Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa
File: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (raw, json)
Hash identifier: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=
Subject key identifier: EC:89:05:37:1B:84:77:BC:D8:30:9E:46:16:65:98:0A:B6:F4:0F:79
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 01941FFA5B3BFCEDEC55D1C36F9952F5A620
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62037
IP address blocks: 195.225.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5b:3b:fc:ed:ec:55:d1:c3:6f:99:52:f5:a6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec8905371b8477bcd8309e461665980ab6f40f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2b:35:03:9a:f2:a4:86:c6:de:1a:e2:33:b3:
cf:35:4f:50:e5:ee:f9:c1:c9:2f:89:b4:92:e0:3e:
a3:58:b6:c3:8a:2e:e1:d1:7a:70:f6:8f:7f:49:32:
de:96:c7:2c:53:22:c8:8b:cf:ac:04:a4:90:c5:79:
5e:8c:67:ee:ed:ff:14:00:90:93:72:1e:10:9d:98:
6e:49:75:be:0c:5a:83:d6:b7:d7:8a:5e:19:61:c3:
26:9f:11:bc:08:d4:05:e4:e0:92:59:5d:73:54:c2:
e3:ec:4c:49:be:68:c4:16:68:81:08:18:05:a5:1e:
f1:68:67:71:65:a1:93:b7:d1:fb:82:e6:aa:eb:43:
99:8d:9b:65:00:e2:66:4f:d3:55:dc:cf:f0:72:17:
3e:e1:8d:8a:17:48:a7:5d:cc:de:a3:df:3c:ea:88:
60:aa:e0:1d:fe:32:01:4e:23:dc:1b:b2:a1:0d:0f:
70:00:8d:84:15:f3:51:14:58:7b:15:77:55:e0:7d:
97:2e:30:8c:77:2b:4f:42:50:45:63:3a:5d:c5:5f:
3d:09:3c:1e:e1:17:30:3d:b8:a9:db:78:c1:3b:00:
fb:97:00:2e:45:eb:2a:e4:c6:3d:89:77:9a:fc:1c:
92:d4:a7:3a:b3:a3:89:14:d5:fa:a5:a3:f9:f5:75:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:89:05:37:1B:84:77:BC:D8:30:9E:46:16:65:98:0A:B6:F4:0F:79
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b3:1d:f0:ac:c1:93:96:d4:bc:e8:39:38:fb:2f:37:a8:e4:
97:ec:c7:b6:a8:e3:58:ce:59:24:1b:f6:82:ad:dd:00:8b:02:
92:dc:59:1a:cb:b0:b0:b1:b1:ed:ed:b0:d5:5a:46:d1:60:01:
07:0b:d7:f6:ac:55:2c:a6:67:71:6a:aa:c1:01:30:ac:0d:02:
9a:18:5a:59:a9:7f:1f:b1:7a:24:cf:25:e9:fc:b8:c9:c5:66:
35:07:93:b3:5b:86:19:51:e1:ce:ec:a2:9a:08:fa:00:b7:3a:
de:50:b5:86:d2:05:8b:63:90:da:e2:08:73:3d:2b:b1:66:6d:
1f:56:a7:4c:80:f9:d8:a2:e9:d8:33:6c:8d:d7:2c:6c:31:60:
c7:14:17:20:e7:f9:88:21:06:5a:01:8c:13:7e:2a:7f:47:a4:
32:5b:30:8b:08:e7:7a:2e:0b:90:5a:24:bb:9c:86:44:81:08:
ef:d3:a0:97:ec:db:cb:63:b9:e5:b9:42:f5:84:b6:88:fd:c0:
11:c4:a9:e1:3a:e7:67:11:0d:e1:ad:14:ce:87:f2:86:0d:89:
bc:6e:fa:00:b0:a4:bd:71:3c:8f:ee:e7:79:27:90:b9:86:f1:
ef:f2:49:2c:f8:5b:1a:e8:ef:36:c7:bb:35:73:69:76:a4:e7:
54:ce:ff:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:44 2025 by rpki-client