Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa
File: 7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa (raw, json)
Hash identifier: TxbKQ6YqJPrLysV+NWU+TpSYoKbOqzVVz5RnT6KXSRE=
Subject key identifier: EF:3D:17:BC:8A:0C:2D:19:2F:5F:C4:71:0B:20:3F:55:68:AA:8E:61
Certificate issuer: /CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Certificate serial: 019426D958607400F5B4D2805B5685B18AB2
Authority key identifier: 8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa
Signing time: Thu 02 Jan 2025 11:49:25 +0000
ROA not before: Thu 02 Jan 2025 11:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50475
IP address blocks: 193.105.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:58:60:74:00:f5:b4:d2:80:5b:56:85:b1:8a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd150ff1fbcd42a93eb4ddf43ca71c7be3c7288
Validity
Not Before: Jan 2 11:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef3d17bc8a0c2d192f5fc4710b203f5568aa8e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:5b:5b:64:3b:26:3d:a6:45:7f:1b:09:4f:
86:d0:68:db:6d:c6:3a:a2:f7:46:47:85:e4:05:54:
11:fd:0f:80:70:e6:13:73:16:50:a1:45:1d:b5:fd:
11:4b:ce:5d:16:21:81:36:d4:49:ea:b6:34:0b:3c:
a1:9b:17:da:b6:70:b3:d3:e4:8f:9c:78:f7:0f:d3:
13:84:42:0d:e0:e1:6b:9f:e5:a2:f2:8c:bb:52:d5:
8e:2c:56:ca:6b:08:f5:64:29:00:3b:78:2a:fd:4d:
e2:80:b1:df:e5:8a:9e:60:f5:54:7d:dc:1c:7d:3e:
8c:e5:8a:33:ad:cb:11:ab:f4:3f:d2:48:88:35:cd:
34:77:10:3b:fa:ca:4d:fb:ae:2e:2d:7f:92:1d:fb:
61:ec:37:90:cf:99:ad:06:74:4c:fc:c4:af:e3:79:
ae:08:df:66:35:f9:0a:92:22:ab:ee:c4:81:69:61:
1b:5b:3c:34:3a:e0:70:a4:71:b8:fd:8d:99:7b:e2:
6f:6e:a4:d5:19:08:bb:c1:d4:12:72:60:c0:83:3d:
f2:06:1d:ba:ed:85:5d:80:93:51:c7:33:5a:c3:ab:
c0:13:69:88:72:a2:6a:75:2d:74:7e:9e:5f:0f:09:
ca:8e:75:26:11:14:11:92:0f:9f:bb:af:34:94:78:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3D:17:BC:8A:0C:2D:19:2F:5F:C4:71:0B:20:3F:55:68:AA:8E:61
X509v3 Authority Key Identifier:
keyid:8C:D1:50:FF:1F:BC:D4:2A:93:EB:4D:DF:43:CA:71:C7:BE:3C:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNFQ_x-81CqT603fQ8pxx748cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/7z0XvIoMLRkvX8RxCyA_VWiqjmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4ab5cb-5234-4b40-b2c6-7de42e118ded/1/jNFQ_x-81CqT603fQ8pxx748cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:5b:11:ce:45:ef:72:c9:76:8c:fa:49:d7:cd:e4:b0:c0:fb:
dc:b4:93:14:41:3d:30:4a:3d:b9:eb:54:21:12:0a:c7:e8:d2:
ef:35:60:a8:03:aa:5a:f2:e2:74:77:7a:3f:ce:18:40:97:fc:
58:c8:27:2a:43:ca:8d:ea:1f:56:35:d3:ba:de:80:65:01:00:
b7:51:14:7c:fb:80:6a:1d:46:7b:c6:ae:36:c1:2b:0a:4a:00:
88:db:fa:dc:d9:81:3d:7e:05:92:cc:43:27:74:23:d4:4d:a2:
8b:42:8e:37:6b:f6:b3:94:f7:9b:be:85:55:63:25:f7:7a:47:
ee:90:4f:55:03:94:cc:bf:cc:78:db:e3:a1:aa:3b:14:52:01:
f9:06:c8:a4:c9:08:04:d3:60:d9:7e:23:a0:9e:ea:95:ae:f0:
40:9f:83:e8:23:60:19:de:1b:f2:61:d4:4f:40:95:bc:2f:3b:
76:7a:48:67:d9:97:23:b9:d4:a0:fb:a8:ef:4b:92:4d:1f:49:
4d:08:8d:47:b5:9c:66:71:58:8b:53:a6:3d:19:73:4d:95:d9:
29:4b:36:ce:0f:fc:80:33:da:fe:84:d4:fc:84:70:96:0c:e2:
64:88:1d:b1:b4:47:af:43:5f:8b:2a:1c:56:89:f3:c3:8f:be:
f1:13:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:07 2025 by rpki-client