Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R7C238vqGCocr7Y-T7rK35gbcjg.roa
File: R7C238vqGCocr7Y-T7rK35gbcjg.roa (raw, json)
Hash identifier: m8zEeb5Xu5WLRAHWnQ1PkPq4jw6/807JnFxHaI2yU4o=
Subject key identifier: 47:B0:B6:DF:CB:EA:18:2A:1C:AF:B6:3E:4F:BA:CA:DF:98:1B:72:38
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FEB5397DBBFAFC1F8F58EFDEE9033
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R7C238vqGCocr7Y-T7rK35gbcjg.roa
Signing time: Thu 02 Jan 2025 05:49:36 +0000
ROA not before: Thu 02 Jan 2025 05:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202290
IP address blocks: 31.148.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:eb:53:97:db:bf:af:c1:f8:f5:8e:fd:ee:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47b0b6dfcbea182a1cafb63e4fbacadf981b7238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:7b:41:1b:a1:f0:ce:02:11:80:36:0c:88:
e4:30:86:00:56:54:1c:87:96:e5:b9:91:b3:49:63:
77:a4:e1:d2:e4:ef:93:ab:62:d4:e0:fc:5d:b2:00:
fb:41:61:29:7d:f9:2a:0f:7b:17:e4:8c:07:41:ee:
73:d2:13:b6:20:d4:b8:22:d6:c8:1d:32:ff:ef:61:
28:5c:51:64:73:63:e3:6f:c2:c5:93:58:68:be:95:
b0:09:f6:f5:9d:63:fe:13:2e:d6:fb:0b:d2:c6:ee:
29:17:0f:ee:48:d5:73:d4:c9:da:7f:cc:59:7e:e6:
a1:c9:5c:65:f4:ac:0c:59:c4:9f:57:2b:29:25:37:
05:57:74:77:4a:fe:37:52:c9:ba:56:b5:21:7d:63:
12:d0:9c:d2:bc:a6:13:fa:ac:f8:47:b0:9f:fa:bd:
e5:5e:fc:1d:67:0f:c2:e5:56:96:9d:6a:13:a4:9f:
53:83:66:24:c1:9d:a5:86:06:bf:e5:c4:24:a7:21:
35:98:3a:4e:dd:03:14:2d:5c:d3:e3:c4:1c:ac:d1:
19:83:0f:f0:48:12:ad:63:b7:78:83:dd:00:6d:70:
3d:ea:12:03:63:1d:79:97:c4:e4:57:79:6b:2e:c0:
89:12:54:0e:30:dc:c4:28:df:e6:72:3b:99:f8:16:
f5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:B6:DF:CB:EA:18:2A:1C:AF:B6:3E:4F:BA:CA:DF:98:1B:72:38
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R7C238vqGCocr7Y-T7rK35gbcjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.169.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fa:bf:cd:b9:8e:15:1d:46:52:2b:fc:e3:6e:fe:a5:0d:42:
15:9d:b4:4b:19:67:4f:39:b1:b3:28:b4:3b:c3:4d:26:03:b5:
87:1b:45:1e:29:ce:05:1c:c2:6d:d4:e1:95:df:0d:4d:25:e6:
fa:05:61:73:e6:f1:4b:77:f3:46:f3:f6:d5:96:7d:fb:38:47:
3b:b0:63:9b:f1:2d:72:66:d2:ff:1d:5d:80:77:7d:f1:3f:61:
a3:ed:7c:73:7e:72:23:9f:c7:8d:21:66:82:31:31:af:50:91:
ca:ca:34:de:5f:af:87:0b:fc:a4:e1:20:51:c1:9e:df:9f:eb:
d9:f2:6a:1e:cc:3c:02:c2:68:ae:cd:7d:33:a7:57:41:7c:86:
2f:f9:61:b9:86:21:30:bf:62:a6:83:6d:41:68:2f:58:14:ff:
19:6e:4b:29:e8:bc:aa:49:e9:f3:80:93:1f:be:31:b1:f3:64:
c2:0f:3e:ff:6d:64:7d:94:20:02:7b:c8:69:52:71:27:51:88:
df:d6:05:5d:fd:d6:33:6d:ba:62:b8:fb:85:6a:f1:c0:c4:e6:
fb:ed:23:65:ba:da:d3:4d:4d:75:1e:da:0f:70:43:95:cf:e4:
87:72:32:86:e5:eb:85:e7:cb:05:4d:29:07:47:cb:12:f7:11:
95:75:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:34 2025 by rpki-client