Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/7HvIX7fCTI2gbjc-7RnxufJl1mA.roa
File: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (raw, json)
Hash identifier: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=
Subject key identifier: EC:7B:C8:5F:B7:C2:4C:8D:A0:6E:37:3E:ED:19:F1:B9:F2:65:D6:60
Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial: 01941F8C8074E6074880FA4B7489141C09AA
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/7HvIX7fCTI2gbjc-7RnxufJl1mA.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213402
IP address blocks: 195.216.230.0/24 maxlen: 24
2a02:e3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:80:74:e6:07:48:80:fa:4b:74:89:14:1c:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7bc85fb7c24c8da06e373eed19f1b9f265d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:04:fe:75:e4:3b:82:f2:9d:a6:de:ce:be:
5d:c3:30:69:15:ba:d7:05:41:eb:12:eb:f6:b0:e0:
50:15:e2:bc:fb:77:8f:6c:9f:1a:a3:e8:20:43:5b:
bc:4f:4d:7d:b8:19:51:5b:db:7d:5b:59:44:87:39:
23:4e:91:df:e0:6e:21:00:ca:aa:79:40:bc:38:36:
50:9d:97:d5:c1:5b:ed:fe:a4:6f:a4:0f:49:7b:ae:
aa:42:c6:18:40:72:61:57:30:6a:38:38:2d:4a:55:
d5:e6:91:f5:0f:bb:2c:81:87:3e:05:b3:32:4d:02:
75:ef:50:4d:73:57:85:3d:4e:e8:fc:ac:39:0b:3e:
ca:e3:87:6d:d9:04:81:a9:30:7b:30:ac:d0:c9:49:
1c:cc:89:3c:a1:bb:54:11:e4:84:ab:1e:f1:20:0b:
b2:94:72:ba:8a:55:ad:bc:c4:6c:a7:a4:c9:c5:f2:
33:17:f6:02:b9:4d:15:42:72:a3:89:25:b1:07:0d:
da:8f:de:2d:0e:c4:79:37:3a:8c:65:b9:11:8a:0f:
4c:a4:ae:e8:ca:8c:2a:62:31:f8:27:e7:74:e5:20:
3c:5c:65:7e:8d:1d:62:a8:96:1a:fb:e4:b3:8b:8a:
47:17:b3:c4:ee:e6:de:d0:1e:7c:17:83:e9:45:34:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7B:C8:5F:B7:C2:4C:8D:A0:6E:37:3E:ED:19:F1:B9:F2:65:D6:60
X509v3 Authority Key Identifier:
keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/7HvIX7fCTI2gbjc-7RnxufJl1mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.230.0/24
IPv6:
2a02:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:d3:50:95:c3:87:60:40:ef:c3:96:07:66:31:df:13:f3:df:
ff:1b:2f:db:c8:02:29:0c:4f:9a:51:1c:c4:2d:4f:b6:6a:c3:
1c:98:ce:03:67:3a:07:95:f2:62:d1:aa:db:2b:02:2f:29:49:
96:11:ee:d9:83:77:0b:29:30:42:51:47:43:2c:1d:f9:68:74:
a4:cb:b7:c6:c6:e2:4d:6f:2b:3e:65:73:d7:2e:b7:94:c1:d4:
0c:db:11:51:79:fe:32:c8:78:17:8a:d8:c0:87:9a:2a:19:08:
92:d8:bb:f1:e1:d2:d5:dc:08:21:d9:a4:2b:bf:c2:80:2d:79:
05:23:05:04:4c:f3:ac:13:94:20:0e:28:db:ea:48:47:90:19:
ea:8b:3e:c6:c3:c6:65:72:67:fa:cd:31:b9:b4:d9:00:42:f9:
87:1f:79:d0:51:41:a3:28:f8:67:69:ed:3e:01:a3:c8:34:9a:
41:9c:55:20:0c:09:7a:29:95:9f:c6:37:7b:3c:8b:34:18:cd:
a9:33:59:7e:ce:bf:63:dd:89:a5:0d:cc:ce:4d:85:54:91:41:
33:ca:e7:4f:26:b5:fe:dc:64:66:6a:72:c9:5e:2a:b3:fb:93:
ab:ae:af:88:c2:a3:91:6c:94:31:68:bb:e8:b6:f9:92:0d:06:
ab:1c:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:58 2025 by rpki-client