Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/dj7XdZh5KETFPQnDms3UxXnRXC4.roa
File: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (raw, json)
Hash identifier: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=
Subject key identifier: 76:3E:D7:75:98:79:28:44:C5:3D:09:C3:9A:CD:D4:C5:79:D1:5C:2E
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0194221FA1EDD439CC26A99337B4414A0C06
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/dj7XdZh5KETFPQnDms3UxXnRXC4.roa
Signing time: Wed 01 Jan 2025 13:48:05 +0000
ROA not before: Wed 01 Jan 2025 13:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 146.19.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a1:ed:d4:39:cc:26:a9:93:37:b4:41:4a:0c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jan 1 13:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=763ed77598792844c53d09c39acdd4c579d15c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:ef:df:85:85:de:97:61:0c:a3:da:71:4c:
57:ce:cc:45:9b:f4:56:e3:44:9b:90:01:85:d5:6c:
17:41:c3:7e:cc:6e:00:73:a5:13:fa:f8:b4:78:3d:
32:f8:e5:ba:53:9c:5f:c4:fd:8b:40:84:b3:a9:8c:
71:a6:0e:16:34:a9:af:64:52:d3:f1:0a:2c:09:37:
ef:09:07:82:16:4c:85:fe:a2:ad:76:19:81:fa:5c:
4d:6c:c9:c2:b5:3a:6b:61:58:be:21:3e:34:4c:ef:
ed:1c:3e:fd:29:8a:34:be:3f:3e:5f:5f:de:2b:a8:
57:e1:22:2d:dd:12:4b:85:41:38:e9:34:de:28:7f:
92:c6:1a:ed:cf:06:83:b5:04:4e:88:09:7f:27:70:
c2:6a:6f:95:06:be:16:e4:37:4c:ae:1a:31:5a:70:
05:87:1e:6f:da:df:ea:35:e3:f9:5d:e1:1b:6e:cd:
11:af:73:29:1a:a9:25:2e:6a:73:da:6e:a6:78:55:
da:2f:b8:4b:d4:aa:9e:e0:d9:19:f0:13:29:2b:22:
33:d2:dd:b5:56:2a:79:f2:db:14:aa:0b:20:9f:fb:
e3:3c:f9:e1:fc:cf:96:6d:27:f4:49:d6:c1:fd:2a:
42:77:7e:f8:f8:ab:bc:0a:10:91:02:de:32:3c:32:
3b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3E:D7:75:98:79:28:44:C5:3D:09:C3:9A:CD:D4:C5:79:D1:5C:2E
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/dj7XdZh5KETFPQnDms3UxXnRXC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5e:93:7c:95:c5:86:49:e8:06:a0:de:ee:98:93:37:f6:b1:
6e:bb:e5:d4:50:00:13:84:af:f7:54:66:2f:9b:ba:0c:ff:11:
5f:43:ee:30:40:8d:00:e2:3b:91:48:e6:65:e9:4a:c6:e3:99:
d6:be:98:a4:75:67:b7:4c:dc:cf:10:46:f2:a8:75:e2:67:88:
52:f0:87:d0:24:16:5c:51:41:52:df:6a:58:14:d8:6e:20:c1:
53:28:71:50:1d:1b:8b:d0:90:81:68:78:59:2c:6a:d4:1f:f3:
3e:f8:60:2a:43:fd:5c:51:ed:fe:f2:b2:87:df:18:9b:04:8f:
c8:3a:c3:28:12:94:bf:ed:fe:50:cb:cd:b5:c8:39:b0:e3:64:
46:51:8c:18:93:74:d5:e4:e3:4d:41:72:ae:8b:b6:29:4d:57:
d0:9a:8c:e6:cf:af:ea:91:72:78:e3:fe:f2:77:37:d8:14:1d:
e7:0c:97:e7:47:bf:c0:1a:8d:ca:2b:bc:61:76:6d:0a:06:58:
af:1c:ad:37:91:7e:11:35:a7:0e:13:1e:3f:2e:9b:63:db:c2:
3a:1d:9a:4b:b0:fc:6d:45:08:f0:52:93:13:8e:ae:c2:df:c5:
eb:9a:51:27:9d:38:50:9f:62:ff:38:97:2a:8b:d0:78:18:03:
45:dc:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:00 2025 by rpki-client