Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa
File: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (raw, json)
Hash identifier: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=
Subject key identifier: EE:1F:4F:55:84:5F:A4:95:90:55:EE:A9:FD:F5:0D:AA:43:08:54:93
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01942747A9A9F643C52BBEB90998C18DD225
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa
Signing time: Thu 02 Jan 2025 13:49:55 +0000
ROA not before: Thu 02 Jan 2025 13:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198785
IP address blocks: 185.155.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a9:a9:f6:43:c5:2b:be:b9:09:98:c1:8d:d2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jan 2 13:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee1f4f55845fa4959055eea9fdf50daa43085493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:66:47:38:3c:28:01:3c:2d:82:f6:32:ea:
6f:ac:e6:ff:10:64:f1:49:52:6d:9a:d5:ab:1d:21:
fd:86:6a:4c:00:ea:f5:29:21:f8:bf:47:ed:e3:fb:
46:e9:c4:8f:8a:e4:72:62:92:0e:f7:32:3d:64:ba:
08:a1:1a:49:66:a6:14:a4:c6:0b:1f:2a:f7:a4:38:
a2:bb:51:d1:49:6d:be:cb:cd:62:20:e5:aa:28:ae:
d9:03:d5:29:3d:76:7d:98:d4:bc:76:f1:83:28:8d:
16:d3:5f:07:5b:10:78:2b:84:43:1e:30:d4:0a:86:
65:74:d0:b7:87:89:4f:a4:56:35:72:87:f5:21:fd:
d3:04:f4:41:56:98:f8:38:ab:69:ea:16:72:1e:38:
9d:1d:09:e8:ef:2e:5c:59:94:cd:e6:db:36:80:6d:
6b:0f:e8:1c:fc:e3:24:c0:6e:38:5f:4b:a6:76:58:
18:71:7e:a0:29:87:67:22:02:f3:3d:6a:22:df:ee:
aa:6c:0f:86:8b:5c:95:f1:60:f1:2a:52:e4:ff:a6:
50:28:d4:dd:93:18:ef:cb:e2:9a:fd:eb:5b:61:59:
d2:9f:c8:e9:fd:55:9b:a8:7f:e6:4b:e4:79:27:09:
92:0c:cc:e7:30:5f:de:8e:de:43:32:a3:45:b2:9c:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:4F:55:84:5F:A4:95:90:55:EE:A9:FD:F5:0D:AA:43:08:54:93
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.226.0/23
Signature Algorithm: sha256WithRSAEncryption
69:af:7e:81:9c:b3:b6:c0:e1:0f:b7:2a:48:c1:d8:e9:99:f9:
1f:25:aa:ac:df:e6:e0:5f:de:6f:f3:ff:bb:ef:0d:27:6d:a6:
5d:8f:e5:67:9f:e2:24:eb:45:70:c3:25:e1:fd:f4:97:48:b2:
4b:a9:5d:c5:87:37:99:77:5f:c5:f8:f5:8c:a2:c5:47:3c:30:
10:e2:8e:0e:80:45:d9:ae:ec:b8:da:2c:93:a4:2a:4d:5f:31:
db:db:81:3d:0f:e8:ca:ef:61:4d:70:aa:cd:e1:71:11:b8:66:
c2:52:fa:41:34:4c:99:78:68:71:f7:d2:4d:b4:ad:5c:1e:b2:
13:38:34:f1:75:d0:fa:7b:77:17:b8:26:14:92:7d:b6:37:28:
08:bd:b1:d3:56:b1:63:5f:3e:93:70:ef:78:2a:cd:3f:dd:b8:
ad:cb:51:74:71:e1:2d:b1:f5:0d:45:0f:45:3e:70:c3:42:1d:
49:38:c5:6d:3a:9c:21:ee:4d:8b:9a:f0:a1:49:fb:76:42:bc:
e9:04:3a:f1:c2:53:bc:e5:36:67:09:2e:72:e5:90:1f:9f:6c:
1b:30:72:50:38:7d:d8:ab:a4:5c:b9:74:8d:45:c2:d8:db:59:
df:51:0a:04:c2:32:0f:bd:df:82:01:69:57:e6:87:da:d4:1c:
0d:a0:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 20:05:18 2025 by rpki-client