Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/7_z910fyUdS3UV3iXZAalmMZpHc.roa
File: 7_z910fyUdS3UV3iXZAalmMZpHc.roa (raw, json)
Hash identifier: Ccdq640YY3YzbW+naDaW3oCRMsiBEyNstC2n1WOXCqI=
Subject key identifier: EF:FC:FD:D7:47:F2:51:D4:B7:51:5D:E2:5D:90:1A:96:63:19:A4:77
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 019427479599D6C07AB6BFCE7E63746E04C5
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/7_z910fyUdS3UV3iXZAalmMZpHc.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210541
IP address blocks: 31.128.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:95:99:d6:c0:7a:b6:bf:ce:7e:63:74:6e:04:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effcfdd747f251d4b7515de25d901a966319a477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:7a:fc:15:0b:0f:85:67:a0:5e:77:29:1b:
4d:87:9e:9e:ac:c9:aa:2b:44:d8:ee:76:9f:d2:cd:
20:91:ff:dd:91:da:f7:b8:99:0b:a4:c3:3e:b4:4d:
74:f4:50:f8:28:34:a6:e9:f3:90:5d:f8:d9:ba:b8:
13:bb:c5:6b:a1:00:8d:10:29:c9:41:f4:5a:57:f6:
b1:18:46:32:f0:dd:82:c6:29:95:cb:a2:3d:d5:89:
4b:a9:af:5d:08:4c:eb:83:a9:24:a0:00:c9:3d:06:
d0:69:9a:b8:0b:9e:32:6e:46:2e:1c:bc:04:c8:4a:
9e:c6:f8:df:2c:24:e1:c9:f9:16:1e:39:64:ba:9f:
7c:19:28:c5:38:19:7f:ba:d4:68:5e:be:b8:7c:5a:
6a:53:8c:3e:d4:9b:1c:26:25:88:69:23:b8:7e:93:
9c:bc:31:17:89:58:f2:bf:98:79:88:23:4f:59:02:
b2:03:ae:9b:0b:70:d3:6d:bc:e2:22:28:10:ee:4a:
7f:83:9e:63:ed:a0:43:4f:7a:e1:3a:d3:66:c9:3f:
28:be:fb:c1:d7:2b:24:32:92:96:09:38:47:d0:e3:
d6:8f:c1:c1:fd:46:03:31:0d:29:cd:22:57:ac:6a:
45:23:4b:dc:5d:5f:83:e0:47:01:0b:81:50:9b:8b:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:FD:D7:47:F2:51:D4:B7:51:5D:E2:5D:90:1A:96:63:19:A4:77
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/7_z910fyUdS3UV3iXZAalmMZpHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.242.0/23
Signature Algorithm: sha256WithRSAEncryption
75:7e:6a:b1:3f:21:82:c4:63:14:87:22:18:de:c4:e9:d8:bc:
f4:dd:71:2a:d1:46:a2:c4:cd:5b:95:fa:92:16:71:f6:01:49:
62:cf:0e:92:c2:6e:c4:7c:3b:f6:0c:62:8b:d7:47:c9:7c:15:
24:c4:17:85:6e:90:73:dc:a7:6c:fe:11:ba:ec:c9:98:aa:0e:
0e:41:3a:8e:51:12:3d:2b:ae:78:e5:c2:da:09:82:64:53:b9:
10:53:e1:7b:50:94:43:cd:da:10:97:cb:21:a4:bf:da:ec:c5:
4b:65:88:24:d4:b4:6a:28:f9:a3:7d:45:05:3f:1f:d5:25:b6:
41:14:ae:3d:f0:87:d3:48:80:9f:7a:35:a5:65:6c:06:2d:8d:
e0:66:3e:b1:7d:09:d3:ca:93:ee:ec:04:44:c9:b5:e8:b5:41:
14:d9:84:c8:0f:96:2c:b9:d7:ca:79:3f:64:27:cf:37:69:de:
d6:76:c5:df:aa:18:91:69:54:b4:cc:85:36:10:fa:e7:de:cd:
43:4f:ba:a5:1f:02:43:6b:c5:e8:03:63:d3:ea:17:04:80:b4:
3c:a3:5b:db:9b:c4:3c:44:1f:45:59:ec:dc:c7:49:e8:41:22:
c8:fb:4a:c6:ff:0d:85:78:85:ab:66:78:25:42:9a:02:f2:7d:
d7:0e:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:23 2025 by rpki-client