Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa
File: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (raw, json)
Hash identifier: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=
Subject key identifier: 7E:9B:8E:D4:A8:17:1D:AC:08:A8:A9:0C:44:80:E5:9D:13:D3:43:B5
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 019425FD45B289F23015A11ACDC4F6E2E808
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa
Signing time: Thu 02 Jan 2025 07:49:02 +0000
ROA not before: Thu 02 Jan 2025 07:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24634
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:45:b2:89:f2:30:15:a1:1a:cd:c4:f6:e2:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Jan 2 07:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e9b8ed4a8171dac08a8a90c4480e59d13d343b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:cb:13:f6:5b:77:3e:0c:04:b6:bd:6f:ae:
9e:0a:70:73:44:a2:bf:85:1e:7f:0e:04:00:33:0a:
56:1e:d2:e5:00:58:0f:b3:dc:41:db:3b:93:9d:ba:
e1:ad:3e:99:f5:2f:8d:76:a2:24:5f:a4:1b:ea:7a:
11:ce:72:87:5a:67:05:00:5f:c0:7a:3f:3b:6d:1c:
5d:a4:c2:90:56:b1:73:ac:ed:f5:13:53:91:cd:04:
1c:45:a7:31:e3:8d:e5:4c:ab:a2:54:78:d8:e2:00:
10:20:82:b5:3a:aa:63:8e:b2:b4:16:32:b1:1b:1a:
44:35:b8:1a:23:2b:cc:e1:59:eb:68:8b:ca:a0:f5:
20:42:68:6f:67:82:3d:e6:cf:19:f3:1d:af:d4:a6:
b3:af:a9:50:a7:bb:78:08:76:1c:38:e9:b1:84:5c:
93:4c:70:fe:bf:11:1a:55:60:29:f9:5b:28:71:a2:
83:d4:6e:28:98:97:8e:22:bc:ed:ca:c3:b5:4c:ff:
01:66:69:18:7d:3c:f1:72:9e:70:ae:96:1c:03:55:
ea:48:67:42:bd:55:af:b3:50:87:82:dc:6d:d5:9c:
7b:db:a9:9a:ef:c5:34:a3:f7:8c:f1:35:4f:95:47:
e1:96:67:c2:c1:76:26:c8:cf:b4:3c:9d:fb:ad:ff:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:8E:D4:A8:17:1D:AC:08:A8:A9:0C:44:80:E5:9D:13:D3:43:B5
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
9d:61:27:74:3f:f0:51:35:44:9a:6b:77:57:cd:65:dd:84:fc:
4a:55:e3:ca:0d:26:04:f4:b4:8c:64:b3:1a:39:8f:09:87:fe:
ca:c7:fe:dc:2f:ee:80:71:35:9a:b7:3b:1e:2e:89:9a:80:09:
8f:a2:b8:dc:cf:38:e6:7b:77:e5:f2:98:16:40:67:e7:d5:bd:
2f:5f:37:c3:63:19:33:df:6c:7d:c5:02:d9:b3:4b:72:4e:d7:
78:6f:fd:72:e3:cd:02:e9:b7:ea:65:d9:fb:88:2a:05:1f:80:
d0:a6:15:58:b4:47:30:d7:a8:30:ed:6e:01:b2:78:f9:54:5b:
f4:d2:e8:5f:60:36:59:ab:37:0d:b4:d8:cb:70:cb:b4:fe:88:
b6:83:7f:c3:57:96:b6:a5:87:3c:5b:b5:8e:20:51:06:b9:ab:
bd:b3:0d:0f:be:ec:bf:47:2b:e5:4e:03:b7:c1:4c:54:a6:c4:
22:1d:16:c0:17:81:89:38:c2:76:a4:cd:33:88:3b:97:ec:61:
cf:b2:90:54:4b:d9:ce:17:a3:a1:a2:19:15:a5:89:24:28:28:
06:11:2b:db:ca:25:6b:1d:ac:65:d1:55:0b:0f:34:86:c0:99:
fe:51:25:00:d6:02:52:22:e8:11:ce:fe:f7:ed:4a:12:2d:7c:
e9:1e:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:21 2025 by rpki-client