Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/7yvWMV7T5eN6efasr2rdxP4qnTg.roa
File: 7yvWMV7T5eN6efasr2rdxP4qnTg.roa (raw, json)
Hash identifier: IQLAVcCJbXWjx9lqcgGZjEbAOQis8qmzfLoEHM8bDrs=
Subject key identifier: EF:2B:D6:31:5E:D3:E5:E3:7A:79:F6:AC:AF:6A:DD:C4:FE:2A:9D:38
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 019424B38FC5E76FA4BB4BEF5A9850799195
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/7yvWMV7T5eN6efasr2rdxP4qnTg.roa
Signing time: Thu 02 Jan 2025 01:48:55 +0000
ROA not before: Thu 02 Jan 2025 01:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21459
IP address blocks: 185.203.60.0/22 maxlen: 24
217.68.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:c5:e7:6f:a4:bb:4b:ef:5a:98:50:79:91:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef2bd6315ed3e5e37a79f6acaf6addc4fe2a9d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:fa:32:c2:ad:ea:b2:97:89:67:fc:11:44:
33:b2:34:82:6e:db:c1:0a:82:2c:35:20:a5:6d:be:
62:8d:7f:f1:d9:54:eb:37:8f:ba:90:a3:2f:5b:47:
9f:6c:92:e4:3b:9f:fb:ed:86:70:64:98:78:d2:c3:
2e:83:2c:27:fd:69:cd:74:1c:dd:c8:88:13:df:2a:
f3:ed:e4:d8:0d:69:24:09:2a:87:18:dc:d2:cd:90:
2f:6d:3a:86:bb:f6:e6:c8:89:79:43:d9:f1:e1:89:
41:be:12:bd:38:61:63:03:6c:28:4e:db:5a:a1:7a:
ee:59:a0:9c:65:4e:72:67:70:ec:99:46:12:4c:5a:
6b:a7:a5:e8:1f:2a:3e:a7:3c:2f:6c:7f:d0:ed:63:
8a:3c:b1:3f:36:6a:a6:2d:8e:11:b3:1e:fa:9a:91:
7c:db:f7:61:e2:0e:4a:f6:84:d9:f2:f5:c2:27:4c:
ff:41:95:ee:91:51:f6:a0:f6:33:79:a3:70:5f:d4:
2e:21:fb:b9:55:ca:1e:77:f9:2b:8c:09:e6:65:f7:
17:2f:e1:e0:05:61:96:6b:09:bd:cb:cc:05:0a:38:
93:f2:20:ba:43:d2:d6:aa:6c:7c:ad:63:44:b5:fd:
34:1c:c6:84:b6:f0:fc:6e:f5:f3:0b:c5:32:3c:9b:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:D6:31:5E:D3:E5:E3:7A:79:F6:AC:AF:6A:DD:C4:FE:2A:9D:38
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/7yvWMV7T5eN6efasr2rdxP4qnTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.60.0/22
217.68.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:d0:7d:9d:cb:c7:de:57:07:f2:99:32:15:f6:21:e4:8d:0f:
8e:a6:ea:03:0c:fa:c8:63:21:d8:77:0e:7a:f3:e5:f5:a7:8d:
a2:9a:6d:8b:ac:15:9e:53:41:72:f4:f2:fc:94:60:9b:69:91:
24:cb:56:f0:a0:dc:e2:72:e4:10:b8:3a:e5:5e:be:67:d1:51:
72:f4:6c:17:26:3d:84:1d:8b:92:ba:17:85:00:42:13:59:93:
44:75:93:fd:ac:55:f5:68:f6:47:f5:db:64:fb:c8:1e:36:3e:
00:15:c8:a5:6d:af:68:01:6e:84:47:bc:68:86:fc:d0:2d:c1:
2b:62:0a:ec:ec:db:a1:cb:af:fe:99:08:2f:1f:5a:39:72:e4:
fa:52:a7:36:fc:b3:6c:4d:95:16:62:42:8e:21:68:af:05:f3:
92:c8:26:05:2b:f1:c0:8f:0e:99:12:aa:55:4a:d4:75:c9:1a:
d0:53:2e:01:12:13:9c:5a:78:9e:e3:b4:18:42:33:61:f0:77:
2d:f0:28:43:c9:62:dc:f9:da:c1:b7:79:d7:9f:29:7c:58:4a:
2e:04:15:fd:06:d3:2b:2f:e8:fb:7e:30:97:1c:c6:28:20:2c:
68:13:20:8c:32:fb:52:32:3d:29:86:62:f5:84:b2:40:77:e6:
58:cd:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:30 2025 by rpki-client