Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/7cHudsbhVZHbppHTF_ntQT5LGaE.roa
File: 7cHudsbhVZHbppHTF_ntQT5LGaE.roa (raw, json)
Hash identifier: gjOnvh/cfHW6KLD8KAndHZd6PiXGNmxJ/xbLzRraSmM=
Subject key identifier: ED:C1:EE:76:C6:E1:55:91:DB:A6:91:D3:17:F9:ED:41:3E:4B:19:A1
Certificate issuer: /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial: 019710A89BE3E19E9F9D270DAFD61B56C1DD
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/7cHudsbhVZHbppHTF_ntQT5LGaE.roa
Signing time: Tue 27 May 2025 07:32:54 +0000
ROA not before: Tue 27 May 2025 07:32:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202013
IP address blocks: 94.232.84.0/24 maxlen: 24
94.232.85.0/24 maxlen: 24
94.232.86.0/24 maxlen: 24
94.232.87.0/24 maxlen: 24
185.105.248.0/24 maxlen: 24
185.105.249.0/24 maxlen: 24
185.105.250.0/24 maxlen: 24
185.105.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:a8:9b:e3:e1:9e:9f:9d:27:0d:af:d6:1b:56:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Validity
Not Before: May 27 07:32:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edc1ee76c6e15591dba691d317f9ed413e4b19a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:af:cc:bf:cd:b2:ab:a5:df:b4:39:49:77:
87:1f:43:93:3d:6e:0f:b7:3b:a4:fa:3b:4d:99:3c:
ec:f2:ed:10:58:8b:eb:19:68:a4:26:bb:b8:90:82:
c7:84:62:62:78:74:86:b0:64:0f:76:30:34:f8:d9:
e4:f6:f7:49:d8:b2:e1:d2:a6:19:04:94:e0:7f:71:
ca:18:c3:1f:87:92:13:eb:75:3a:a1:1f:b4:79:1f:
f9:ed:1a:5a:98:91:42:c9:05:a7:df:9c:02:5a:c2:
74:f6:15:54:98:b7:be:9f:55:88:be:cd:db:a4:7c:
ab:74:fb:81:1e:1a:dc:2a:8f:fb:b8:6c:13:c3:86:
9f:12:b7:94:50:67:10:24:df:3e:d5:ec:f2:9f:5e:
73:35:44:e8:83:23:01:fc:57:b0:7b:7e:93:59:1c:
8c:a1:3f:e9:45:a1:20:3f:b4:e0:aa:c0:3a:46:80:
63:a7:5a:60:8f:2a:fe:11:64:40:fc:bb:c4:ef:e0:
36:49:c6:95:fa:c4:2d:16:5b:92:6d:61:f4:95:83:
c4:76:75:4e:70:30:34:43:2c:4e:65:39:0e:48:62:
12:57:66:ef:d8:dd:e6:9a:91:64:d2:9e:40:e4:d4:
74:41:66:45:f7:5f:e1:9a:16:29:b0:a9:7f:37:c2:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C1:EE:76:C6:E1:55:91:DB:A6:91:D3:17:F9:ED:41:3E:4B:19:A1
X509v3 Authority Key Identifier:
keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/7cHudsbhVZHbppHTF_ntQT5LGaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.84.0/22
185.105.248.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:13:a2:6f:4d:bb:3e:56:09:61:a7:71:68:fd:2f:8b:ae:8c:
88:a1:eb:96:53:b8:a8:a2:5b:24:7d:e8:0b:6b:2d:54:ef:1f:
63:fb:f8:f9:0a:4c:4f:48:fe:b0:5e:fa:bd:af:d2:9e:0a:89:
fb:c8:72:8a:c4:aa:54:f5:88:e2:a5:92:89:27:d4:97:b8:b5:
ef:10:1c:37:58:60:6e:82:5f:db:ab:fc:6b:f7:9f:67:8f:4b:
41:53:c0:ce:d9:63:43:f2:f4:6c:a4:96:41:d4:69:90:32:ef:
2e:e2:45:38:e5:bc:7c:c8:da:db:10:07:38:6d:8f:84:20:40:
aa:fd:1b:c9:fb:1f:d4:25:bd:6e:c6:39:90:0f:55:f7:d2:3b:
0d:a4:10:55:01:4b:79:47:b3:6c:38:5c:f6:ce:9a:3c:67:d7:
e1:58:68:a7:c7:9c:3a:78:92:2d:e1:55:7e:f9:9d:22:ea:40:
8f:49:3f:bc:18:22:75:58:0e:de:4d:5d:86:cc:f0:4e:0f:2f:
df:ff:cf:9f:5c:0f:fe:7e:87:a8:66:42:86:9d:82:67:c3:fc:
97:03:0e:8c:cb:92:ec:76:81:4d:77:8a:c6:b9:b1:6b:0c:46:
3d:60:b5:7d:a6:e1:08:17:d4:c3:30:39:ba:a2:97:21:80:f4:
36:96:08:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:24 2025 by rpki-client