Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/7zyHfGLCt61eCife6uW0qcGV8aQ.roa
File: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (raw, json)
Hash identifier: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=
Subject key identifier: EF:3C:87:7C:62:C2:B7:AD:5E:0A:27:DE:EA:E5:B4:A9:C1:95:F1:A4
Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8
Certificate serial: 019424B3DB2179C40CFB606EDC09B459EC2D
Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/7zyHfGLCt61eCife6uW0qcGV8aQ.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62252
IP address blocks: 185.41.156.0/22 maxlen: 22
185.41.156.0/24 maxlen: 24
185.41.157.0/24 maxlen: 24
185.41.158.0/24 maxlen: 24
185.41.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:db:21:79:c4:0c:fb:60:6e:dc:09:b4:59:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef3c877c62c2b7ad5e0a27deeae5b4a9c195f1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:01:68:ed:82:83:98:f4:6c:36:33:c8:16:
a9:ce:74:2f:2c:b6:c5:eb:9c:a9:70:b7:99:d1:ee:
00:64:e6:1b:c7:01:f5:bd:b9:c1:b9:72:2e:09:ff:
7d:58:31:0f:9f:51:c1:68:b2:3b:54:71:20:e2:d7:
4d:54:fc:6f:94:d0:03:64:13:93:47:28:b8:89:3b:
91:f0:b3:b0:b5:cf:bf:a8:6a:44:91:79:07:c7:7a:
65:b1:96:30:34:5a:ba:5c:a1:4c:2d:0b:d5:d5:80:
6d:77:26:f5:70:10:45:a6:5f:62:86:97:ee:2e:b4:
1d:03:e3:9d:b4:7f:a0:31:34:52:c1:c3:b7:25:49:
a6:0c:fe:35:a5:85:47:3f:0f:75:05:e2:6d:67:23:
6d:0c:23:46:d6:94:42:0d:2f:dc:64:8a:92:fe:4d:
0e:72:52:21:49:f0:a7:00:ac:41:46:45:02:74:de:
c8:82:87:76:19:68:8f:a0:d0:f7:4a:a6:77:38:7e:
04:3a:e2:1a:d7:d4:42:0b:45:e6:89:9d:8f:96:96:
aa:93:2f:06:22:ac:ac:d4:66:b5:80:9f:cc:9b:47:
29:04:25:06:6c:22:5d:67:e3:25:ff:18:3d:63:c0:
21:66:e4:fc:86:78:78:d6:44:f1:d9:ba:14:8e:c3:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:87:7C:62:C2:B7:AD:5E:0A:27:DE:EA:E5:B4:A9:C1:95:F1:A4
X509v3 Authority Key Identifier:
keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/7zyHfGLCt61eCife6uW0qcGV8aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:7d:e8:99:2b:23:c9:02:b9:e0:fd:4b:e6:8f:b6:95:50:ef:
f9:c0:e5:d2:13:72:19:d8:9b:c8:fe:04:f4:3b:10:21:dc:fe:
f4:eb:19:ea:2c:f5:c1:e7:d0:55:36:bb:1a:e1:38:62:69:39:
47:c7:35:b5:57:63:b6:75:85:16:20:f4:65:f9:47:7e:b1:aa:
39:7c:c1:9a:99:79:1b:34:10:c6:50:20:ea:c8:c0:cc:c6:f7:
9b:73:32:44:51:51:c4:29:13:3b:17:e1:c1:ad:6a:c4:de:79:
28:cc:0e:95:9f:70:8d:c4:85:39:d9:4c:20:4a:06:18:88:f3:
07:1d:64:ac:b4:bc:60:2b:7f:f9:57:5b:28:e3:55:8d:07:52:
83:e0:cc:4c:d8:3a:7a:fa:37:d7:88:fa:f1:ab:ef:60:25:41:
87:80:1f:25:af:51:e1:05:7c:50:83:74:1f:4c:12:8e:8e:82:
e1:86:94:c0:03:ed:24:96:ab:f4:e9:dd:29:5e:6f:a5:20:f9:
02:c5:45:59:d8:91:bc:fd:46:54:a9:63:20:a1:cb:2c:a1:ef:
53:65:22:9b:37:2c:e5:66:b6:0e:7a:1b:cc:79:96:b1:82:ee:
d2:76:81:7f:86:6a:57:a5:06:51:e7:a2:38:af:51:10:82:e7:
c2:06:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:55 2025 by rpki-client