Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/7uBhUg1U8OiL4mgssHYwPwkKJrs.roa
File: 7uBhUg1U8OiL4mgssHYwPwkKJrs.roa (raw, json)
Hash identifier: qe2rw9SjAhTjzWJWyO7/LvmX898Pe709+tHdC1jP6UA=
Subject key identifier: EE:E0:61:52:0D:54:F0:E8:8B:E2:68:2C:B0:76:30:3F:09:0A:26:BB
Certificate issuer: /CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Certificate serial: 01942444AE3D947DA2EE7A1D4568B37717B2
Authority key identifier: A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/7uBhUg1U8OiL4mgssHYwPwkKJrs.roa
Signing time: Wed 01 Jan 2025 23:47:48 +0000
ROA not before: Wed 01 Jan 2025 23:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31388
IP address blocks: 176.105.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ae:3d:94:7d:a2:ee:7a:1d:45:68:b3:77:17:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a016588bd1ccb2dd221c6f87838567475d7ef29b
Validity
Not Before: Jan 1 23:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eee061520d54f0e88be2682cb076303f090a26bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:78:c2:d7:d9:2a:38:92:8d:90:0b:b3:82:
cc:f8:57:27:b0:fc:18:fd:20:69:f2:81:82:9c:df:
df:c7:d8:0a:2b:bd:9c:fb:33:ce:d1:45:a0:a1:2e:
1b:b3:15:d3:1b:9b:79:fa:03:60:f8:de:98:56:ef:
80:ab:6d:dd:4e:38:e4:78:f8:e6:da:be:7b:cb:f0:
cf:e5:41:e6:78:1a:b7:df:1b:8a:4c:34:9c:49:7f:
f8:cb:24:fc:6e:6d:a7:ed:bd:a1:a7:cf:e5:23:eb:
52:28:6f:d3:b6:e9:81:bf:1b:d8:47:ef:a7:76:fd:
e7:60:f5:12:1e:20:bb:b5:4b:e9:69:ad:e7:19:17:
1b:57:87:75:53:85:e3:ab:f3:02:79:b9:3b:82:92:
f4:b4:e9:45:b7:87:8c:10:bc:2e:12:1f:38:49:32:
2a:c1:01:7d:ff:97:74:65:e7:5a:18:49:c6:48:cc:
52:8f:01:14:bc:6f:2d:30:12:04:9f:45:7b:49:6e:
b9:22:67:4b:49:aa:0b:54:40:87:af:dc:af:4f:d8:
d2:60:66:ba:64:3e:a3:02:c7:19:2f:18:0a:bc:76:
01:c0:fe:fb:09:f9:78:5d:1c:44:7b:b1:b7:d9:3a:
b3:44:d6:af:a3:dc:a3:62:00:2f:ab:80:86:cc:40:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:61:52:0D:54:F0:E8:8B:E2:68:2C:B0:76:30:3F:09:0A:26:BB
X509v3 Authority Key Identifier:
keyid:A0:16:58:8B:D1:CC:B2:DD:22:1C:6F:87:83:85:67:47:5D:7E:F2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBZYi9HMst0iHG-Hg4VnR11-8ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/7uBhUg1U8OiL4mgssHYwPwkKJrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4ec569-8caf-4198-bae1-773120ff7c0f/1/oBZYi9HMst0iHG-Hg4VnR11-8ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0f:98:61:d7:46:09:90:8c:60:bd:e3:68:e8:07:b1:92:b2:
27:ee:5d:71:0a:fa:8b:aa:07:d2:90:12:29:b0:10:81:2e:c3:
63:a4:1a:e7:3d:bf:8f:5d:8e:17:4f:c9:c0:6d:5f:ba:bb:7c:
ef:13:68:e8:ba:2f:ee:8b:0e:94:d6:6f:4f:b0:ee:ce:19:03:
8d:b6:4e:c0:24:23:1f:16:f9:33:df:3e:9b:8a:b6:1c:c0:e7:
df:25:bb:87:40:e8:26:6e:29:0a:9e:06:94:5a:5a:d7:a0:a2:
e8:86:a0:37:4e:35:41:2f:37:c0:c0:0b:dd:e4:91:42:85:4b:
bb:53:7a:e4:27:83:8c:f3:1a:44:c4:da:47:89:71:39:42:21:
ff:b3:ac:61:51:56:8c:b7:d5:15:b6:f4:d6:a0:18:24:e4:52:
d5:10:21:46:14:cc:82:f4:b9:20:0d:db:89:fc:1a:68:c0:a5:
d7:15:4f:69:7d:fc:4c:47:e8:0b:1a:ac:ab:a7:60:01:cd:8f:
76:2c:e6:32:88:aa:80:3a:dd:d3:ee:7b:c1:05:a4:e2:dd:16:
e2:8e:9c:3f:2f:8d:71:f8:9f:d4:eb:cb:8f:23:b3:b9:28:d8:
2b:cc:37:4b:2b:ca:f8:18:61:d8:02:31:87:42:ca:34:44:7f:
7a:17:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:57:34 2025 by rpki-client