Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/c7PThyo9x7ijnI6ZdV3MfxWyEt0.roa
File: c7PThyo9x7ijnI6ZdV3MfxWyEt0.roa (raw, json)
Hash identifier: /DYVK9qmU8Wa3G1NhYBwKafvFDGHypV99xn8/8uGqqA=
Subject key identifier: 73:B3:D3:87:2A:3D:C7:B8:A3:9C:8E:99:75:5D:CC:7F:15:B2:12:DD
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 01907E75F7FD1C7C701661E361BE20DBC4A9
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/c7PThyo9x7ijnI6ZdV3MfxWyEt0.roa
Signing time: Thu 04 Jul 2024 15:56:18 +0000
ROA not before: Thu 04 Jul 2024 15:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 25.25.25.0/24 maxlen: 24
25.26.27.0/24 maxlen: 24
25.129.196.0/23 maxlen: 23
25.129.198.0/23 maxlen: 23
2a08:600::/48 maxlen: 48
2a08:600:e0::/47 maxlen: 47
2a08:600:ee::/47 maxlen: 47
2a08:600:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7e:75:f7:fd:1c:7c:70:16:61:e3:61:be:20:db:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jul 4 15:56:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73b3d3872a3dc7b8a39c8e99755dcc7f15b212dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:e3:1f:3f:5b:57:2e:74:69:77:97:22:ce:
0a:e7:5a:46:6c:0b:46:27:3b:9a:90:19:38:69:00:
b7:ca:01:b9:90:21:b9:c4:ed:de:7a:fb:c0:b7:e4:
af:d8:44:88:ef:60:cb:64:b5:f9:64:ca:1e:a7:78:
9b:08:7f:b5:07:f6:c6:5d:cb:88:a5:3d:6c:a4:2f:
73:a1:ed:02:d1:9f:8f:8f:c9:ff:dd:c7:c4:1b:97:
69:73:d9:3d:6d:28:ac:85:61:92:09:6d:be:32:64:
c6:35:6b:02:50:b2:bf:63:ec:7e:24:03:6d:c1:48:
5e:56:38:ab:08:25:a6:7e:c3:8a:c0:bb:f1:0a:6b:
ba:13:4f:10:b4:28:e2:d6:d4:65:04:0d:5d:49:17:
ee:b9:25:8d:bc:56:0a:10:04:e1:92:af:48:81:c7:
91:91:88:cb:8b:1e:c8:1c:8d:80:0c:20:2d:1a:b3:
94:f8:a3:9b:8e:69:f8:56:8e:50:e1:b2:1a:f9:ea:
d2:e5:8a:fc:9d:1f:c3:d1:05:90:19:b4:ca:66:fd:
4d:cb:23:34:1d:08:55:de:26:28:f6:d5:f8:b1:74:
93:e5:0c:0f:d2:31:7d:27:53:29:91:0c:06:32:98:
ec:2b:6c:ce:c8:a7:cf:12:b8:ea:04:a4:fa:a8:16:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:D3:87:2A:3D:C7:B8:A3:9C:8E:99:75:5D:CC:7F:15:B2:12:DD
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/c7PThyo9x7ijnI6ZdV3MfxWyEt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
25.25.25.0/24
25.26.27.0/24
25.129.196.0/22
IPv6:
2a08:600::/48
2a08:600:e0::/47
2a08:600:ee::/47
2a08:600:ff::/48
Signature Algorithm: sha256WithRSAEncryption
9d:25:3d:51:72:de:5c:4f:62:76:cb:e8:02:19:57:84:bd:67:
eb:c8:33:e3:ed:d0:1d:ae:2a:e8:cf:b0:e8:d5:9d:d8:0e:80:
c8:c4:2f:ca:1c:6e:95:06:09:ee:8c:5a:77:a1:31:2a:93:1d:
af:e2:e6:a6:10:a7:44:31:e8:ce:3a:33:62:89:35:c4:4a:ff:
b9:1c:12:58:c0:a1:f9:98:27:69:db:65:28:a2:23:cc:03:a2:
de:04:05:46:6e:a1:15:7d:7c:d1:2c:77:fd:ee:8e:d2:d6:d1:
f1:bb:86:a8:03:7a:58:67:e5:da:21:5b:34:75:60:87:80:07:
61:9b:3d:a0:0c:01:61:47:01:b0:73:e1:79:e1:62:be:33:a7:
ed:67:a6:2c:ab:26:93:99:98:f4:36:95:df:78:98:40:f9:1f:
14:8c:12:41:26:f5:67:c0:bc:cf:15:dc:e9:ac:0d:b0:bf:f1:
d7:94:8f:87:2b:24:d6:0b:93:c1:20:82:5a:f4:fd:11:c8:eb:
91:0c:52:c0:ab:02:72:c0:6a:41:55:f6:39:1a:9e:50:cf:41:
68:72:3d:b3:6d:cd:bc:7d:65:39:41:86:bd:3d:10:56:ae:d1:
17:76:e8:a2:9b:67:8e:53:62:6d:b0:4a:b0:1f:fc:9b:91:d3:
f5:60:d1:28
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZB+dff9HHxwFmHjYb4g28SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi
Zjg2NWMwHhcNMjQwNzA0MTU1NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2IzZDM4NzJhM2RjN2I4YTM5YzhlOTk3NTVkY2M3ZjE1YjIxMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndzjHz9bVy50aXeXIs4K51pGbAtG
JzuakBk4aQC3ygG5kCG5xO3eevvAt+Sv2ESI72DLZLX5ZMoep3ibCH+1B/bGXcuI
pT1spC9zoe0C0Z+Pj8n/3cfEG5dpc9k9bSishWGSCW2+MmTGNWsCULK/Y+x+JANt
wUheVjirCCWmfsOKwLvxCmu6E08QtCji1tRlBA1dSRfuuSWNvFYKEAThkq9IgceR
kYjLix7IHI2ADCAtGrOU+KObjmn4Vo5Q4bIa+erS5Yr8nR/D0QWQGbTKZv1NyyM0
HQhV3iYo9tX4sXST5QwP0jF9J1MpkQwGMpjsK2zOyKfPErjqBKT6qBa4qwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHOz04cqPce4o5yOmXVdzH8VshLdMB8GA1UdIwQY
MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt
NGM4MmFjZTcyYzg1LzEvYzdQVGh5bzl4N2lqbkk2WmRWM01meFd5RXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1
LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAYBAIAATASAwQAGRkZAwQA
GRobAwQCGYHEMCoEAgACMCQDBwAqCAYAAAADBwEqCAYAAOADBwEqCAYAAO4DBwAq
CAYAAP8wDQYJKoZIhvcNAQELBQADggEBAJ0lPVFy3lxPYnbL6AIZV4S9Z+vIM+Pt
0B2uKujPsOjVndgOgMjEL8ocbpUGCe6MWnehMSqTHa/i5qYQp0Qx6M46M2KJNcRK
/7kcEljAofmYJ2nbZSiiI8wDot4EBUZuoRV9fNEsd/3ujtLW0fG7hqgDelhn5doh
WzR1YIeAB2GbPaAMAWFHAbBz4XnhYr4zp+1npiyrJpOZmPQ2ld94mED5HxSMEkEm
9WfAvM8V3OmsDbC/8deUj4crJNYLk8Egglr0/RHI65EMUsCrAnLAakFV9jkanlDP
QWhyPbNtzbx9ZTlBhr09EFau0Rd26KKbZ45TYm2wSrAf/JuR0/Vg0Sg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:03:53 2024 by rpki-client on console-ams.rpki-client.org