Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/iId92xKtiFHP1gLGCJzcRznJ-x8.roa
File: iId92xKtiFHP1gLGCJzcRznJ-x8.roa (raw, json)
Hash identifier: K/cBgrLnI3n5D0y566D4mvg3caFRpTqECvwpfj65k50=
Subject key identifier: 88:87:7D:DB:12:AD:88:51:CF:D6:02:C6:08:9C:DC:47:39:C9:FB:1F
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 0194228D59367C43D21539D1C0FC1066A951
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/iId92xKtiFHP1gLGCJzcRznJ-x8.roa
Signing time: Wed 01 Jan 2025 15:47:56 +0000
ROA not before: Wed 01 Jan 2025 15:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 62.122.126.0/24 maxlen: 24
91.224.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:59:36:7c:43:d2:15:39:d1:c0:fc:10:66:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88877ddb12ad8851cfd602c6089cdc4739c9fb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:02:b8:d3:2f:35:fb:46:ac:f2:88:0f:e1:
09:84:59:9c:26:f6:ad:41:e6:90:96:cb:04:40:6a:
fe:a2:f8:74:8c:02:c8:a9:a8:b5:a3:8e:2a:7b:7b:
be:54:5b:8b:d8:87:bc:8a:43:f3:b1:29:81:98:99:
61:c4:2e:40:c8:42:24:24:99:78:39:a2:dc:57:77:
f2:72:fa:23:84:c9:df:46:dc:5c:72:06:06:d4:22:
89:18:32:3d:f3:90:e5:27:9a:ad:75:44:78:fa:b4:
11:f4:5e:f4:e3:c5:09:66:8f:27:05:b6:6c:51:d3:
61:b4:f1:7c:11:c7:4a:ac:8c:23:97:ad:7a:12:89:
78:6f:2c:0f:a6:d6:dd:15:ef:62:15:86:84:a5:2a:
2f:c6:e8:12:9f:05:57:db:5e:d9:b8:b1:23:1c:55:
cb:ae:59:62:a5:53:a9:1c:0d:0e:fd:e2:bb:f7:cb:
9d:3a:c6:2f:e9:a3:56:52:29:12:12:18:9c:0c:7c:
a8:91:7e:fd:45:1c:af:97:d3:fe:ac:4e:02:93:3b:
75:e7:ae:00:f8:ec:84:cb:0c:25:02:6e:59:62:9a:
7e:55:f3:4f:c3:74:2d:e3:e5:90:64:f0:3f:ef:66:
c6:7e:6a:63:bf:03:c5:c0:24:a4:a1:f4:f9:16:8e:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:7D:DB:12:AD:88:51:CF:D6:02:C6:08:9C:DC:47:39:C9:FB:1F
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/iId92xKtiFHP1gLGCJzcRznJ-x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.126.0/24
91.224.117.0/24
Signature Algorithm: sha256WithRSAEncryption
70:14:65:7e:26:ba:82:14:e7:5d:fa:03:32:1f:a8:e3:79:00:
47:2d:39:6d:96:55:ae:cc:25:cf:29:85:cc:bd:39:0f:ce:1a:
ce:61:8b:3d:80:08:93:97:0f:9d:cd:9f:4a:d1:9d:55:62:d8:
e7:0f:9c:2e:a1:b7:20:ef:76:49:1b:e8:bb:38:d7:1b:96:8f:
e8:cf:22:e0:98:aa:71:60:63:22:8d:70:fa:0e:8d:c7:50:d5:
9a:65:66:26:9b:c2:de:bc:8e:5a:88:42:27:72:9e:c2:c3:d9:
f5:0c:e5:25:ca:5a:9b:68:11:0d:43:2f:1c:38:a7:b1:71:22:
0e:ed:c3:60:c2:7f:88:2b:10:4c:c7:ae:40:e0:87:47:8e:15:
8a:8f:e8:98:10:4d:93:2f:47:12:58:b9:e0:76:92:c8:29:13:
1d:f3:19:e3:f6:6b:66:f8:9a:8c:b9:77:bb:7e:79:21:66:73:
6d:06:9e:d7:e2:97:e4:6f:0f:08:3c:7a:09:c4:82:42:2f:6b:
6b:cc:b0:08:f9:8f:6a:09:82:4c:e5:d3:ca:68:cb:5f:f2:c7:
58:bd:83:38:9f:42:23:4a:4a:e2:3a:10:cb:b1:76:f9:b3:79:
c6:f7:6a:79:cc:03:db:a0:a5:40:87:13:99:00:4f:54:e4:4a:
2b:34:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:29 2025 by rpki-client