Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa
File: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (raw, json)
Hash identifier: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=
Subject key identifier: EE:FA:0B:A1:56:6C:D8:62:26:41:10:42:A3:90:4A:2D:9F:94:8F:BC
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 019421B1CBB762EBFCEF178735F7ED0E8692
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 149.255.96.0/20 maxlen: 24
2a03:ca80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cb:b7:62:eb:fc:ef:17:87:35:f7:ed:0e:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eefa0ba1566cd86226411042a3904a2d9f948fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:98:ef:dd:17:9e:61:45:30:2f:ea:e7:73:
b2:9c:cd:1a:7c:f1:8b:c4:c9:62:57:ba:f0:79:3b:
0b:1a:93:f4:43:98:a5:4f:28:92:c5:00:3b:be:d6:
08:10:a4:a5:9b:4a:c6:fa:60:3d:ee:70:fc:98:37:
3f:f6:af:4d:99:52:2e:00:68:14:c7:28:c4:11:76:
b9:5c:c2:2c:fd:a7:04:e9:76:be:9c:37:65:bf:49:
33:07:50:dc:04:78:1e:77:8c:ff:36:ee:7e:29:40:
f9:3a:e5:2d:55:c5:12:fa:0d:61:37:e7:ab:5a:fb:
42:53:cd:ba:31:b1:8a:cd:d4:8f:d3:15:3a:75:3b:
ca:ac:72:4d:6a:93:8e:83:8c:09:c6:22:a8:79:26:
88:f7:08:22:94:ca:87:b4:6f:2d:41:c8:98:4b:5a:
a4:ba:eb:4e:20:e3:36:b2:e4:15:33:13:93:48:6e:
43:84:7a:24:5c:27:1e:77:a7:97:0b:2d:93:35:6d:
e8:90:55:cb:97:80:05:e9:37:d0:ea:60:3f:94:ca:
a2:39:40:2e:ed:cb:8a:26:e5:89:23:55:40:26:0d:
64:0a:e9:6d:1e:57:f3:51:be:ef:b2:59:af:8b:a1:
96:b2:4e:cd:ab:10:22:b3:43:5b:f7:ce:02:5c:40:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:0B:A1:56:6C:D8:62:26:41:10:42:A3:90:4A:2D:9F:94:8F:BC
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.96.0/20
IPv6:
2a03:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
7f:15:34:44:7e:e3:e7:6c:a9:05:a5:a9:fc:cb:7d:6b:19:3e:
53:96:20:1f:35:bf:82:d2:ef:f2:6f:67:0d:1d:18:7d:bc:70:
e4:58:c3:73:50:c0:b2:98:76:4b:b2:fb:46:9f:69:86:3c:2c:
91:bb:bf:3a:90:13:90:c1:95:9a:b0:5a:ab:14:94:ac:ef:a8:
4f:2a:34:86:03:27:3d:f3:76:5a:cd:a1:19:ae:57:34:1b:74:
0b:ee:8e:88:1e:0a:d6:84:64:f4:8d:f3:12:2b:db:a2:5f:20:
5b:2b:66:2f:59:d9:28:57:3b:cc:d9:db:34:76:da:df:38:a6:
87:a4:61:a5:c2:c5:36:3f:1e:4d:2d:40:2e:1f:a3:eb:c5:ab:
68:71:1c:fb:ce:63:ca:e1:29:ef:82:bf:c5:36:8d:15:60:50:
b8:31:6d:9d:e6:2b:ec:c7:b5:16:40:78:c3:45:3a:93:3a:d8:
78:37:2e:01:23:cd:f3:f4:95:d1:49:66:b6:30:cb:ff:4d:69:
8f:7d:8d:87:cb:e8:bb:a9:8e:dd:de:1f:f6:3b:a5:f4:13:8c:
8b:b5:b2:ef:35:31:81:56:e0:5f:f5:c3:a4:69:b1:08:1d:f3:
13:66:77:d8:cf:fb:d4:1b:89:b8:a1:69:b8:6c:6a:5a:3d:35:
5b:9e:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:13 2025 by rpki-client