Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7A7LKn1o95EwmimmbWgqoklIVI0.roa
File: 7A7LKn1o95EwmimmbWgqoklIVI0.roa (raw, json)
Hash identifier: BxZahgdbCLqm11e9NAIm5qcVZ6JaeYg01ekAjT/+ryA=
Subject key identifier: EC:0E:CB:2A:7D:68:F7:91:30:9A:29:A6:6D:68:2A:A2:49:48:54:8D
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA7B43C12A0987EFF1F4ABAF90E4C5
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7A7LKn1o95EwmimmbWgqoklIVI0.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204192
IP address blocks: 94.40.7.0/24 maxlen: 24
94.40.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7b:43:c1:2a:09:87:ef:f1:f4:ab:af:90:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec0ecb2a7d68f791309a29a66d682aa24948548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:49:ec:20:09:12:30:1a:29:ad:0f:c7:de:
ce:9e:96:09:3d:1b:6d:3c:d2:fe:60:1a:a7:74:ee:
bc:5d:2a:80:64:fa:76:47:4a:3f:1a:dd:f4:5c:8a:
94:3d:2c:f2:e2:ff:e0:12:00:97:86:78:a1:6a:34:
1c:16:3a:9b:7f:3d:0b:f9:e3:c4:d0:ef:2b:a6:56:
d1:a1:51:6a:ad:42:c8:b6:e8:89:28:d9:b9:1a:70:
41:12:84:57:d8:a1:67:b9:5a:08:4d:06:81:f8:9c:
87:40:69:03:f2:f1:6b:8f:70:3f:ce:e2:61:8b:56:
17:a6:3f:55:38:51:b3:a7:2a:9e:78:58:8e:b5:37:
9c:d4:2e:19:f0:a9:3b:df:ef:f9:a9:26:4b:c1:df:
7d:c3:57:98:e8:7b:75:71:34:80:e0:6d:4e:5f:64:
f2:84:e1:07:13:25:d2:64:b7:d5:36:7a:fd:c2:a5:
d8:6e:16:3f:ae:7c:a6:97:eb:4a:f3:6c:a7:52:c6:
62:51:3b:00:ed:11:f3:40:69:15:bf:c5:31:10:c7:
4b:d8:03:6b:9a:5c:ee:cf:d7:53:32:33:f6:9a:d4:
ac:e6:95:f7:43:da:b0:76:e8:5e:b6:57:50:59:ba:
28:04:29:28:6a:da:a8:5d:fc:c8:99:4d:4d:7e:3d:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:CB:2A:7D:68:F7:91:30:9A:29:A6:6D:68:2A:A2:49:48:54:8D
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7A7LKn1o95EwmimmbWgqoklIVI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.40.7.0-94.40.8.255
Signature Algorithm: sha256WithRSAEncryption
26:0f:f9:17:6e:5a:f3:a2:5d:24:5b:3d:a7:28:ff:8a:aa:56:
96:6d:ff:e9:eb:0a:72:db:a4:25:c3:3e:f2:96:1a:9b:07:46:
2e:e6:b8:69:e4:71:4e:d5:35:5f:58:e4:ef:a2:38:4a:82:a9:
0b:0f:5f:c1:91:53:94:bd:20:bf:cb:71:7c:46:7e:23:86:a1:
8f:a9:38:01:62:0f:34:c4:18:14:40:16:f9:84:a7:64:c8:bb:
82:d9:f1:d2:33:e6:f2:9b:b4:cc:80:88:f9:7c:6f:a2:1f:ff:
0a:21:88:4f:79:3d:71:c4:7b:bd:ed:87:5f:14:54:ec:2f:76:
26:f8:ad:2e:1f:49:bd:75:d5:6b:57:e5:b0:fd:2d:db:ff:16:
68:01:a7:ac:60:b6:cd:4b:1f:d2:ac:fe:f8:3f:37:8d:be:55:
22:91:49:f7:de:d1:82:7c:39:d6:ec:8d:82:32:c8:d5:8a:2c:
55:4a:40:e8:7e:71:a2:53:fa:4a:67:c8:f4:ae:42:49:81:5e:
d9:fd:15:84:ea:80:60:49:65:3b:08:a6:60:80:17:19:85:86:
bf:61:51:a1:6e:80:d3:17:d2:6c:02:81:62:2a:bf:a2:7c:c3:
e5:f8:f0:ee:b2:24:ae:50:be:f6:eb:9e:b9:f8:09:4f:7c:28:
89:d9:2b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:28:33 2025 by rpki-client