Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa
File: h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa (raw, json)
Hash identifier: JWS67wGbGixzjqGud+OGYY8Sh8Xk+/Z+C9GlJ0f+TYc=
Subject key identifier: 87:B7:78:65:30:E9:3E:BF:8A:DA:3C:0A:40:A3:66:5E:15:09:2E:97
Certificate issuer: /CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Certificate serial: 0194274807DC019F7C1963B1247B08DF00A9
Authority key identifier: 6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215217
IP address blocks: 89.34.124.0/23 maxlen: 24
89.150.55.0/24 maxlen: 24
2a0f:ac80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:07:dc:01:9f:7c:19:63:b1:24:7b:08:df:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f108bd5addfabf151d9079e3d3d341269666fa7
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b7786530e93ebf8ada3c0a40a3665e15092e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:f8:aa:45:d4:a3:25:2f:02:e7:58:fb:dc:
3f:43:99:01:75:34:f2:48:e7:b4:0e:93:53:0b:1e:
bf:dc:5e:01:5e:78:89:3d:ce:2b:20:f7:f7:c9:6a:
95:89:38:aa:d9:a7:92:bd:6b:ac:a7:5e:41:61:f9:
af:fe:92:58:e3:88:24:88:e3:24:59:e1:3a:34:b1:
4b:06:55:77:d0:0f:e5:5b:99:60:90:12:0f:36:90:
f1:7f:9b:04:81:3c:88:d7:b0:33:10:90:8c:e8:8e:
38:6a:c7:06:76:b7:90:6f:07:e1:50:e4:ef:f4:2d:
18:5c:d7:be:d9:0d:6d:03:57:18:7f:e6:dc:b5:b1:
0a:85:ad:83:61:3d:65:9d:2d:5f:d9:8d:9a:8d:bd:
b5:df:20:2a:f4:c4:cc:ae:01:97:f6:42:35:35:1a:
42:6c:46:93:5d:f4:62:e4:a9:95:1d:bf:ca:f0:b1:
1d:31:58:36:62:cc:df:9f:12:0c:54:8a:23:f8:2e:
31:61:af:09:cb:6c:4f:a6:a1:2f:1e:b8:aa:6e:6d:
1d:9b:a7:0a:aa:0f:39:06:43:34:65:2e:49:f4:65:
c4:5a:03:bb:7e:be:47:aa:16:96:61:28:bb:63:de:
40:f1:a2:19:f0:6b:fb:4b:89:64:8b:20:f6:d1:2b:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:78:65:30:E9:3E:BF:8A:DA:3C:0A:40:A3:66:5E:15:09:2E:97
X509v3 Authority Key Identifier:
keyid:6F:10:8B:D5:AD:DF:AB:F1:51:D9:07:9E:3D:3D:34:12:69:66:6F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxCL1a3fq_FR2QeePT00Emlmb6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/h7d4ZTDpPr-K2jwKQKNmXhUJLpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b7b7fa-13d0-4ffc-9878-097b4d6d81e4/1/bxCL1a3fq_FR2QeePT00Emlmb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.124.0/23
89.150.55.0/24
IPv6:
2a0f:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
c5:14:e1:5e:44:6d:c3:3a:2b:06:56:f1:af:9d:40:4a:21:1e:
f3:14:17:b8:3a:70:b4:0c:20:69:6f:81:ab:dc:94:5f:77:ae:
a8:2c:4e:d7:29:d7:9f:a8:3f:ed:41:a2:d0:ee:4b:25:06:7d:
00:4c:e3:7a:63:24:54:75:87:4b:fd:b7:80:5b:71:d5:47:34:
ce:48:69:93:2f:35:cc:8d:12:06:90:81:70:fd:c3:9b:cd:ba:
67:1d:72:c5:f8:af:1b:d7:bc:68:b5:26:f0:94:d3:9d:7f:19:
c7:51:89:c5:19:00:e4:c5:49:50:2f:8d:6f:31:95:25:ab:9b:
f3:e1:fb:f8:63:90:5e:07:10:f4:b1:7d:2b:7c:e6:91:3a:57:
f4:97:bd:b5:a4:26:11:88:88:2c:22:3e:75:75:ff:88:f8:05:
82:9f:b6:f3:0e:fb:7e:9a:d5:0c:5a:6e:1e:ca:6e:48:3a:43:
4d:2e:75:b1:79:b8:a7:c9:af:45:3e:06:96:b8:d2:c6:4d:bc:
24:3f:50:55:00:92:0b:4e:c2:76:22:09:a6:5b:3d:38:0d:8e:
64:64:ca:10:2c:e9:18:4d:ad:06:89:25:e3:bf:28:37:05:fd:
b0:e9:8a:09:7e:62:ec:1d:92:5a:17:4a:24:b7:f3:a9:b1:06:
27:54:30:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:08 2025 by rpki-client