Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa
File: f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa (raw, json)
Hash identifier: I5XhYKmiwTTC0KZ/h+71MELDdEucvcsXapf63tq8JL0=
Subject key identifier: 7F:EE:32:BB:AB:03:C8:11:EE:A1:4A:74:8A:3C:DF:81:02:69:13:C5
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 01942369E9B13F366890801DCF51EDE9F9A2
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa
Signing time: Wed 01 Jan 2025 19:48:51 +0000
ROA not before: Wed 01 Jan 2025 19:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50904
IP address blocks: 31.216.224.0/21 maxlen: 21
185.18.192.0/22 maxlen: 22
2a03:d540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e9:b1:3f:36:68:90:80:1d:cf:51:ed:e9:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fee32bbab03c811eea14a748a3cdf81026913c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:ef:30:d6:90:67:e3:68:b8:14:f5:85:54:
b4:37:84:ab:7d:2c:54:5e:7f:82:d5:ef:18:a0:ce:
9f:1f:9b:ed:b6:ab:f7:d3:62:e1:54:98:18:22:aa:
db:70:8e:59:4d:bf:46:df:ec:d6:67:f7:e2:52:bf:
c2:7c:5f:9d:3a:09:05:07:ef:78:50:09:74:f2:3c:
af:93:6e:6a:c2:ec:8d:3d:37:c8:5c:39:e6:26:ac:
f0:b6:72:82:c9:a7:4a:fd:c9:3c:4d:31:82:b9:cd:
1e:e3:65:02:2d:ad:fb:ef:89:c1:bb:3a:8f:ee:13:
67:04:68:8d:1a:10:0a:e0:34:8d:c9:dc:cc:24:a7:
39:b9:cc:c1:59:7d:70:ae:3d:11:6e:d8:fe:76:3c:
e8:bf:bf:35:cb:52:b3:cc:a7:36:68:22:bd:57:07:
41:97:b8:2b:b8:f7:b1:39:32:89:c7:31:64:8c:45:
a1:dd:fb:73:78:be:2a:59:7b:4b:37:79:d2:63:ca:
7b:27:e1:a4:b7:ae:81:15:fc:7d:19:38:50:1f:e0:
b6:50:c3:0c:c8:da:b8:7d:7b:52:aa:f6:36:cc:d4:
1b:1c:aa:90:4f:aa:67:d8:f1:12:4c:d8:ca:c9:93:
ae:49:5f:c4:02:23:a6:a1:82:f2:32:37:a1:57:94:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EE:32:BB:AB:03:C8:11:EE:A1:4A:74:8A:3C:DF:81:02:69:13:C5
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/f-4yu6sDyBHuoUp0ijzfgQJpE8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.224.0/21
185.18.192.0/22
IPv6:
2a03:d540::/32
Signature Algorithm: sha256WithRSAEncryption
75:c4:0a:91:8a:d2:f1:4c:ca:f1:ac:c6:ee:8e:f1:13:8e:ba:
ab:3b:e8:ef:a0:40:c2:69:14:08:77:e2:8e:c4:c4:81:57:89:
01:44:56:82:a5:1b:2d:e5:6a:9b:77:7b:82:fa:b2:c1:58:ab:
52:e9:0a:a8:cb:d6:eb:83:39:14:28:62:03:ec:95:26:1c:67:
ba:bb:a9:17:d4:25:a8:52:da:b3:cc:63:2c:90:51:cc:f7:45:
c5:4f:d5:57:90:d6:da:75:0b:91:b5:2e:44:b3:d6:5c:11:df:
2a:a0:b3:8f:ad:98:81:ae:94:54:e7:ec:63:30:03:7a:fc:78:
16:87:d2:c3:6f:27:4b:2d:3f:3c:63:6b:d2:f1:40:ea:9a:e5:
0c:ff:17:7e:9f:03:b1:94:67:e4:f8:c3:96:48:42:40:37:70:
92:5c:18:36:16:fc:a5:68:cb:54:20:cc:b0:cd:8e:85:03:ec:
e5:86:35:b3:eb:54:54:f8:3a:ca:d2:3b:7a:bc:fd:3f:8c:cc:
c5:bb:ec:02:2d:d8:b0:ba:1d:6e:0f:e6:40:62:c8:01:ee:3a:
b2:fe:63:e0:fa:37:2a:8a:bb:a7:61:72:06:36:56:3b:c4:05:
b1:27:3b:43:b9:9e:62:fc:81:12:57:0d:13:01:de:10:c7:08:
73:98:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:39 2025 by rpki-client