Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/7IBGwybmMFNsjN85aeiYNOBxF8Y.roa
File: 7IBGwybmMFNsjN85aeiYNOBxF8Y.roa (raw, json)
Hash identifier: 7Eu1taimVzljTqOZbddTZkKHAxguwQ1GkxP8e37dpS0=
Subject key identifier: EC:80:46:C3:26:E6:30:53:6C:8C:DF:39:69:E8:98:34:E0:71:17:C6
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 01941FFA918F0F12C993479366F2E3AD1A73
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/7IBGwybmMFNsjN85aeiYNOBxF8Y.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207503
IP address blocks: 134.101.32.0/21 maxlen: 21
134.101.40.0/21 maxlen: 21
134.101.56.0/21 maxlen: 21
185.102.240.0/23 maxlen: 23
185.102.242.0/23 maxlen: 23
212.110.232.0/21 maxlen: 21
212.110.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:8f:0f:12:c9:93:47:93:66:f2:e3:ad:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec8046c326e630536c8cdf3969e89834e07117c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:de:90:66:21:ea:09:58:07:9d:da:c0:6e:14:
82:30:80:fa:21:73:39:1c:84:2d:a6:7c:de:5b:50:
36:81:d4:d0:47:e3:bb:5f:c4:9c:fa:2d:41:8e:25:
b2:1d:a0:44:97:e8:da:42:e6:5f:aa:3a:d6:36:10:
27:13:71:59:92:af:90:8f:ca:a8:52:ec:13:f0:b2:
cb:80:6f:8d:79:bc:a7:b9:05:0a:67:59:31:ec:b9:
b3:a4:5e:36:b9:5b:ba:d8:4e:f3:a5:2f:2b:4f:68:
31:47:bb:a8:50:2c:4c:52:1b:99:cf:63:af:9d:30:
3d:69:53:be:2f:b2:90:01:6b:65:52:d1:77:02:0d:
1a:23:d4:4d:71:2a:8b:f7:7f:b8:4a:d6:0b:9f:59:
43:ae:1d:67:35:c4:7c:fd:4d:4e:d6:1d:c6:d5:2b:
af:a0:58:74:49:05:62:f0:0b:86:37:7c:74:2d:43:
2f:d4:69:dd:ba:25:9c:e1:1f:ed:31:48:4a:c1:c6:
50:83:b9:c5:3b:56:67:a4:5b:fe:8e:d2:2c:d4:14:
46:70:e0:52:45:ad:fc:2f:5c:d3:10:dc:86:a0:2e:
5a:30:5f:0c:e6:ec:67:bc:f4:d1:82:42:1b:ea:ae:
d1:a7:5c:34:48:72:cc:ac:1c:91:e5:02:ac:9e:be:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:46:C3:26:E6:30:53:6C:8C:DF:39:69:E8:98:34:E0:71:17:C6
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/7IBGwybmMFNsjN85aeiYNOBxF8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.32.0/20
134.101.56.0/21
185.102.240.0/22
212.110.232.0-212.110.247.255
Signature Algorithm: sha256WithRSAEncryption
50:d0:7f:21:7e:a2:9f:c0:92:1f:4d:99:20:41:52:78:f0:67:
f9:04:9b:ed:fb:6a:c6:8e:a6:af:0b:05:36:6a:6f:be:ec:60:
ec:53:cb:ec:22:ef:db:f2:f0:c8:7f:fc:30:e4:9a:2a:83:b7:
0f:09:e1:58:d4:56:71:38:dd:0d:14:c4:39:80:d9:8b:ec:40:
65:74:2c:24:96:ce:87:5e:04:fd:9d:dc:7d:77:68:67:db:8e:
d8:15:e1:92:f9:b3:fd:3b:fe:21:c2:6c:97:18:4e:63:6e:38:
6f:a8:ba:ca:d9:1e:50:9a:42:7f:d1:23:b8:9f:85:9d:ab:5f:
5d:c0:4d:e7:56:2d:89:e0:22:7f:61:25:15:6a:83:10:e6:fb:
f9:76:33:c8:cb:29:1f:13:0c:eb:ca:1f:36:95:20:97:c1:25:
58:3c:5b:a9:3b:e1:ff:2f:1c:10:0c:bf:8d:d3:be:f2:a2:27:
28:54:c9:72:38:72:0a:e8:ec:20:fb:21:30:bf:d0:f6:ca:e6:
d9:2c:5f:7e:b7:6d:f1:98:9c:4f:7d:d3:db:80:fa:33:3d:ef:
dc:be:3d:55:8f:22:2c:e6:95:0e:89:f9:f1:6b:44:da:2d:3e:
2d:9c:4b:93:db:c2:7a:12:0b:bd:b7:4d:d3:28:b2:66:6d:fd:
09:ab:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:06:25 2025 by rpki-client