Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pfLysxYGN0JUSR9cwri_OlKvaw.roa
File: 7pfLysxYGN0JUSR9cwri_OlKvaw.roa (raw, json)
Hash identifier: 8cN2YR5Bnl8utyftNZDtPc+oFrhQ799HslgOmmhJxtk=
Subject key identifier: EE:97:CB:CA:CC:58:18:DD:09:51:24:7D:73:0A:E2:FC:E9:4A:BD:AC
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281979746878B0A184C8E641477451
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pfLysxYGN0JUSR9cwri_OlKvaw.roa
Signing time: Thu 02 Jan 2025 17:55:04 +0000
ROA not before: Thu 02 Jan 2025 17:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48064
IP address blocks: 212.50.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:19:79:74:68:78:b0:a1:84:c8:e6:41:47:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee97cbcacc5818dd0951247d730ae2fce94abdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:5e:98:a2:48:61:f8:b6:2b:a3:78:21:3b:
8b:23:c8:b4:c1:1d:2d:05:39:29:ce:e9:d3:54:2a:
a7:06:34:73:06:0e:49:2d:b1:c5:e1:4b:13:26:16:
30:e9:54:c1:69:5c:69:73:4b:5e:78:98:55:96:f0:
42:08:7a:27:21:29:6d:44:85:4f:e2:7d:13:93:77:
51:fe:f1:df:90:4c:a2:16:4b:51:e2:06:57:72:77:
e8:4a:8a:ac:0f:bf:d6:d2:4a:d6:8b:cd:b2:11:69:
f2:80:87:2a:2d:e7:65:76:bd:5f:93:51:72:f6:8a:
e4:2a:69:6e:22:95:9c:cc:d5:76:d3:5c:f2:c9:dd:
1b:4e:ec:0d:a8:32:73:60:18:d4:e9:fc:77:9d:83:
15:18:c2:92:9b:94:57:bb:14:b4:bb:26:f7:be:f4:
08:11:79:22:4a:ef:09:80:b4:54:5c:b9:7b:a3:d4:
fb:71:d4:5d:48:1e:cd:1f:89:a0:03:2c:c3:ad:69:
2e:7a:c4:1c:46:92:f2:35:67:ca:5a:43:b2:54:03:
77:91:0f:ef:02:10:e3:a3:11:f7:bb:5c:e6:f0:55:
18:05:70:3f:2e:e5:b9:23:31:52:e5:c8:20:48:a6:
49:59:f7:68:c7:91:07:04:fb:d8:aa:66:51:c3:55:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:97:CB:CA:CC:58:18:DD:09:51:24:7D:73:0A:E2:FC:E9:4A:BD:AC
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/7pfLysxYGN0JUSR9cwri_OlKvaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.50.17.0/24
Signature Algorithm: sha256WithRSAEncryption
07:96:8f:9d:e5:4e:96:c4:4b:c9:31:ce:79:cb:28:ef:80:f4:
c2:aa:f3:11:14:e1:56:91:fe:1b:dc:09:eb:73:f8:2b:c1:18:
e5:2a:af:d5:69:e2:0e:dc:9e:93:1e:0a:11:81:3d:11:48:6e:
6a:b5:6d:cd:5b:2b:0e:d5:79:bb:4a:51:38:90:50:2c:f3:f3:
a6:3d:83:e1:42:8a:3f:f5:dc:40:42:bf:18:60:d3:05:17:88:
f7:04:34:97:0b:58:3e:9c:67:34:cb:26:55:43:1a:b8:51:54:
14:d7:18:57:e0:e7:2a:8a:2f:2a:04:8c:02:98:97:1e:36:9b:
c9:7f:8d:4c:c1:45:79:0c:06:98:b4:33:6c:87:9a:a5:49:22:
03:ad:ec:37:5e:ee:c5:64:22:85:1d:85:7f:de:1f:1f:07:12:
0c:35:cc:d3:07:6f:7c:31:18:10:e3:4e:21:ca:e6:f3:a1:b3:
be:01:1f:ee:86:74:8e:a8:46:dc:28:8d:ec:ae:7e:0b:b5:13:
86:45:0c:61:73:c3:f2:47:0a:bc:72:f2:36:61:91:f7:39:f3:
fd:c2:09:c0:4e:f8:50:14:ae:55:be:db:a9:22:70:f6:5e:bc:
54:25:8d:d3:b5:5f:c3:50:47:a4:ce:04:a3:c0:f5:11:23:c0:
fb:01:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:44 2025 by rpki-client