Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Ip_wWx88vU1s4af_j8CPmb1mw.roa
File: R7Ip_wWx88vU1s4af_j8CPmb1mw.roa (raw, json)
Hash identifier: qNWC5dY8ubQPYrhGTwzAC7Iy0RkUn4lopZr+GgMjYKA=
Subject key identifier: 47:B2:29:FF:05:B1:F3:CB:D4:D6:CE:1A:7F:F8:FC:08:F9:9B:D6:6C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195B8C0AE1BF987159CF1BD2575AEA10029
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Ip_wWx88vU1s4af_j8CPmb1mw.roa
Signing time: Fri 21 Mar 2025 12:49:50 +0000
ROA not before: Fri 21 Mar 2025 12:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b8:c0:ae:1b:f9:87:15:9c:f1:bd:25:75:ae:a1:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 21 12:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b229ff05b1f3cbd4d6ce1a7ff8fc08f99bd66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:7c:33:85:c9:34:b0:34:86:b4:8a:4e:b9:
7d:7a:cc:c5:27:a8:77:bb:9a:76:eb:49:ae:4c:dd:
c4:8d:ab:fb:bd:b3:54:99:a5:f3:c9:b1:22:74:6e:
41:98:f6:b7:27:fe:e8:d5:73:f3:3a:34:95:a7:88:
c1:1b:b7:dc:e7:0f:7f:32:7b:a6:56:77:7f:4e:2c:
b3:1b:34:38:09:2d:4b:d3:52:c6:69:05:51:d8:ab:
b7:08:cf:b2:8a:05:91:4f:4f:ce:8e:5c:56:d3:21:
c6:10:b7:f5:11:9d:d4:b9:8a:2e:8a:c4:03:1c:b7:
a0:59:47:db:e6:0d:c9:01:00:95:8b:62:64:a4:41:
3a:d1:80:82:51:a8:c5:38:e2:92:a6:3e:8e:bb:ab:
05:8e:7b:b1:4c:75:84:51:58:b2:32:60:51:8a:af:
0f:ec:9b:05:ef:81:39:ea:c8:75:8a:89:5e:e6:23:
2a:03:aa:70:41:26:fb:ad:73:16:80:cd:c9:7d:78:
42:09:73:05:41:60:e7:40:b0:13:cc:14:0b:5a:23:
7e:66:95:ba:65:1d:13:ba:62:61:37:8a:6f:fe:20:
d7:2a:71:b6:36:83:b7:f7:b2:95:98:32:9a:74:5c:
42:5a:cb:dd:2d:fd:bc:8f:85:1c:1d:43:f9:85:9b:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:29:FF:05:B1:F3:CB:D4:D6:CE:1A:7F:F8:FC:08:F9:9B:D6:6C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/R7Ip_wWx88vU1s4af_j8CPmb1mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
194.58.56.0/24
194.58.154.0/23
194.87.1.0/24
194.87.51.0/24
194.87.122.0/24
194.87.233.0/24
194.87.255.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:38:a7:aa:e9:f0:0b:f9:24:f2:23:a2:b0:b0:70:eb:47:80:
ca:4e:6e:dd:19:e8:98:1a:2b:56:70:3b:f3:0e:4a:1e:1d:52:
a4:13:5a:fd:02:1d:34:ca:ea:ab:1c:4e:23:c5:a5:cf:4a:81:
3e:d7:58:43:8e:09:2a:05:23:f0:49:2f:14:92:ac:59:dc:c0:
57:97:0d:23:c7:b8:2a:dc:74:bc:73:35:2c:2d:77:05:36:60:
28:72:ac:24:15:0b:8d:37:0e:8a:b1:b2:98:41:24:ed:97:e4:
18:3e:de:56:83:66:36:53:97:ad:37:b6:73:ba:f7:9c:e2:93:
ee:34:a5:03:e2:1c:29:eb:89:09:20:dd:d5:e8:0e:c4:4c:da:
0a:04:a5:a3:4f:46:f2:73:16:2d:b2:dc:e1:c6:6f:7a:9a:f6:
20:8d:56:78:3b:43:ee:7c:45:91:01:47:d0:46:22:b4:0a:fd:
34:20:d9:38:0b:18:4e:8b:59:af:18:d9:c4:bc:49:8a:8b:eb:
32:f7:65:07:c2:13:ba:75:e5:d2:f9:a4:c2:ca:e7:08:84:0a:
72:29:79:0d:53:e8:66:38:15:0b:ac:77:b3:04:42:d3:71:1d:
72:39:6f:4b:1e:0f:d0:18:ff:c6:11:9e:b7:b5:7a:5c:92:04:
b3:fb:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:01:59 2025 by rpki-client