Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/t7AOBzb4Is80NIsg5AED49fAWd8.roa
File: t7AOBzb4Is80NIsg5AED49fAWd8.roa (raw, json)
Hash identifier: B7i726ENR+tchfJwU+HqKnow9F/D1fEtIVs8BKGbYDo=
Subject key identifier: B7:B0:0E:07:36:F8:22:CF:34:34:8B:20:E4:01:03:E3:D7:C0:59:DF
Certificate issuer: /CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Certificate serial: 019421B1F68F65E5192AD28B7B65123929D7
Authority key identifier: 6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/t7AOBzb4Is80NIsg5AED49fAWd8.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203702
IP address blocks: 194.124.201.0/24 maxlen: 24
194.124.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f6:8f:65:e5:19:2a:d2:8b:7b:65:12:39:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af3aa0140b7983500ea829f3c36bbfb65af9972
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b00e0736f822cf34348b20e40103e3d7c059df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:59:08:42:be:39:9c:33:43:76:45:60:34:
e6:b3:34:0a:84:c8:2f:96:c4:8c:ef:e1:b8:af:7a:
f0:71:f3:c6:3c:6f:55:4a:0c:69:85:23:e8:6e:06:
ea:f9:03:fc:95:95:b2:34:e8:4a:54:f7:7b:e8:dc:
70:ed:69:30:56:9e:34:b5:db:7c:c9:97:62:a8:15:
57:7f:9e:bb:df:56:e5:d9:dd:27:72:d4:12:64:98:
0e:78:50:bd:f3:2d:66:9b:6e:9b:7f:85:9f:91:f7:
c7:8e:d3:23:98:85:37:58:ca:c1:af:0d:0b:80:bd:
dc:f0:d2:91:2d:a4:d7:cf:bc:c5:37:e2:b4:55:8b:
2c:a9:5d:ae:df:7b:89:86:93:80:da:fc:ae:6f:22:
b8:45:24:1f:46:74:0d:7b:47:fd:af:5a:ad:a8:5e:
02:94:95:5d:70:78:dc:20:f1:30:43:cc:08:d4:3f:
3c:1b:24:61:ec:52:2b:a0:db:58:92:cc:a8:00:e1:
ff:77:55:66:21:cf:6c:b9:47:01:6e:fd:c5:ac:8d:
ad:40:5e:8e:5f:0b:a1:e8:80:12:26:9a:95:8f:9a:
9f:fe:81:d3:99:0d:6e:c6:b8:b0:66:50:4d:cd:9a:
a8:c9:c8:27:75:d5:be:48:d5:6d:ad:da:95:96:f3:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:0E:07:36:F8:22:CF:34:34:8B:20:E4:01:03:E3:D7:C0:59:DF
X509v3 Authority Key Identifier:
keyid:6A:F3:AA:01:40:B7:98:35:00:EA:82:9F:3C:36:BB:FB:65:AF:99:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avOqAUC3mDUA6oKfPDa7-2WvmXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/t7AOBzb4Is80NIsg5AED49fAWd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/32b1ac-4189-49fd-a999-b8f3b779e54b/1/avOqAUC3mDUA6oKfPDa7-2WvmXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.201.0-194.124.203.255
Signature Algorithm: sha256WithRSAEncryption
32:8d:54:e8:02:38:f5:c2:16:15:4c:26:76:82:9c:7e:de:76:
03:df:c5:35:6a:f1:f7:34:27:85:b7:26:1d:5f:d3:7d:4c:64:
76:bc:c5:85:c4:6c:55:1c:a7:71:dc:27:dd:1e:bb:06:c8:29:
77:76:f1:04:46:4b:68:3f:e7:29:66:57:0c:4a:47:e7:50:be:
49:90:98:51:cc:a1:c1:f0:c8:05:22:60:e8:42:44:d5:52:0c:
8d:d8:a7:4b:c7:c0:39:e8:9d:33:4d:6a:82:23:62:89:ac:31:
f4:9c:57:3b:d0:eb:c0:30:22:98:24:f5:4a:54:15:28:d6:52:
f4:76:da:54:2a:ff:91:ff:ea:a2:45:87:8b:c6:95:0e:d3:fb:
91:cb:52:61:d6:10:a7:ce:1d:45:75:83:94:5c:75:85:ea:6d:
fd:3c:ff:16:6b:f7:07:82:30:70:1b:28:3d:3e:7f:c9:7f:7f:
e4:24:04:35:91:56:cc:9a:0e:ae:aa:a6:53:b1:84:40:2e:4b:
54:23:80:a3:95:d3:c8:1e:86:c7:f0:9b:60:1b:2e:f1:68:01:
85:25:f2:68:27:c1:ef:78:a4:9c:9c:a8:b3:bb:61:32:e2:95:
a9:54:fc:38:d6:8e:d5:8a:c9:68:4d:3b:9d:db:62:dc:db:00:
0c:3a:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:13 2025 by rpki-client