Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ek7JCPCS41NeXK6-BL1kWJMswuo.roa
File: ek7JCPCS41NeXK6-BL1kWJMswuo.roa (raw, json)
Hash identifier: rhIkMhLc1Llh35BWqPoGtUcJlgy1f4TdKGKjnLruEnc=
Subject key identifier: 7A:4E:C9:08:F0:92:E3:53:5E:5C:AE:BE:04:BD:64:58:93:2C:C2:EA
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5B68E7EDA71398D25DD6EF6F41622
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ek7JCPCS41NeXK6-BL1kWJMswuo.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 80.246.225.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
80.246.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:8e:7e:da:71:39:8d:25:dd:6e:f6:f4:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a4ec908f092e3535e5caebe04bd6458932cc2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:d5:41:88:cb:8f:f4:8c:45:f0:11:7c:ca:
72:2b:20:d4:7b:33:18:49:f8:71:73:9b:34:b8:bf:
36:67:ab:81:cb:f4:be:b6:be:5f:0f:7b:1d:05:34:
14:0a:8b:de:df:99:5f:87:1d:90:e6:38:4f:3f:d9:
16:96:ec:67:16:51:19:e9:70:cc:e9:f0:08:f5:8b:
11:1b:86:fb:48:f4:a1:0e:0b:12:16:c5:aa:be:c6:
93:d8:79:a7:87:6d:85:ac:5b:e3:b6:61:63:9e:eb:
ba:00:42:f8:52:88:e6:c5:c5:ca:be:a6:24:b2:2b:
aa:cf:57:ac:5f:56:f1:69:41:d0:88:1b:95:7f:f5:
e7:23:65:1d:b8:b0:9e:a8:54:de:1d:46:60:16:e4:
59:37:98:6c:e1:4d:46:b1:de:51:22:85:1a:bc:a3:
58:f0:45:c3:fa:f7:08:21:5b:80:8a:a7:bb:dd:c0:
5e:5a:b3:54:ff:87:f3:94:4e:40:21:d5:27:a1:59:
98:96:ae:b1:90:b5:f9:14:52:7b:4b:20:db:e1:dd:
7e:04:63:7c:1b:bc:a7:f5:6c:89:36:6c:e1:46:e2:
8f:5a:2d:3d:1b:c7:83:68:90:cb:43:d3:80:ae:ad:
65:53:c0:92:fb:44:d2:28:1b:18:54:48:bf:14:72:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:C9:08:F0:92:E3:53:5E:5C:AE:BE:04:BD:64:58:93:2C:C2:EA
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/ek7JCPCS41NeXK6-BL1kWJMswuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.225.0/24
80.246.228.0/24
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9f:8f:a8:36:12:e4:b0:7a:c1:fc:ee:93:44:52:f9:7e:c2:
bb:04:bd:df:d3:8d:76:ae:c3:ad:af:b7:44:55:8d:2a:f6:01:
57:bb:cc:e8:27:c6:65:9e:f0:21:49:ca:fe:70:79:4b:c0:a0:
6b:6e:e0:c9:9f:b1:91:f6:04:b2:b8:51:fd:14:80:83:95:8d:
dd:51:bc:68:bf:a0:76:11:66:3d:92:e5:5e:0e:33:06:ae:7f:
de:2c:1a:ea:f2:15:36:8a:de:bc:9d:cc:ce:2f:45:3b:fb:c2:
67:21:9d:6d:07:0f:0f:49:b3:3d:f0:09:15:ca:cb:19:7e:bd:
9f:7e:d0:c6:29:56:9d:35:40:0d:36:83:7d:8a:8a:68:00:44:
ff:dc:c5:c7:6f:ec:53:f7:ae:96:df:6d:5d:8f:af:97:11:68:
c0:b3:9e:16:1d:07:f6:35:67:93:81:ff:32:27:9b:07:f5:62:
d3:92:94:c9:51:13:31:96:1e:55:d6:0f:56:ee:64:bb:96:c7:
61:f7:af:f1:4c:67:c7:9a:13:eb:41:bb:01:34:40:a0:70:e5:
c9:93:50:70:1f:47:52:dc:e4:82:0e:04:cf:dd:6e:35:66:bf:
7e:ff:af:ae:bb:52:2b:6e:ef:b2:8b:5e:f6:43:9b:e7:72:8b:
6b:0a:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:00 2025 by rpki-client