Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m7_ZP9gDf1uyNcOPQ8dPOJoxG6U.roa
File: m7_ZP9gDf1uyNcOPQ8dPOJoxG6U.roa (raw, json)
Hash identifier: kjHjxDdyZDZAUrEpJ1U+Amb8gB03TZ21IuAbhhFIFFE=
Subject key identifier: 9B:BF:D9:3F:D8:03:7F:5B:B2:35:C3:8F:43:C7:4F:38:9A:31:1B:A5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275E2A9172A5FB1504905DBFE29924
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m7_ZP9gDf1uyNcOPQ8dPOJoxG6U.roa
Signing time: Thu 02 Jan 2025 17:54:16 +0000
ROA not before: Thu 02 Jan 2025 17:54:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 94.177.51.0/24 maxlen: 24
188.240.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5e:2a:91:72:a5:fb:15:04:90:5d:bf:e2:99:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bbfd93fd8037f5bb235c38f43c74f389a311ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:6c:32:21:84:49:e2:fa:69:9c:9e:4b:2e:
7d:51:e3:9c:60:ef:21:af:0d:41:a0:64:89:c2:c4:
a9:b6:84:cf:f2:d3:d0:fd:ac:e4:2f:85:0c:7d:44:
51:9b:76:00:09:cd:8a:2b:0b:c9:ec:d0:75:f7:c6:
fa:c7:40:0c:f5:89:8d:c8:21:01:c0:de:67:c7:64:
f5:b8:90:9d:3c:56:01:6e:8a:93:1d:98:ec:5b:03:
23:09:6a:96:0c:9e:43:91:ed:6a:6e:77:82:90:bb:
39:2d:90:78:be:4b:12:f0:51:76:33:af:4b:0e:02:
6e:03:ca:f9:2b:1a:90:9d:71:cf:94:09:4c:02:fc:
ab:b2:dc:b8:66:e7:30:9c:91:e3:52:bb:d3:55:0c:
70:70:6e:7d:96:35:6e:a9:4b:aa:67:ac:d7:98:b7:
7e:85:8f:87:ac:f9:78:ed:44:cf:37:cf:37:e4:01:
f5:97:1e:77:5f:e6:b8:fa:54:65:d0:bb:a4:0f:66:
f4:82:c5:a3:2c:90:20:9d:1b:67:79:ff:2c:36:ff:
0b:ce:fd:f5:67:f5:c5:78:e0:48:5a:74:8d:6f:a0:
52:70:90:1a:e9:54:93:46:67:48:03:80:3c:c7:d5:
3c:de:c9:a2:57:0e:43:d3:2d:a1:1e:50:d2:33:69:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:D9:3F:D8:03:7F:5B:B2:35:C3:8F:43:C7:4F:38:9A:31:1B:A5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/m7_ZP9gDf1uyNcOPQ8dPOJoxG6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.51.0/24
188.240.213.0/24
Signature Algorithm: sha256WithRSAEncryption
82:bf:61:96:cc:22:cb:ae:65:8d:9f:8a:6f:0c:90:3f:a1:91:
2e:0f:0a:62:37:84:1f:62:87:85:fd:1b:f8:a1:95:c5:91:5e:
5f:64:2b:6d:23:c4:5f:3b:1c:43:5c:b1:52:28:7d:29:db:d9:
9e:da:ad:0d:65:bb:2b:ef:cd:48:7b:88:fc:a3:e4:29:49:6b:
ee:1a:c1:03:73:bf:20:7f:58:fd:8c:9d:c9:b5:5e:58:b3:6f:
e1:de:98:8b:38:5c:b0:ab:99:1a:5f:10:e7:b4:1d:7d:5c:fa:
cc:7b:eb:d2:a6:54:aa:34:43:35:68:f1:9e:4c:a1:eb:e6:94:
b0:8e:ac:5a:5a:85:8f:fc:84:94:72:84:39:69:85:6b:0f:14:
90:e8:d4:f0:b8:32:92:7b:f0:bf:9f:93:85:4a:38:87:ae:2c:
78:94:0e:d2:e8:72:a3:b5:28:9d:0d:35:c8:c4:4b:77:39:b1:
6c:6b:24:6f:67:7d:ac:48:ef:0f:1a:ac:04:34:0e:97:a0:4d:
ba:15:be:f2:36:fb:ef:b0:47:a3:7b:38:41:32:a2:af:7d:7d:
ac:57:62:ab:9e:51:83:38:bc:e1:d9:59:7d:c4:e5:f4:da:7b:
3a:d4:ce:8a:72:a9:66:21:8e:22:64:18:18:d9:60:0e:0d:22:
2e:9d:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:30 2025 by rpki-client