec:69:75:db:9c:bf:e2:7a:02:a2:
76:6e:0e:95:4d:35:ad:45:91:16:0d:62:e3:f3:5b:
59:79:a1:2e:de:57:89:32:d8:8e:ca:c9:a8:a7:00:
b8:1e:23:6c:a0:1a:3d:fb:e9:dc:44:6f:2b:ef:79:
1c:d1:47:9e:2d:81:fe:e6:ae:17:18:61:d5:cb:90:
93:ca:e7:67:c4:35:2f:70:03:97:01:d0:b4:d9:2d:
5b:1d:2b:fb:fe:f6:ba:90:7f:87:5b:ab:e5:4a:53:
bc:cb:96:cc:9a:67:2c:e8:9c:f4:89:07:f6:ea:48:
9a:34:6e:b5:be:ca:ab:62:41:d4:c2:44:11:15:ad:
4e:6f:f1:49:ae:c2:c2:c2:90:7c:99:bb:69:03:e3:
70:e0:eb:6b:5d:d8:e7:48:41:5c:01:c6:2c:e4:f3:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5A:14:A9:8D:D2:31:0E:3B:E8:0B:D6:F1:C0:63:FE:81:39:0F:4C
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/7loUqY3SMQ476AvW8cBj_oE5D0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c6:49:81:a1:91:e1:49:0f:51:42:df:d4:fb:e3:d1:94:dc:
7b:12:c2:01:96:00:6d:53:8b:6c:cc:7f:63:9a:0b:dc:33:04:
9b:d6:1a:aa:4d:7c:5b:7e:3a:b1:72:4e:2c:79:bc:14:7b:5a:
9e:65:44:44:08:c9:25:e9:18:f6:57:8b:7a:90:27:08:94:77:
47:07:a4:f4:12:09:88:b3:7b:db:24:85:d0:34:ee:25:d1:34:
1a:0d:08:66:a5:f8:c8:cb:7a:a4:50:99:0d:84:85:9a:41:f7:
ae:e6:59:6b:1a:66:d7:95:a1:05:5b:70:7c:d0:57:5c:05:03:
63:29:eb:df:6c:44:24:51:2c:d5:9a:42:83:cd:46:a6:3f:a5:
e2:71:d7:5e:73:d7:69:bf:9e:e8:49:57:60:b6:f2:78:13:fb:
11:23:ce:01:38:bc:fe:7e:b3:ed:11:0e:13:a4:a9:91:de:76:
a2:4d:9c:26:99:5e:c9:87:06:fa:1c:a8:cb:43:22:89:9c:76:
2c:a0:27:79:eb:6e:0e:db:82:72:89:cc:7f:7d:04:89:d7:a1:
bf:d1:a1:60:89:55:a6:0d:38:cf:d3:2b:52:cc:b2:12:b0:88:
f8:06:aa:4d:a1:60:9e:fe:56:1e:ae:c3:70:2a:11:20:e5:6d:
4f:e9:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:11:20 2025 by rpki-client