Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7DqoxocE5xS3w5L7wMdyO2HmCc.roa
File: F7DqoxocE5xS3w5L7wMdyO2HmCc.roa (raw, json)
Hash identifier: 7stNZPmA4cb7pVtBMMlz5U8XgEM9vvrg7VX+ShSmnVE=
Subject key identifier: 17:B0:EA:A3:1A:1C:13:9C:52:DF:0E:4B:EF:03:1D:C8:ED:87:98:27
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01942827677E26525DB607C612AA9D41A95F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7DqoxocE5xS3w5L7wMdyO2HmCc.roa
Signing time: Thu 02 Jan 2025 17:54:18 +0000
ROA not before: Thu 02 Jan 2025 17:54:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 212.192.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:67:7e:26:52:5d:b6:07:c6:12:aa:9d:41:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b0eaa31a1c139c52df0e4bef031dc8ed879827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:35:01:66:93:90:ba:b1:69:ad:e0:f1:5d:
1c:5f:35:ee:45:31:e3:4e:56:0c:90:1d:52:7f:f7:
fb:32:f3:21:08:75:b5:89:5a:37:ba:94:0e:eb:81:
7c:4c:6d:73:8f:a1:83:9e:fa:97:1a:66:8c:c0:6f:
e2:4b:bb:bf:5b:e9:a6:32:a8:94:a0:d4:d1:09:04:
8b:3b:d3:62:31:24:7f:25:09:a6:5b:59:75:6f:2b:
48:5a:11:d7:6e:da:5a:45:9f:98:0f:87:00:c4:6e:
8d:4d:3f:26:08:9e:4c:50:cd:51:45:2b:9e:48:a7:
8a:ca:1b:9a:1f:80:4d:07:5f:5a:93:aa:ed:40:3c:
12:4e:1b:44:53:7d:79:9b:0f:77:b7:99:b7:da:3f:
53:37:54:5a:e1:33:9d:77:0b:06:6c:b0:89:0d:8b:
bd:5f:7e:c4:66:95:88:ca:ce:cf:7c:c7:cd:7e:2a:
3a:de:15:70:92:ec:de:07:ea:b5:ba:b5:ed:53:81:
b0:01:01:f5:86:0b:05:5a:cf:7d:d5:2b:83:a9:ef:
59:d6:f0:17:18:6f:36:8d:b9:a4:13:17:5f:73:4f:
9b:17:41:6e:d0:96:82:cd:26:f7:31:94:15:cd:0d:
fd:70:b2:0a:32:41:8c:e3:fd:a3:ca:c9:2b:36:ce:
19:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B0:EA:A3:1A:1C:13:9C:52:DF:0E:4B:EF:03:1D:C8:ED:87:98:27
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/F7DqoxocE5xS3w5L7wMdyO2HmCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fe:6c:0c:c9:ca:ed:25:11:d7:02:49:55:c4:92:a4:54:40:
89:39:56:c6:54:f5:d3:c9:9e:60:6b:85:71:bb:04:57:83:e7:
60:e8:06:b6:a2:b6:e3:89:7d:a8:df:de:06:68:bb:e5:a2:e8:
49:27:7e:8b:67:38:79:8c:6a:25:5b:3d:8e:3a:2b:7e:b2:47:
a3:38:17:2f:13:7f:2d:e5:22:b8:9f:7c:57:fd:02:45:11:46:
7d:55:7e:e4:a6:bd:0c:16:db:3e:36:66:94:9b:dc:8a:52:2c:
8d:34:51:93:f9:d2:ae:9e:06:3f:9c:54:e9:df:7a:3b:71:40:
1f:78:74:c5:32:15:7f:9e:63:06:08:5f:6c:3d:73:77:be:54:
91:40:42:f4:56:e1:ec:12:d1:70:b5:a4:61:a4:05:62:72:c2:
cb:6a:2d:3f:12:ce:9e:f5:fe:a4:0f:f4:ce:fb:45:4f:39:e3:
40:07:75:d1:06:52:99:a0:ce:d3:ca:fe:14:34:93:5d:3e:81:
60:99:1c:c5:9f:01:f5:bf:e5:1b:95:5b:ee:9a:d9:ab:89:0b:
e6:16:5b:2d:0d:ba:bf:6b:b6:ac:15:16:b4:90:59:fb:da:d6:
51:fc:85:33:be:03:d0:e7:08:a5:15:e7:c9:ab:dd:c7:1b:25:
38:c9:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:12 2025 by rpki-client