Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa
File: 7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa (raw, json)
Hash identifier: NBi3hLwQwbGQATz90wDw9LkVn07LZS1piVwE8dvvsug=
Subject key identifier: EC:C9:9B:E5:94:6C:07:D9:BC:A0:89:E0:7B:82:55:60:7A:CF:E0:4C
Certificate issuer: /CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Certificate serial: 0194228DD9CDC0F476D353D099A4F50C25E1
Authority key identifier: A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401348
IP address blocks: 141.8.224.0/24 maxlen: 24
141.8.225.0/24 maxlen: 24
141.8.226.0/24 maxlen: 24
141.8.227.0/24 maxlen: 24
141.8.228.0/24 maxlen: 24
141.8.229.0/24 maxlen: 24
141.8.230.0/24 maxlen: 24
141.8.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d9:cd:c0:f4:76:d3:53:d0:99:a4:f5:0c:25:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72c20e7fe310a983b9a2371f942daf44be610b3
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc99be5946c07d9bca089e07b8255607acfe04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:79:bb:17:be:96:18:60:a0:4b:7b:b4:cf:
d7:f3:68:88:62:eb:dd:d2:e2:fc:8d:40:20:cc:fe:
38:bb:14:bd:80:75:5c:6f:43:e8:64:36:04:56:4a:
a4:39:23:b0:49:43:09:a3:26:fc:0c:3e:41:f0:b8:
10:bb:f7:b8:0f:21:6c:bd:4b:83:c4:14:e4:c3:d8:
cb:68:8e:1e:3f:02:6c:38:f4:6d:3a:6f:2b:e2:27:
88:da:28:7d:a6:d3:85:ad:a5:c0:53:05:90:30:79:
4b:a2:1d:de:66:19:57:f2:93:ad:9a:6f:e4:44:08:
e0:dd:16:c6:5c:fd:a3:c7:e2:d3:40:25:0f:9f:1b:
0f:45:40:a7:ce:e7:a1:91:e2:df:f4:78:86:8a:fc:
f5:66:ae:e7:cf:b5:12:cb:1e:2d:4c:f5:a9:93:4f:
be:44:01:d5:96:7d:ae:28:01:5e:0f:59:77:53:3c:
f7:fc:22:14:7c:fc:fe:8e:00:de:82:4e:b0:39:5a:
d6:63:7f:c7:a6:ef:96:ef:8c:64:d9:eb:87:9f:36:
96:fd:2c:72:8f:18:81:af:de:a7:11:12:b9:a9:54:
94:d5:ca:b0:39:3a:37:b3:9d:7f:95:5a:2d:89:13:
65:f9:ac:73:78:1c:33:19:6f:56:b7:cb:e2:81:a0:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:9B:E5:94:6C:07:D9:BC:A0:89:E0:7B:82:55:60:7A:CF:E0:4C
X509v3 Authority Key Identifier:
keyid:A7:2C:20:E7:FE:31:0A:98:3B:9A:23:71:F9:42:DA:F4:4B:E6:10:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pywg5_4xCpg7miNx-ULa9EvmELM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/7Mmb5ZRsB9m8oInge4JVYHrP4Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/eb9614-8bfb-4bf1-a20b-2a3d0dc5dcc9/1/pywg5_4xCpg7miNx-ULa9EvmELM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.8.224.0/21
Signature Algorithm: sha256WithRSAEncryption
98:01:3d:77:d1:24:a6:cc:bb:24:b5:59:4e:ce:d0:af:58:70:
d6:66:3c:ce:fa:d0:55:62:10:16:fb:3e:fa:67:02:a0:fe:8c:
c9:5d:47:a2:53:ac:90:4d:b6:26:c0:a6:19:85:ab:6d:94:38:
3f:b9:ee:af:cc:01:68:8f:51:f0:b5:cd:d2:f9:1d:cb:37:fb:
dc:e9:91:66:62:c6:ca:ab:33:b3:3e:d5:e0:f3:d7:61:e3:63:
23:b6:ac:a1:9a:cb:c6:f1:ba:3a:e3:35:c2:a5:75:ed:0a:cb:
52:f3:81:f9:8b:57:71:44:43:76:86:4a:f6:78:42:e4:96:b6:
fb:0e:51:2a:3b:36:f5:c9:ac:d2:9d:38:2c:ed:eb:b2:84:6a:
43:f2:ae:8e:da:17:a9:31:fc:3e:16:c9:81:6c:84:e5:d2:32:
5a:25:ec:80:9b:44:e4:99:91:44:3b:95:53:b1:34:9d:3d:c0:
2d:17:67:aa:1c:81:ed:09:c5:c5:86:be:d8:6e:c1:91:cf:8b:
b8:41:ae:f9:eb:53:c7:38:55:c7:44:42:3f:b4:0b:80:c4:1c:
e6:0a:ef:5d:77:40:00:96:19:28:e0:1f:ce:d1:bf:7e:3e:69:
0e:14:57:a1:73:b3:bb:80:87:6a:a7:e8:d5:1f:eb:ae:8e:5a:
4d:8b:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:15 2025 by rpki-client