Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7IVCSk22Euoo9rkBNO3crxMoQtk.roa
File: 7IVCSk22Euoo9rkBNO3crxMoQtk.roa (raw, json)
Hash identifier: ht0o/ocu6eYL59VEPcN2Sk0RdmNoH7xF3YOBIJ3r2Qw=
Subject key identifier: EC:85:42:4A:4D:B6:12:EA:28:F6:B9:01:34:ED:DC:AF:13:28:42:D9
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369893C8A6A27BC0B9FAD2DFBFECB31
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7IVCSk22Euoo9rkBNO3crxMoQtk.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33829
IP address blocks: 188.241.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:89:3c:8a:6a:27:bc:0b:9f:ad:2d:fb:fe:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec85424a4db612ea28f6b90134eddcaf132842d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:77:63:86:c2:ab:c8:a7:c4:da:24:17:59:4f:
55:e9:bc:86:c8:81:ec:3f:65:dd:b5:6c:1c:47:d4:
28:ae:70:44:5d:47:09:fb:77:38:2c:45:8a:10:e9:
73:91:40:e7:2e:15:01:30:46:ed:df:44:8b:b4:15:
e3:68:a7:a8:14:00:be:ed:23:59:5a:13:9d:b0:a2:
9c:2e:7a:4f:c1:dd:97:3f:d6:f4:e8:5f:80:64:0b:
6e:d0:b7:d6:ac:c4:7e:75:62:1c:0c:86:53:f2:3c:
56:71:db:44:d9:5a:ea:63:be:68:6f:ca:48:00:af:
dc:a1:56:5d:88:92:c4:9b:f6:5b:56:e8:90:d6:94:
4d:1c:6b:0b:ed:db:8e:e3:89:88:d8:0b:c2:10:aa:
63:8b:96:f8:05:48:24:ac:b6:7e:08:7f:5d:fc:72:
8d:db:f0:50:d3:91:40:c1:c3:cf:d1:70:05:68:2b:
4f:e7:0c:d2:98:ff:12:f8:24:ee:fe:2f:12:c3:5e:
cc:33:f3:a1:4c:5f:9e:9b:b0:18:54:48:e7:7e:19:
52:09:2c:14:2b:cc:13:3e:1d:57:22:06:fd:f3:2f:
4c:46:a5:9f:6e:3a:3c:7b:af:ef:b7:d8:d2:23:93:
96:63:1d:f9:e3:3d:7f:f3:1b:68:71:3d:ea:57:99:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:42:4A:4D:B6:12:EA:28:F6:B9:01:34:ED:DC:AF:13:28:42:D9
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7IVCSk22Euoo9rkBNO3crxMoQtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.64.0/24
Signature Algorithm: sha256WithRSAEncryption
71:52:bf:81:32:64:37:4c:5b:45:a0:4e:05:06:64:25:1d:3a:
ed:82:07:a0:8a:ba:95:12:81:48:13:be:0d:a6:0a:db:56:61:
7c:7f:ae:f4:51:00:2f:d8:e0:a4:e3:be:21:50:3c:ea:37:d3:
8f:07:93:26:17:e1:fe:73:78:3a:2e:38:1f:cc:b6:0d:e2:28:
45:05:03:df:f7:de:12:a1:24:18:81:ee:48:63:c0:4e:77:b9:
41:67:2c:01:23:b1:f0:90:0b:3c:bb:3e:ec:3a:95:ed:f5:e9:
a2:f7:66:88:ea:e1:dc:7a:00:cb:f1:84:6c:cd:e4:1e:91:98:
c7:82:6a:2a:04:d6:c4:4b:ca:f1:d0:54:c7:57:18:2d:32:31:
be:02:27:26:e5:a9:aa:fd:87:18:9c:e4:af:01:f0:73:c8:a8:
f1:c5:4d:eb:02:d6:89:17:b5:43:1c:ec:ec:d8:f8:3f:6c:88:
49:00:d1:ce:77:59:10:6b:f5:ac:75:c9:e7:f6:54:1b:d7:f7:
47:51:9f:9b:c6:09:c6:66:2b:11:19:22:16:12:69:34:8d:10:
52:36:c8:a6:d3:49:b9:46:44:96:78:e0:e6:34:0a:7c:56:d0:
e0:af:4b:80:7c:75:c6:8a:88:07:bd:6a:cc:31:c5:70:06:59:
3e:31:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:18 2025 by rpki-client