Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/7McO252I-2XmB-n1NnBeB1r5CWE.roa
File: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (raw, json)
Hash identifier: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=
Subject key identifier: EC:C7:0E:DB:9D:88:FB:65:E6:07:E9:F5:36:70:5E:07:5A:F9:09:61
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019421447008228B52B3BF3AC2FA641D5598
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/7McO252I-2XmB-n1NnBeB1r5CWE.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206092
IP address blocks: 45.132.226.0/24 maxlen: 24
45.132.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:70:08:22:8b:52:b3:bf:3a:c2:fa:64:1d:55:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc70edb9d88fb65e607e9f536705e075af90961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:96:10:01:2c:86:c9:b2:f4:2d:32:89:50:
dd:5e:c9:01:55:ea:6a:ab:5b:a1:4c:44:2b:e0:6a:
78:1f:6f:18:48:8e:6b:ad:da:9f:47:55:b7:13:92:
3c:71:51:1e:ba:d9:7e:ea:87:d3:27:cd:27:3a:b5:
08:89:c0:64:c8:57:31:6a:29:bc:9b:af:dd:f8:68:
a4:d0:33:98:c4:4f:0b:c7:99:31:8b:c3:f0:b9:00:
68:e1:38:f5:72:95:65:18:90:0e:f6:a0:7c:6a:5c:
c6:75:d2:52:e7:9b:5e:04:46:49:43:fa:79:fd:51:
5c:21:8e:38:4e:3b:4d:6b:1d:63:c6:49:7d:75:ce:
53:57:e7:0d:5a:81:59:27:af:c3:bb:b8:76:6b:c2:
b5:aa:88:5a:4a:37:40:1a:c0:ed:88:54:df:a4:3d:
f9:b9:ed:de:41:3c:0c:13:e4:40:53:68:14:90:18:
5f:af:24:28:9f:35:b5:ff:32:bc:ed:48:c8:09:4f:
00:6c:b6:e4:7f:69:80:18:7a:b1:7e:40:d8:87:e7:
8f:e7:a4:09:d7:c1:1d:07:d2:23:0a:8e:07:05:bf:
3f:0b:5d:7b:a8:5b:49:c3:74:2b:fe:ad:a9:bf:f3:
a5:af:7b:d4:88:6c:b7:dd:f5:1c:77:92:04:22:3a:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:0E:DB:9D:88:FB:65:E6:07:E9:F5:36:70:5E:07:5A:F9:09:61
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/7McO252I-2XmB-n1NnBeB1r5CWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.226.0/23
Signature Algorithm: sha256WithRSAEncryption
27:73:9b:d0:fd:a3:d7:5e:17:d2:d6:6e:76:ca:95:83:d7:e2:
49:07:48:6e:99:d2:67:b0:a7:e0:0f:5e:33:ef:3b:b7:8e:9a:
82:e5:54:52:9e:02:18:f7:42:6e:3c:1f:30:e7:93:79:f6:cc:
41:fd:2e:5f:68:4d:2e:c1:bb:b8:de:b3:e7:e6:bc:69:8a:db:
94:22:0b:44:cd:a2:64:fa:2b:f2:5e:45:ad:64:f2:7e:93:d8:
46:18:e5:85:cd:2e:2e:fa:27:d1:b7:cf:dd:a5:1f:2f:3a:cd:
6f:36:de:8a:63:21:e1:41:50:e9:d5:18:75:4b:08:67:bf:3b:
05:fa:dc:22:d1:ef:2a:e6:9f:e8:0f:a7:1f:d5:9e:99:8f:ab:
4e:4a:1e:f9:65:0e:ca:d7:5a:41:6c:7d:e1:94:69:01:fc:c3:
a1:97:2f:34:83:13:69:e8:59:5e:1d:58:46:e2:c0:48:de:83:
86:49:3e:6e:6c:e2:05:34:08:81:1e:83:73:2c:53:30:82:a1:
14:42:f5:68:48:9b:b8:ef:0d:9e:0e:b4:b9:2e:2c:5f:c0:0d:
2a:6d:2f:ca:2d:5c:b1:36:ac:7a:5a:ad:d6:ad:00:c4:c0:fb:
e3:b3:dd:c1:52:e9:9d:36:fb:97:11:91:aa:99:fe:6e:53:6e:
83:54:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:25 2025 by rpki-client