Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Bntr7tft7tMMsgDurGmZ6wcOYvM.roa
File: Bntr7tft7tMMsgDurGmZ6wcOYvM.roa (raw, json)
Hash identifier: PkaC+/RpPCj2lfcO7JWc2oRaK1LSCbHkdG/lFj+hpjk=
Subject key identifier: 06:7B:6B:EE:D7:ED:EE:D3:0C:B2:00:EE:AC:69:99:EB:07:0E:62:F3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0194282768349D1ABAC398D2670849CA9372
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Bntr7tft7tMMsgDurGmZ6wcOYvM.roa
Signing time: Thu 02 Jan 2025 17:54:18 +0000
ROA not before: Thu 02 Jan 2025 17:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209181
IP address blocks: 37.140.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:68:34:9d:1a:ba:c3:98:d2:67:08:49:ca:93:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=067b6beed7edeed30cb200eeac6999eb070e62f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:d1:54:5a:f0:5d:70:96:5c:b2:cb:bd:70:
6f:30:5c:95:f8:ec:ef:a2:0b:82:46:f0:9d:b0:b3:
fd:c8:d6:3b:01:16:e2:a4:17:38:1b:49:c9:4e:d7:
dc:68:10:09:dc:ca:62:f0:41:f9:c2:36:02:fd:17:
93:de:0f:43:d4:6c:d2:48:ce:33:4e:7e:7b:14:eb:
0f:7f:8d:b9:61:ec:64:73:2e:fd:1a:24:f5:9f:c5:
c3:e3:2e:34:11:2a:63:d5:c7:63:3f:e3:6b:5b:e6:
a0:c0:b5:63:d0:f2:15:7e:dc:9a:57:d1:2f:aa:5e:
2b:dd:de:c5:b8:fb:ac:70:e1:0c:26:33:21:43:1e:
e2:9b:ab:99:05:bd:9f:86:e2:be:25:7e:93:e3:de:
2d:24:77:da:c0:c9:52:c6:00:d7:09:5d:2f:d4:cd:
e0:36:14:6d:49:0e:7d:b0:16:c9:88:3e:c2:ea:e0:
23:3f:21:0c:13:3a:3a:2a:09:98:01:ad:75:6e:e5:
93:96:36:79:3d:a0:16:b1:9e:2c:f1:ab:a6:9a:0b:
a8:5a:d6:23:3b:a7:2d:04:16:c7:4f:cd:ba:15:51:
9c:45:83:05:fc:c7:b2:fa:5a:6c:56:e2:20:b1:10:
f3:6b:bc:14:29:dd:b5:97:5a:9c:2a:81:5b:33:01:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7B:6B:EE:D7:ED:EE:D3:0C:B2:00:EE:AC:69:99:EB:07:0E:62:F3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Bntr7tft7tMMsgDurGmZ6wcOYvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d6:04:3c:91:ea:9e:87:2d:86:4f:a6:20:10:be:af:cc:c9:
e9:01:fe:69:52:4e:72:2d:0a:16:82:fd:7b:ae:6e:41:c7:ee:
49:3f:e1:83:cc:64:02:05:b3:5d:a3:68:f4:0b:df:84:f3:ce:
a6:b7:73:c7:da:b4:de:3c:85:32:17:3a:d3:9b:db:98:f2:6b:
8c:1e:10:8e:46:88:18:2c:18:00:50:d7:33:fc:3e:9f:fe:8e:
0d:0b:b9:3e:f4:30:71:0e:06:62:e9:62:e0:70:9f:6d:c7:af:
b5:bf:ce:b7:e7:d0:e8:bd:19:a1:ab:a8:88:19:07:20:5d:8e:
59:01:05:0f:44:4d:f6:af:6c:50:27:c4:d8:be:a7:6f:c6:51:
62:e3:39:7b:e8:a7:04:0e:86:e3:29:74:23:8e:a5:77:31:4d:
e6:be:a4:73:1f:c3:d8:ca:d7:25:a7:73:48:7c:f2:4d:78:61:
ae:cc:a2:94:80:ec:5b:f7:21:a2:65:0e:ad:70:2e:dd:e0:05:
57:d8:ea:4b:85:a6:29:6d:ee:7c:cf:d6:ad:48:73:df:20:43:
a4:aa:10:84:ce:6d:13:38:c6:8a:6e:db:78:d3:d7:13:83:3e:
a7:49:18:3c:83:06:97:83:09:1b:bb:6b:87:2a:61:e2:4d:6f:
35:42:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:51:53 2025 by rpki-client