Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7RN5SRH01vnVuwmId81dIIGGm8U.roa
File: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (raw, json)
Hash identifier: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=
Subject key identifier: ED:13:79:49:11:F4:D6:F9:D5:BB:09:88:77:CD:5D:20:81:86:9B:C5
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 019427477A094E157A8F0BE3C6F408A1E609
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7RN5SRH01vnVuwmId81dIIGGm8U.roa
Signing time: Thu 02 Jan 2025 13:49:42 +0000
ROA not before: Thu 02 Jan 2025 13:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216319
IP address blocks: 94.228.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7a:09:4e:15:7a:8f:0b:e3:c6:f4:08:a1:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jan 2 13:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed13794911f4d6f9d5bb098877cd5d2081869bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:b3:fd:f2:84:58:88:ac:70:2c:a2:a4:ae:
cf:5d:1a:45:7d:77:c9:ec:fd:4d:6f:45:0d:83:e8:
b1:19:3e:23:82:03:6e:fa:ab:45:03:96:c8:18:82:
0f:34:c9:67:79:5e:d9:cd:fc:50:a7:16:cd:c7:33:
08:2b:8a:e7:6a:42:22:90:e2:a4:11:f2:5a:c2:68:
7d:d8:0b:64:1f:cb:93:cc:dd:6e:73:48:4e:b0:52:
9b:27:15:32:53:da:01:7d:2e:a1:70:d4:54:94:28:
56:66:bc:cc:c6:f4:98:ab:b5:7a:30:76:1e:4a:76:
96:33:f2:94:31:61:d1:e4:31:b1:a3:5e:38:f7:a5:
09:43:11:d7:13:19:ce:3e:a6:c7:25:96:8d:77:a9:
76:71:bf:55:32:fc:ba:e1:16:2e:37:55:c3:c9:c7:
e2:07:8e:49:12:37:fc:bb:94:a6:70:e3:f7:5b:31:
40:b2:66:d3:ff:08:a5:d0:eb:c7:dd:9c:9a:85:92:
55:06:02:64:12:17:c7:a1:53:07:c1:b4:f2:44:e5:
38:ae:f2:82:bf:dc:47:1d:9a:75:3a:58:a8:f0:fd:
66:3d:41:3d:5b:9f:1a:ac:6f:89:53:fd:3a:2c:1e:
07:ae:10:57:1c:14:73:d2:62:2a:67:7d:02:f9:39:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:79:49:11:F4:D6:F9:D5:BB:09:88:77:CD:5D:20:81:86:9B:C5
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/7RN5SRH01vnVuwmId81dIIGGm8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:43:f2:e0:76:92:4c:3e:c5:37:0f:86:eb:ed:f9:40:c6:23:
24:d6:e5:7f:e8:44:75:51:b7:26:0d:46:c5:03:f0:a0:70:b3:
a7:60:ab:58:69:47:56:21:fa:bb:23:36:7e:e9:93:0f:46:64:
f6:72:53:3d:6d:cb:3b:37:21:75:8c:70:f1:a9:89:d6:e7:e2:
6c:10:e8:29:2a:c1:21:8a:29:8d:40:bc:ee:a2:b6:9f:1f:6c:
3b:59:4e:9b:de:ad:66:32:32:e4:af:5a:5e:95:5b:c8:b9:57:
76:22:ff:60:8e:0d:2f:d2:cb:9c:bd:a5:de:dc:64:de:64:9d:
b8:42:79:d6:fd:c9:4a:e6:10:65:ea:bb:73:85:61:99:67:08:
19:d1:42:91:11:87:ee:b0:a1:a6:50:13:e2:49:71:00:2e:b1:
15:64:45:77:3e:2f:61:70:0e:7d:9f:18:92:56:9e:a6:e4:07:
61:44:03:8d:bc:d8:bd:bb:71:04:7a:d7:f8:6a:8e:28:f4:47:
d7:44:61:c3:5e:cf:59:f7:17:a1:1e:2f:80:e9:5e:35:c8:f6:
c5:24:f0:f9:39:58:4a:1f:26:45:8d:30:0d:d5:77:27:0b:fe:
52:62:9a:2f:1e:2a:4d:a0:92:0e:c3:58:28:09:d7:86:63:92:
8f:91:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:45:07 2025 by rpki-client