Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/7rbCLoXWYly-2n7W-2TuSkBBMV8.roa
File: 7rbCLoXWYly-2n7W-2TuSkBBMV8.roa (raw, json)
Hash identifier: SrTY3jKnRzrFELEhX/LwQ/2tjPUOB7vnlEoMlBte4mA=
Subject key identifier: EE:B6:C2:2E:85:D6:62:5C:BE:DA:7E:D6:FB:64:EE:4A:40:41:31:5F
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019421B1FA5DE16F41AD5AB6E667BBE9B073
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/7rbCLoXWYly-2n7W-2TuSkBBMV8.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207975
IP address blocks: 194.32.166.0/23 maxlen: 23
194.32.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fa:5d:e1:6f:41:ad:5a:b6:e6:67:bb:e9:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb6c22e85d6625cbeda7ed6fb64ee4a4041315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:e4:dc:5f:70:2e:c8:97:7f:07:84:59:e3:
ee:bf:57:14:ba:4d:dc:20:44:3c:66:23:1d:41:ae:
9d:32:0c:94:a0:d3:ab:6b:44:08:e7:b4:33:4c:6a:
f0:0c:0f:d0:a8:a9:c3:51:4f:40:e3:ba:3b:27:d0:
bf:b7:a3:1c:55:fc:73:e8:e5:10:19:f6:d0:b2:73:
10:58:5f:d6:6d:b4:43:9f:25:c9:02:c5:2c:54:b8:
13:3a:82:1c:92:26:3f:c0:20:79:23:1b:54:89:8e:
55:75:49:7b:90:c7:f4:3e:29:91:c2:c1:b6:22:31:
16:49:23:ec:d3:cd:94:44:f3:86:06:bd:68:31:4b:
29:32:e6:45:cf:e1:08:f3:2d:cc:c2:7d:72:8f:a4:
37:37:75:53:fb:aa:47:d0:d2:c3:66:16:63:06:65:
c3:3f:bc:97:fc:0d:da:29:53:73:62:ba:7c:7e:c3:
ec:b2:ae:03:79:e2:77:70:33:24:95:d7:a1:68:b9:
73:cc:92:10:65:92:08:3c:9f:b3:25:ce:4d:36:c7:
ff:d3:68:f5:8e:43:4c:8c:bf:b1:f3:5f:db:66:45:
9a:d9:50:1c:1f:df:13:f9:1f:ae:7b:5a:3c:f2:1d:
9d:54:e3:8c:6d:23:e9:e9:bc:00:d7:50:be:cd:00:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B6:C2:2E:85:D6:62:5C:BE:DA:7E:D6:FB:64:EE:4A:40:41:31:5F
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/7rbCLoXWYly-2n7W-2TuSkBBMV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.166.0/23
194.32.204.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:30:02:a0:9a:a6:c9:47:44:7d:f2:04:6a:0b:7c:7b:af:ee:
54:b4:e2:74:1e:6f:af:ec:9b:d6:b3:f2:18:81:73:30:19:39:
ef:9a:ab:96:80:b8:0b:14:a8:4c:d7:76:02:bd:7d:85:54:82:
97:be:ff:72:5c:6f:60:e9:8b:36:97:da:b2:69:29:8f:95:f6:
a9:cf:a5:7c:83:b4:49:11:08:03:bd:73:c9:50:a2:54:ea:ea:
d4:8f:39:35:7f:33:e7:73:97:69:22:51:30:2d:45:3c:48:6b:
fd:0c:6d:e9:54:3f:7c:a5:7e:78:c7:d6:db:4b:8a:a4:bd:5c:
f0:8d:a0:89:c1:04:f3:32:ba:74:4e:5c:2e:df:8e:28:1e:3d:
5c:31:1f:0f:d3:c9:52:a7:0a:02:24:b7:1f:87:7d:55:22:52:
a7:fc:6c:7a:01:ae:92:a2:9d:43:06:d7:04:74:a9:9e:03:38:
dc:da:db:5d:d3:74:08:0d:d7:2d:a2:b7:95:77:c6:8d:5a:04:
db:73:bf:0d:49:73:27:08:42:26:1a:31:27:dd:63:17:07:7d:
98:5f:b2:c3:d1:1d:72:09:e2:9c:72:3b:78:2b:56:6d:8d:4d:
fb:41:2a:bf:27:c3:3d:3f:b0:21:79:0f:44:dd:1b:9a:e0:0f:
9f:0c:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:36:36 2025 by rpki-client