Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/7LfdpybXjkO1zp9O6nzu1fNfc88.roa
File: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (raw, json)
Hash identifier: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=
Subject key identifier: EC:B7:DD:A7:26:D7:8E:43:B5:CE:9F:4E:EA:7C:EE:D5:F3:5F:73:CF
Certificate issuer: /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial: 019426D943CAED500F64E3D6DE87E5744EA0
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/7LfdpybXjkO1zp9O6nzu1fNfc88.roa
Signing time: Thu 02 Jan 2025 11:49:20 +0000
ROA not before: Thu 02 Jan 2025 11:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8823
IP address blocks: 185.245.22.0/24 maxlen: 24
2a0c:d4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:43:ca:ed:50:0f:64:e3:d6:de:87:e5:74:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb7dda726d78e43b5ce9f4eea7ceed5f35f73cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:e3:fa:aa:fc:fe:0b:a2:fd:de:f4:44:b5:
ee:8d:91:a1:0e:0f:24:76:65:e0:b0:73:ea:cb:6f:
85:a5:b4:c1:a8:67:c6:8f:a2:fe:39:93:d8:a5:c2:
76:5a:0e:f6:8f:c2:2f:70:95:38:b7:24:7d:e4:2a:
52:11:a5:c1:54:b7:09:51:1a:40:73:02:c1:30:16:
72:8b:d1:1f:3b:ec:d6:de:4c:e0:93:e5:9d:e3:87:
ea:4e:b8:4c:af:cf:a4:af:8a:19:24:92:0a:de:d5:
19:dd:07:8e:04:0b:b6:d5:8d:d7:73:79:07:76:6d:
56:2e:5f:31:ee:33:35:e3:30:4b:b5:b2:7f:16:c4:
e3:a1:9c:8c:7c:ef:44:a4:06:ab:52:ce:62:f8:ce:
eb:9c:66:f3:68:9b:7f:3a:ea:e0:15:3f:c6:27:e9:
5e:5c:8e:b7:25:42:26:68:ba:e0:5a:a4:09:be:af:
21:a6:b2:ac:20:53:0b:e0:0d:20:bf:f9:07:2b:fe:
e7:a2:84:44:a5:c5:dd:ed:06:e8:38:8d:eb:3d:3c:
d4:35:97:85:12:b5:7d:d1:34:4b:23:f0:3a:a6:73:
91:bb:39:5a:f0:50:49:f5:ec:5d:85:5d:f8:5c:69:
e8:ff:49:b9:da:6c:e2:3f:33:3c:6e:50:93:97:4e:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:DD:A7:26:D7:8E:43:B5:CE:9F:4E:EA:7C:EE:D5:F3:5F:73:CF
X509v3 Authority Key Identifier:
keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/7LfdpybXjkO1zp9O6nzu1fNfc88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.22.0/24
IPv6:
2a0c:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
16:b2:23:d9:be:ea:d3:37:b3:4a:16:be:7f:4f:d9:01:5b:1d:
99:0c:65:cf:76:cc:36:79:ba:ed:e8:d7:6a:e2:5e:b2:bb:b5:
13:2d:33:b2:18:f5:72:8a:34:f8:d9:63:fb:57:25:bc:b4:1d:
70:64:b3:15:22:eb:95:85:7c:52:c2:1a:89:c0:a0:f6:10:d8:
de:cb:cb:6a:c4:2b:57:e9:95:2e:3c:2d:55:72:8e:76:55:cc:
78:0d:20:af:42:fd:82:dd:2a:9a:bc:7b:81:b5:36:02:60:69:
49:fb:f7:b2:62:76:f7:0c:85:ad:87:93:11:06:dd:d4:f8:29:
6e:3c:09:d0:a2:09:4a:10:5e:7b:5b:c2:68:0e:c7:94:81:32:
94:b1:70:0e:cd:bf:c7:a2:6f:7e:8b:6a:e4:bb:25:27:7c:9b:
d2:64:5e:1c:8e:f5:f0:e8:ae:66:40:ae:bc:ff:31:6d:19:8a:
0d:22:36:f2:88:93:f6:13:43:89:95:79:46:d9:27:94:39:87:
9d:83:b8:f1:8b:5f:a4:bf:36:8d:34:1b:ed:1b:65:56:22:85:
8e:05:28:35:c0:32:aa:9c:ef:96:e1:7e:fa:a5:4b:06:0a:de:
94:19:ef:61:1d:8c:b2:da:29:9c:a3:eb:f6:82:c9:5f:44:3b:
d3:40:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:49:07 2025 by rpki-client