Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C7-eA3x-zmoXJd6LsK3kF_6YC_o.roa
File: C7-eA3x-zmoXJd6LsK3kF_6YC_o.roa (raw, json)
Hash identifier: YnGQjqGgReU4NnMIzpzJNlMdwFcDkvJ19GM1TKAdRXU=
Subject key identifier: 0B:BF:9E:03:7C:7E:CE:6A:17:25:DE:8B:B0:AD:E4:17:FE:98:0B:FA
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C17F8C2F25F81EA7384439AE52225
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C7-eA3x-zmoXJd6LsK3kF_6YC_o.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33875
IP address blocks: 81.180.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:f8:c2:f2:5f:81:ea:73:84:43:9a:e5:22:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bbf9e037c7ece6a1725de8bb0ade417fe980bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:0a:f4:f3:f4:fa:04:2c:fd:67:b3:48:ab:
87:df:51:58:7b:f5:61:9c:c4:58:29:f9:94:56:4c:
ce:4b:53:9d:f2:ce:7b:3c:bd:f0:56:e6:f2:68:d6:
09:9a:fb:1a:cd:e7:a6:c2:1b:94:c2:75:03:52:b0:
d2:41:7a:e8:b7:06:d0:b5:23:d1:9b:ce:c4:05:a9:
5f:a9:67:26:7c:24:4e:e1:97:78:ed:71:94:04:f8:
89:7d:38:92:22:fd:ca:84:13:7d:82:6f:cd:00:cd:
4b:7c:84:e3:80:87:5f:d9:90:a4:0d:c8:99:8c:69:
47:71:a6:1f:9a:e1:2e:f1:3b:59:79:d2:a4:00:ab:
c4:b9:06:aa:00:5b:bb:81:e3:e3:35:44:30:b9:04:
ea:f3:b2:41:82:ee:64:f3:6a:1d:37:00:a4:44:5f:
7d:17:9c:17:f7:11:b0:1c:52:54:d2:a6:b0:88:7d:
2b:a0:a1:40:9c:c0:0c:92:52:bd:fc:0c:8e:9d:74:
ed:5e:d8:a7:6a:63:67:64:2d:66:bf:7b:f8:2c:d2:
91:29:c1:77:b2:b7:84:f3:b0:bf:07:23:cb:dc:9f:
80:48:59:49:e3:34:5b:84:a5:a1:db:9b:94:01:cf:
ab:bf:fa:8b:33:40:dc:48:a4:de:d1:63:c8:d9:9b:
e6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:9E:03:7C:7E:CE:6A:17:25:DE:8B:B0:AD:E4:17:FE:98:0B:FA
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/C7-eA3x-zmoXJd6LsK3kF_6YC_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.92.0/23
Signature Algorithm: sha256WithRSAEncryption
91:54:4a:57:4f:07:13:4f:52:55:15:f1:6a:f0:f6:b3:9b:80:
da:05:4b:77:87:6b:09:14:f4:05:3c:ef:6c:25:f7:dc:72:d0:
22:43:2e:92:8b:61:55:09:35:a8:8c:4a:d0:15:cd:1f:98:c8:
19:bf:91:a4:78:6d:b9:20:93:f1:2f:d6:f5:01:d1:e0:0e:bb:
df:99:65:09:3a:28:b0:38:5c:5e:c7:1d:8c:01:ac:d5:0d:8e:
0e:62:d4:3e:79:64:01:40:a4:3d:da:14:e5:6c:3b:54:f4:2e:
6d:15:81:c3:1a:b1:f6:8b:3f:0b:f3:54:a1:ba:e9:7b:75:30:
4d:85:38:0d:a9:ec:88:28:4b:1a:fc:0d:67:e2:76:f1:e5:bb:
54:ec:53:3f:04:fb:c0:37:13:28:51:61:2f:ef:f6:9d:5a:db:
84:f7:b1:7b:58:c5:bf:47:99:5d:29:9f:a9:f8:04:e8:ee:be:
32:d2:8e:31:2d:c9:34:35:a5:c5:49:01:8c:80:d3:d1:18:d9:
a0:b2:11:21:ee:24:94:f7:83:59:98:2f:6b:c4:1f:60:5d:93:
34:01:5d:57:47:00:da:75:b6:c5:0e:20:f8:3a:36:58:13:6f:
08:e6:d4:fc:61:9b:e5:1b:a7:3a:f0:0b:25:f5:10:74:6b:c1:
5b:f4:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:55 2025 by rpki-client