Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7XN9wyggBJAAN_phHgYk5ZELjD4.roa
File: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (raw, json)
Hash identifier: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=
Subject key identifier: ED:73:7D:C3:28:20:04:90:00:37:FA:61:1E:06:24:E5:91:0B:8C:3E
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01941FFA5380B18A4E7781A7EF2E20FA74FB
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7XN9wyggBJAAN_phHgYk5ZELjD4.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29616
IP address blocks: 185.1.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:53:80:b1:8a:4e:77:81:a7:ef:2e:20:fa:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed737dc3282004900037fa611e0624e5910b8c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:59:42:52:d8:68:37:66:94:eb:05:ee:07:
28:28:fc:a8:bc:c5:d6:26:92:e8:d7:19:30:da:ac:
16:07:da:ae:16:20:67:2c:cf:9d:e0:69:41:9c:3e:
ae:24:84:ed:19:e5:a1:13:24:44:d2:a8:58:6f:0c:
66:8d:f1:48:91:8c:ea:ba:b2:4c:30:50:34:26:9e:
82:6f:05:2a:30:16:2f:a9:23:0a:4b:f0:61:34:42:
78:79:1d:e3:7e:8d:e2:3e:36:75:30:da:4a:ba:c0:
ce:85:3a:11:00:ba:99:8a:a6:d5:25:58:6c:bb:a7:
f3:2a:f6:db:ca:91:b8:81:ff:f3:aa:b4:ee:08:10:
51:74:3d:02:ff:18:47:30:0e:c2:81:ef:ed:0e:50:
e4:4c:5a:f1:75:82:92:54:8e:4b:cf:5e:d4:29:b9:
c6:2c:35:eb:3f:c0:19:af:0a:06:92:cc:19:e5:74:
12:d6:d5:5b:43:82:8a:55:dc:25:52:e8:e5:18:2e:
3b:db:33:36:57:d1:58:d2:6a:da:18:c5:40:9f:8c:
37:4b:1c:9d:b6:40:74:40:b3:03:76:c5:32:9c:a7:
94:ef:fd:16:15:a3:f7:51:f8:3e:f6:2d:b9:14:9d:
4d:aa:9e:f9:de:92:ed:5d:52:71:fb:ca:bd:b7:8d:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:7D:C3:28:20:04:90:00:37:FA:61:1E:06:24:E5:91:0B:8C:3E
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7XN9wyggBJAAN_phHgYk5ZELjD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.45.0/24
Signature Algorithm: sha256WithRSAEncryption
da:e6:de:43:fd:d9:e8:ee:df:12:27:6e:9d:04:36:fe:55:72:
2c:fe:d9:a5:bf:9f:55:69:c4:28:c2:64:98:b8:62:63:11:07:
d7:57:e8:05:6a:ca:ea:85:18:83:e8:c8:e7:54:40:d9:c1:5d:
78:74:ab:28:d6:79:bb:22:3c:9e:25:1d:68:68:19:b5:bb:fa:
91:23:6e:9e:5e:68:53:a3:ed:16:96:10:d6:4d:9b:fe:ff:09:
43:14:92:45:ea:df:6d:0d:d5:a2:12:13:27:b1:12:5f:ec:5a:
05:71:d7:ce:1a:c7:3d:6a:a0:c8:32:49:96:a3:fa:a8:2d:0d:
2c:24:72:14:d2:5a:c0:b0:68:f7:df:11:de:58:bd:b0:03:af:
ad:c8:1a:dd:9a:a2:1f:3e:55:7c:7d:f8:5e:30:4d:8b:32:87:
af:ea:0b:81:58:2b:51:13:85:8a:af:3b:71:88:df:e1:a9:98:
80:06:e1:23:72:5d:87:a7:a1:78:09:d7:65:fe:cf:56:31:23:
ee:0d:1a:36:75:33:80:e8:84:64:61:31:95:1a:36:49:ad:3c:
57:df:9a:a9:73:d1:f2:d2:52:c2:3a:c7:e2:a7:42:18:52:56:
bc:e2:b1:d7:79:a3:c3:33:46:81:81:35:83:7f:b1:36:37:3e:
8a:73:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:20 2025 by rpki-client