Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/h7fbgIdbSscgO_YAEoL2izsx0aU.roa
File: h7fbgIdbSscgO_YAEoL2izsx0aU.roa (raw, json)
Hash identifier: b6MfVV56XvIQObG8YUHRDlYJr5JSPkYRhFBNakc5qf8=
Subject key identifier: 87:B7:DB:80:87:5B:4A:C7:20:3B:F6:00:12:82:F6:8B:3B:31:D1:A5
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 01942444C11846ACD3046B523074EF8856F9
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/h7fbgIdbSscgO_YAEoL2izsx0aU.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209173
IP address blocks: 2.56.36.0/23 maxlen: 23
2.56.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c1:18:46:ac:d3:04:6b:52:30:74:ef:88:56:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b7db80875b4ac7203bf6001282f68b3b31d1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:f8:b9:19:a4:e1:c6:31:51:b5:e5:67:ce:
34:9f:08:bf:1a:86:3d:34:d8:1f:1b:f4:ab:1e:0a:
39:20:cf:4e:2d:6f:73:46:69:99:34:f2:72:b0:19:
a8:67:82:2f:7e:33:5b:04:80:78:99:80:e7:1b:f8:
c2:d3:da:d0:ae:24:4d:3a:36:15:3e:03:3b:6a:0a:
2a:08:e0:78:c8:16:9f:ed:05:aa:78:29:73:9b:dd:
57:40:c9:49:c3:83:9a:82:fb:f6:ee:3f:c2:12:5e:
36:21:cd:58:29:34:34:6b:b7:3d:ac:7c:c7:e9:e5:
29:91:5f:db:f0:51:89:00:c2:23:8f:7b:16:db:fb:
eb:36:d9:84:fb:61:03:9e:00:95:ad:df:85:c9:f6:
49:f9:a5:3b:0d:f4:50:3c:68:c4:6d:a3:15:05:ef:
ad:20:e8:62:70:53:26:71:07:4d:cb:cb:b6:a5:09:
36:ee:ae:d0:d5:6d:21:ff:94:76:60:cb:87:2c:ed:
a3:d4:56:76:6d:9c:9f:c9:3a:6d:11:9d:f7:8c:8b:
70:f9:b8:8d:af:ba:ea:35:cb:66:76:0a:ff:50:51:
9c:19:a3:c4:20:1b:df:19:71:bc:ef:1f:65:3c:4b:
61:29:ce:98:9f:f3:7b:ae:7d:a3:04:60:1c:57:ca:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:DB:80:87:5B:4A:C7:20:3B:F6:00:12:82:F6:8B:3B:31:D1:A5
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/h7fbgIdbSscgO_YAEoL2izsx0aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.36.0-2.56.38.255
Signature Algorithm: sha256WithRSAEncryption
b6:25:95:c5:a2:24:41:b9:77:b3:39:e3:e5:89:6a:1a:a3:81:
86:10:3a:6f:fe:b1:1a:7c:e7:ff:0e:2a:9f:eb:df:7d:b3:f9:
32:a2:85:95:ae:f0:e4:39:d3:53:a5:73:42:de:b6:f5:8f:06:
15:cb:be:b5:25:9d:43:58:2d:a6:61:5f:f5:cf:ab:42:a4:83:
c0:b6:ea:c7:88:3b:c1:16:66:8c:ef:59:d8:52:fa:2f:62:2e:
78:21:81:8e:7d:87:66:c0:f2:b0:c9:a5:2d:9d:8a:11:3c:1f:
5b:c0:6b:b4:5e:0e:67:fd:0d:df:89:4f:b3:67:95:34:8e:cb:
0f:22:09:59:bf:71:62:ac:82:8e:39:e8:e7:57:71:0e:7c:e6:
80:37:47:b5:a3:77:2f:f6:8f:cc:3a:e8:c8:ed:c4:58:79:0b:
53:90:92:7b:8e:bd:c9:a0:54:0a:3a:cc:4d:e2:b6:de:e5:b4:
65:59:a6:5e:b8:0d:cd:15:4d:22:21:19:cd:aa:d0:d8:9a:01:
d8:e5:94:2c:ff:c6:8a:60:bb:cb:96:ee:d3:65:18:02:b4:cf:
e0:4b:df:54:e2:d1:93:c0:cb:16:3d:a6:2c:64:91:e3:1c:33:
5b:a3:66:b6:26:bc:f4:3a:aa:a2:de:43:2f:0d:1b:16:48:4e:
f7:8c:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:06:57 2025 by rpki-client