Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa
File: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (raw, json)
Hash identifier: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=
Subject key identifier: EE:4C:BB:9E:3E:C5:FE:35:5B:CE:5D:AC:66:95:CC:6D:BF:A6:74:AC
Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157
Certificate serial: 019423D7006E021FF34D3AE83EEB1D27B9D7
Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49070
IP address blocks: 91.215.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 18:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:6e:02:1f:f3:4d:3a:e8:3e:eb:1d:27:b9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4cbb9e3ec5fe355bce5dac6695cc6dbfa674ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:66:b0:3d:ae:32:da:23:6c:b8:ee:61:c3:
6f:d8:12:68:41:ac:39:6d:78:b6:35:e0:da:1d:79:
cf:7c:91:6a:af:aa:4f:11:ad:2a:8b:1c:cb:cd:44:
b6:7e:4b:36:85:a4:f8:70:d4:09:ca:e9:11:74:21:
5f:2f:f7:84:8d:96:a0:6e:70:67:2c:1e:61:a0:14:
f1:f6:47:66:4a:1c:1c:14:6c:1d:01:67:43:7d:c6:
f8:0a:2a:bc:76:58:b6:18:4e:12:44:74:9f:08:3f:
15:c0:66:e3:86:93:df:bb:e6:10:6f:74:17:d4:e9:
a2:b3:59:64:ee:30:7c:2e:7e:24:01:45:aa:53:03:
d7:22:84:4a:ba:53:2a:d1:67:aa:c7:b7:d4:d5:db:
31:6d:38:d0:8b:63:71:0a:43:36:74:05:97:72:a4:
b4:61:76:9f:e4:3a:82:d7:95:7e:3e:e3:c6:13:f4:
9d:33:a1:a5:32:db:6b:85:37:cc:66:da:8d:29:0f:
fb:28:ca:35:e5:ef:50:3d:04:8f:f1:5f:80:0c:66:
79:f2:54:4f:2d:cd:c1:56:23:31:cd:71:0a:88:f3:
ac:2a:43:1c:cd:a8:d0:04:90:86:c3:be:f2:89:1f:
bc:27:e2:d1:5e:f3:20:7b:a4:ba:78:92:ea:0e:12:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4C:BB:9E:3E:C5:FE:35:5B:CE:5D:AC:66:95:CC:6D:BF:A6:74:AC
X509v3 Authority Key Identifier:
keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.196.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9b:34:fd:48:b9:2e:ee:3d:f2:6a:ee:30:f6:e4:7c:de:a7:
bd:d5:e4:aa:dd:b9:44:4a:26:8c:84:7f:ee:ce:1c:29:f8:b0:
2b:f3:a2:b7:ef:cb:cd:ef:1a:2f:f2:a1:62:64:e7:0b:d0:f7:
a6:55:87:83:97:9a:55:c7:c8:37:05:84:54:e5:41:12:fa:f3:
37:b0:54:95:aa:c0:bc:f8:90:d5:91:34:4c:ab:3b:4d:6a:e3:
b6:5f:79:fe:05:3d:cc:4f:b9:a5:9d:ff:31:b3:d0:57:b8:a6:
a7:9f:94:93:ee:ea:83:5b:02:ea:0e:8a:90:b6:b0:ee:98:36:
dc:18:b8:de:45:38:e2:94:d8:a5:2d:e2:22:f9:9d:87:8f:5f:
17:88:5e:26:d2:0b:f4:45:56:ce:14:49:05:2d:03:d3:40:ad:
a3:58:a3:51:7b:f5:e6:8a:a9:f6:5c:24:87:55:36:fa:d9:62:
49:45:a5:9f:66:01:73:48:e4:41:95:3c:5e:cb:7b:22:b3:45:
ba:82:b0:e8:7b:94:b5:3d:67:87:d2:d3:da:06:ab:7d:b8:03:
85:7a:01:b6:49:27:76:96:c5:d7:6d:fd:c5:b1:4e:77:5b:f0:
c8:80:e7:66:d9:99:16:14:8d:78:7d:e8:1a:4d:2b:58:bb:ec:
78:a9:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:34:32 2025 by rpki-client