Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/7wPReiiZCkAbhtBTvjj1V5aksnE.roa
File: 7wPReiiZCkAbhtBTvjj1V5aksnE.roa (raw, json)
Hash identifier: rquPP/JOGLNyEJui2m/8V+t5G02of5Esav2aIUndmQc=
Subject key identifier: EF:03:D1:7A:28:99:0A:40:1B:86:D0:53:BE:38:F5:57:96:A4:B2:71
Certificate issuer: /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial: 019425FD37A1A9DCBE5347D3F547317E5EB4
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/7wPReiiZCkAbhtBTvjj1V5aksnE.roa
Signing time: Thu 02 Jan 2025 07:48:59 +0000
ROA not before: Thu 02 Jan 2025 07:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203986
IP address blocks: 185.78.176.0/22 maxlen: 22
2a00:67e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:37:a1:a9:dc:be:53:47:d3:f5:47:31:7e:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
Validity
Not Before: Jan 2 07:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef03d17a28990a401b86d053be38f55796a4b271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:a9:b8:27:2a:71:0f:5e:f6:b7:87:05:8f:
94:24:9b:25:d4:02:2d:18:31:51:21:81:7a:d6:a7:
58:d2:2b:8a:fa:13:e0:6d:92:69:84:08:27:a4:5c:
de:26:84:ff:b5:9e:90:cb:7c:06:e4:c2:a1:83:ce:
ed:5c:2d:74:b6:84:76:a5:90:e9:33:60:02:a4:83:
16:7d:d7:31:8e:7b:f2:49:27:18:3f:99:83:69:c4:
f8:af:eb:3b:cc:f2:cb:92:a1:f1:42:49:30:1f:ce:
17:c8:b0:68:8b:9d:a3:25:98:96:f3:a9:07:b2:ad:
b9:88:d1:0a:df:69:0c:e4:a6:90:64:b7:f3:ef:e9:
0b:f0:26:af:a8:5c:b3:9f:12:94:81:03:25:64:22:
18:1a:36:b8:01:f3:4f:92:47:05:84:df:43:15:85:
49:a9:d5:ef:e9:cb:95:92:d2:86:07:6f:7c:35:0a:
d4:cd:20:d3:3e:b6:0f:49:af:97:f0:07:8a:72:00:
31:f8:a6:06:84:2c:36:d7:71:34:9c:32:45:df:d8:
64:d7:c6:6f:8d:84:c2:3d:9f:09:9e:03:bf:94:8b:
4f:c1:0a:cc:ff:a1:3c:9e:0b:21:13:72:f1:f8:3b:
36:99:32:39:18:78:99:40:86:ec:41:8f:62:53:95:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:03:D1:7A:28:99:0A:40:1B:86:D0:53:BE:38:F5:57:96:A4:B2:71
X509v3 Authority Key Identifier:
keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/7wPReiiZCkAbhtBTvjj1V5aksnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.176.0/22
IPv6:
2a00:67e0::/32
Signature Algorithm: sha256WithRSAEncryption
ea:c5:12:49:2d:96:f3:41:76:ef:83:6d:c7:72:d1:c1:6e:d2:
d2:49:41:b1:8e:ca:87:42:36:83:f1:23:cc:8d:51:cf:00:b5:
1e:e4:86:4e:42:dd:8f:22:33:f4:aa:a2:b6:96:12:55:c7:3f:
2a:d1:a0:7f:b6:e6:7b:b9:2b:f6:15:4c:94:99:f9:3e:0f:76:
ef:90:ec:57:d2:f9:e4:35:b7:56:79:ca:46:95:74:81:7f:0a:
e5:92:85:11:8d:01:f4:a1:1b:0b:57:3b:06:87:7f:6c:a7:82:
3b:4d:7f:da:4f:f4:5b:83:7f:23:8c:8f:54:f7:f3:39:28:dd:
9b:3e:51:d5:2e:0c:66:d0:63:92:35:7d:aa:a2:5e:8c:b0:21:
f4:39:e1:15:0e:03:d1:de:d1:7a:bc:b4:78:21:65:b3:05:35:
cf:48:7f:05:5a:92:54:62:91:18:5a:a1:0f:07:4f:7c:0c:be:
85:29:b8:20:58:85:75:17:25:e0:a0:25:d8:5f:58:d5:5e:63:
5a:99:af:1c:76:e2:78:4f:1c:d5:f7:fb:dc:39:06:f0:de:cc:
b4:48:d9:9f:5d:b8:53:03:60:5d:82:18:b0:f0:91:c3:e3:10:
b7:a5:b8:6d:a5:a0:e5:7d:dd:16:07:88:82:6e:e6:99:92:cc:
89:09:1b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:29:14 2025 by rpki-client