Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/7EbuG3-0BaX89LTHJW4crEKXOgE.roa
File: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (raw, json)
Hash identifier: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=
Subject key identifier: EC:46:EE:1B:7F:B4:05:A5:FC:F4:B4:C7:25:6E:1C:AC:42:97:3A:01
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019424B3FB1AE367EA7A9E5362EB0D0583D8
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/7EbuG3-0BaX89LTHJW4crEKXOgE.roa
Signing time: Thu 02 Jan 2025 01:49:22 +0000
ROA not before: Thu 02 Jan 2025 01:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16376
IP address blocks: 185.202.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:fb:1a:e3:67:ea:7a:9e:53:62:eb:0d:05:83:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Jan 2 01:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec46ee1b7fb405a5fcf4b4c7256e1cac42973a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:2c:3a:9f:14:e6:bc:09:85:9f:4b:75:a7:
2e:f2:15:ca:6b:8a:24:fc:8f:8f:cc:08:37:c4:d3:
b2:8a:20:de:65:da:a3:3b:4c:51:02:2a:6f:7a:c1:
c7:a0:ee:f3:83:5d:63:4f:29:8f:1f:cb:e1:c3:c9:
14:79:c9:df:64:bf:33:97:37:08:70:3f:39:02:33:
5d:c8:41:27:85:57:45:0b:f2:69:f6:61:58:c3:dc:
8f:ee:f0:0c:f1:ae:8f:fc:19:85:82:db:c2:6f:af:
3a:6c:d5:c5:a6:d2:85:10:9a:c3:42:11:2c:0e:69:
3d:87:50:ed:cc:3c:8f:13:fa:f5:95:95:1d:e7:ee:
b2:2f:e4:6b:e2:17:e8:3a:19:04:32:56:f9:63:d5:
ac:77:83:33:fe:03:3b:0f:b1:90:ed:4e:db:56:f3:
df:56:21:db:3e:45:6d:31:bd:2c:f3:6c:9f:ca:67:
0e:23:59:c9:ec:a3:99:f3:1c:d8:cd:f8:c1:1a:17:
ce:5b:c6:06:be:f0:72:e3:1d:3d:09:fa:6e:a8:92:
bc:16:7f:ca:52:b9:ff:95:8a:9d:b4:73:12:2f:5f:
2e:b6:b3:18:a5:93:c9:c9:87:4c:fc:a9:4a:18:b4:
44:c3:06:1f:17:c9:3b:b7:57:58:9f:0a:73:dd:f7:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:46:EE:1B:7F:B4:05:A5:FC:F4:B4:C7:25:6E:1C:AC:42:97:3A:01
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/7EbuG3-0BaX89LTHJW4crEKXOgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.115.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a6:0b:c2:c7:fe:d6:a1:ca:0d:b5:58:f3:6b:ff:dd:b3:32:
3b:8c:f9:83:8f:6f:8f:cb:90:76:18:3c:40:92:25:36:b1:a0:
63:dd:c6:85:47:b0:6d:70:a5:5f:57:71:36:2e:5b:f4:8a:3d:
3d:ff:f6:7c:61:64:c1:4b:1d:86:f4:61:e2:4d:44:37:c9:3f:
8a:ea:82:8c:9b:cb:73:0e:c9:5e:e0:e1:8f:6d:2c:a3:e3:38:
eb:8a:ed:4b:e0:d1:58:4c:d2:ce:8e:d2:04:ab:65:ee:22:94:
1a:24:e7:93:00:69:01:06:68:95:95:71:ab:0b:b8:76:49:49:
2a:a7:0a:71:99:34:0e:c0:88:64:9e:b7:1e:63:4d:2e:c4:cb:
41:7e:d9:9c:e2:81:98:64:ba:25:24:80:aa:dd:ba:f0:41:16:
c8:c2:cc:e1:1b:c7:27:c9:08:13:00:dc:ca:3b:b5:93:d4:fc:
fd:58:df:e2:27:b9:f0:45:30:75:12:b3:e2:32:f5:0e:0d:db:
d8:a7:35:94:3f:18:c8:82:e9:27:67:d0:06:29:2b:91:39:e1:
83:51:cb:2c:21:e5:66:73:f5:2b:f5:c7:10:1c:48:30:bf:17:
0e:73:70:cd:7b:3b:14:a8:7d:2c:ee:6a:1d:e1:8f:fb:69:a6:
01:94:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:41 2025 by rpki-client