Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/J7gZFbpwbQ3l58heUCupO_rw9SI.roa
File: J7gZFbpwbQ3l58heUCupO_rw9SI.roa (raw, json)
Hash identifier: 3O3YSRLT+CEf3bqQzHcFcD73p8jJc1vMJRrl8kOmCOY=
Subject key identifier: 27:B8:19:15:BA:70:6D:0D:E5:E7:C8:5E:50:2B:A9:3B:FA:F0:F5:22
Certificate issuer: /CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Certificate serial: 019427470345227D0B6ED567427A8730EA3D
Authority key identifier: E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/J7gZFbpwbQ3l58heUCupO_rw9SI.roa
Signing time: Thu 02 Jan 2025 13:49:12 +0000
ROA not before: Thu 02 Jan 2025 13:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203257
IP address blocks: 185.140.192.0/24 maxlen: 24
185.140.193.0/24 maxlen: 24
185.140.194.0/24 maxlen: 24
185.140.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:03:45:22:7d:0b:6e:d5:67:42:7a:87:30:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739db90c1ce98431df348a1376e53ac6e0523c
Validity
Not Before: Jan 2 13:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b81915ba706d0de5e7c85e502ba93bfaf0f522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:ad:fb:29:e8:bd:4f:c4:7f:62:10:9e:5c:
f3:80:a2:6d:b5:36:97:85:bb:4a:9a:67:d0:2f:5b:
12:30:6d:68:a2:2d:6a:24:cf:94:3e:ea:b6:17:de:
12:77:a2:ab:5b:e8:b6:32:6f:e5:a6:b7:34:71:31:
ad:d3:42:7e:ce:60:71:90:fe:84:bb:17:d6:b0:27:
46:bc:83:58:a3:3c:17:57:ea:bf:58:d0:02:d5:64:
0a:e9:4d:dc:d3:15:e5:f3:ee:f1:78:74:f3:3f:99:
64:83:da:22:25:6f:c5:05:a4:25:07:30:9a:7a:a2:
54:95:cc:d9:6f:7b:9a:b5:8b:81:a1:3d:11:6e:82:
32:f4:53:59:47:a5:e9:cd:93:59:17:23:3a:ab:ad:
c4:21:ab:88:de:d2:37:28:71:33:bd:8d:38:85:bc:
91:ab:06:9e:1e:ae:71:ed:ef:ea:9d:55:4b:82:8f:
fc:ed:45:4e:42:ee:e3:66:08:bf:79:df:25:45:e8:
c3:a9:00:6d:96:8d:1c:4e:46:0c:83:ff:ea:54:db:
96:dc:b0:be:d9:f6:f1:5b:31:17:14:e1:a5:5a:a4:
a5:22:d4:4e:62:cc:41:4a:f8:5e:9d:bf:aa:00:95:
76:d9:79:e1:88:c1:b7:0d:d7:c6:df:60:7e:20:fd:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:19:15:BA:70:6D:0D:E5:E7:C8:5E:50:2B:A9:3B:FA:F0:F5:22
X509v3 Authority Key Identifier:
keyid:E7:73:9D:B9:0C:1C:E9:84:31:DF:34:8A:13:76:E5:3A:C6:E0:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OduQwc6YQx3zSKE3blOsbgUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/J7gZFbpwbQ3l58heUCupO_rw9SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/547034-395c-43f0-a34c-19428f92c1cc/1/53OduQwc6YQx3zSKE3blOsbgUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.192.0/22
Signature Algorithm: sha256WithRSAEncryption
48:2c:7d:76:a2:af:1e:18:a3:d7:a3:31:f5:4a:12:10:6f:61:
1c:39:08:6b:6f:12:47:14:3e:68:9f:8e:20:74:0b:c2:eb:c9:
76:c0:36:34:e9:ee:15:83:fb:72:d6:fc:45:d8:ee:4f:2d:59:
d5:39:77:7c:97:2b:1e:5c:ef:fd:c7:07:72:f1:6b:d7:3f:f8:
97:6d:ec:08:e7:27:51:94:e8:ec:9d:5f:5a:f7:65:18:f4:24:
0e:5e:5a:de:57:c7:65:58:5b:4d:c6:5f:b5:db:06:0b:70:d4:
c7:a8:16:ea:dd:57:68:31:c2:f4:19:fe:f0:06:3f:a1:39:ca:
40:88:1b:59:fb:45:cd:55:0c:d6:bc:5a:2c:0d:1e:a8:76:9f:
9e:ce:c4:e0:e7:ca:6c:d9:a5:3a:cd:42:2a:e4:24:66:aa:2d:
07:5f:4e:0b:2c:b3:91:ea:8e:00:1a:5a:d6:a9:1b:8e:3b:03:
2e:aa:88:a1:ba:66:c1:d9:54:02:9e:c5:12:21:2e:a7:3f:00:
67:95:23:12:13:0c:4d:ad:68:ba:39:34:f9:3c:5a:45:34:10:
aa:90:0c:97:78:ce:8a:7e:98:f9:11:04:e4:7c:28:fb:68:0f:
6c:3b:8a:88:a7:19:69:b7:81:35:b5:14:51:a6:1c:56:9a:76:
25:ba:aa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:23:46 2025 by rpki-client