Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa
File: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (raw, json)
Hash identifier: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=
Subject key identifier: A7:B2:48:57:A8:40:3F:C2:2A:72:76:B5:3A:3C:CE:AB:8F:FB:61:11
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01942220303D427BFD9A1A0CF54A1B8E0FA5
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 45.89.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:30:3d:42:7b:fd:9a:1a:0c:f5:4a:1b:8e:0f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b24857a8403fc22a7276b53a3cceab8ffb6111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:16:f2:a0:97:2f:3d:53:d4:7c:a1:e0:6d:
f1:6b:d8:57:42:8d:ac:f8:30:92:90:71:1d:b9:18:
08:c6:48:bc:f8:5f:eb:74:44:02:fd:c8:ff:34:37:
62:c0:1f:98:5d:84:95:c3:bc:cd:66:0d:47:dd:1f:
2b:25:e5:73:0d:7c:22:56:7b:38:22:62:2f:30:96:
40:17:48:16:2e:96:6c:2b:94:22:ff:cb:6a:16:6d:
97:62:29:25:f8:c3:b6:50:dc:9f:61:f6:22:b3:67:
c1:e3:6f:ee:a4:c2:f1:0a:fa:8b:d7:67:d6:3c:2e:
0b:f8:e3:f2:63:30:ec:e0:eb:1e:83:ff:ac:11:35:
f5:7f:b7:ec:fd:41:8a:3f:19:bc:04:ac:31:43:96:
93:3c:5d:7c:5c:bd:ba:19:68:81:e6:c7:f9:68:8b:
3c:04:71:95:95:16:4b:06:3b:bf:07:b5:a5:f2:44:
1d:ac:75:69:72:a0:ac:b4:8a:a5:48:6e:73:b2:63:
d7:3a:dc:e3:49:21:d5:32:d9:ce:c9:3c:94:9e:34:
15:dc:d6:14:66:43:db:2e:bc:94:12:bd:f5:7f:a9:
11:46:44:29:83:04:80:62:72:5f:f9:b5:16:44:c2:
11:1c:a2:c3:7a:3d:10:88:95:b6:5f:bc:3c:ae:f0:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B2:48:57:A8:40:3F:C2:2A:72:76:B5:3A:3C:CE:AB:8F:FB:61:11
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.54.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1e:ac:ec:8f:21:4b:96:33:dc:59:22:d0:fd:15:b0:a4:61:
e0:5f:e5:65:ba:db:35:6e:fc:d8:f3:9e:6f:db:2a:2e:31:f1:
2a:f5:f5:8d:c1:34:08:c1:7a:9a:29:07:5e:2f:10:36:2d:b0:
82:67:83:e2:91:53:b4:ee:6f:03:36:bb:75:b3:3e:8a:50:b5:
fc:cd:8d:fa:61:69:94:42:8c:5f:16:bd:5f:87:f9:f8:5b:1b:
be:5f:95:b7:f6:a7:88:89:12:1e:36:28:b8:07:2b:25:42:68:
16:16:ad:a7:35:c3:d4:61:d3:96:de:e9:00:e1:f7:c2:ec:0b:
f6:ba:9c:29:29:d8:ec:4c:16:d6:18:17:b1:6d:7b:87:ce:df:
5b:01:77:33:e7:3e:e8:57:d3:0a:7e:73:72:9b:17:15:e1:3f:
94:e2:e3:1e:7a:19:70:90:b9:07:6c:40:15:6b:ce:1b:d8:4a:
d0:eb:78:f9:b6:0d:f3:cc:a4:b7:2d:9c:9c:83:6c:25:82:63:
94:61:5d:3a:9c:99:d6:8d:ca:b1:ee:d1:5c:eb:d8:1c:f0:a1:
4c:6a:57:01:64:ff:82:15:70:2f:86:d4:06:9c:37:91:f6:d2:
f0:57:30:df:05:be:bd:08:9c:01:5b:0f:63:ba:24:93:b6:14:
f8:a4:13:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:40:51 2025 by rpki-client