Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_7biCjiJlNPpEg1KlRJfmLQ6z4.roa
File: K_7biCjiJlNPpEg1KlRJfmLQ6z4.roa (raw, json)
Hash identifier: Gq4tflsJojiNPrDqGgGLXs7wTSCJzxUzUDMNplecg30=
Subject key identifier: 2B:FE:DB:88:28:E2:26:53:4F:A4:48:35:2A:54:49:7E:62:D0:EB:3E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275D4E79C2842E95487E54EF906D81
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_7biCjiJlNPpEg1KlRJfmLQ6z4.roa
Signing time: Thu 02 Jan 2025 17:54:15 +0000
ROA not before: Thu 02 Jan 2025 17:54:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49532
IP address blocks: 37.153.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5d:4e:79:c2:84:2e:95:48:7e:54:ef:90:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bfedb8828e226534fa448352a54497e62d0eb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5a:24:c2:86:f7:11:50:11:34:ba:60:7c:90:
d6:63:94:8d:80:97:3e:1d:b9:62:c6:82:24:6a:6a:
aa:4d:6d:06:09:c4:0e:15:af:29:26:45:a1:79:03:
88:39:9c:fb:87:02:91:ab:ec:33:5c:f2:69:b0:b8:
a0:cf:8b:a2:3a:0f:db:58:00:b2:ba:ce:d9:e9:4a:
29:f5:96:8a:1f:8d:16:8c:f3:f7:3a:6d:9e:53:06:
a7:99:be:95:68:22:da:32:2c:8a:09:d9:67:68:02:
eb:52:ef:a1:f7:94:30:bd:de:ab:18:80:ca:0d:dd:
fc:cf:a4:cf:90:54:fb:31:1b:72:c5:40:06:ba:7d:
a0:89:7c:20:50:df:30:f2:f2:69:4c:8a:3b:e9:9a:
7e:98:ba:c5:de:a3:9b:c4:c9:2a:b3:cf:de:b9:2b:
15:62:53:17:45:96:2b:a8:64:9b:1a:73:46:60:cf:
a1:d2:15:81:c9:21:f1:26:4f:ec:20:bd:e0:49:d1:
99:9e:4b:60:9e:e9:8c:11:39:96:3b:54:e1:67:c4:
be:17:ec:2f:03:81:5d:fd:6b:42:5d:fb:63:9e:ea:
7e:2f:c5:4e:f8:c0:1f:00:68:0e:c9:64:82:bd:f6:
a1:9f:b3:5b:84:ee:b0:c6:94:b3:3c:f1:a7:1b:9c:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:DB:88:28:E2:26:53:4F:A4:48:35:2A:54:49:7E:62:D0:EB:3E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/K_7biCjiJlNPpEg1KlRJfmLQ6z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.158.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7c:df:42:4b:a5:93:2c:9d:a4:79:58:8c:c4:0b:55:2b:a3:
74:93:f5:1f:35:5c:1d:7e:5f:e2:df:bd:1a:95:1b:c6:65:62:
ca:cf:49:10:62:81:ad:4e:93:1a:46:99:ff:21:36:5b:24:b9:
be:91:16:7d:39:de:24:fe:a5:c4:45:ba:06:6a:8c:c6:c6:84:
7b:99:ba:38:61:e2:d6:6a:18:71:02:f7:65:3d:05:02:b5:e8:
d5:86:36:60:49:2f:6e:5d:92:14:dd:75:51:66:f9:47:b7:68:
e6:f9:17:14:6b:a6:89:de:f2:ce:51:bc:e3:81:1d:ac:bd:18:
da:7c:ad:be:ce:a4:70:08:a9:08:b3:c8:55:8f:e2:04:c1:aa:
bf:66:d2:bb:96:c2:8a:02:7c:1e:b2:87:f6:d2:f1:22:fd:a7:
28:48:6e:48:3b:2c:4a:19:27:13:2b:dd:3a:a6:47:dd:5c:7e:
ae:06:9f:8c:30:62:f8:bc:83:d5:07:05:f6:b8:8a:13:dc:29:
7c:65:ad:c6:58:ff:ff:d5:22:af:a6:59:f4:a8:29:3a:a4:09:
c7:ba:99:df:9d:74:1c:c9:7d:43:85:9e:d5:c1:18:99:44:60:
3f:5d:e2:d4:96:60:a5:d1:11:28:5e:de:6b:90:bc:85:c3:fc:
ce:38:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:46:26 2025 by rpki-client