Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa
File: 7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa (raw, json)
Hash identifier: Y5wnVvyZMdqfWGL6r50VzIWMh6QnpnoTzvTu5ABQUTI=
Subject key identifier: EE:78:4B:2E:95:F0:A8:9D:6F:A0:70:A4:2B:E3:F5:B9:E4:07:F8:F3
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 0196CEC181B6BF1023387EF3AB52CD1B5432
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa
Signing time: Wed 14 May 2025 12:25:10 +0000
ROA not before: Wed 14 May 2025 12:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203079
IP address blocks: 213.134.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:c1:81:b6:bf:10:23:38:7e:f3:ab:52:cd:1b:54:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: May 14 12:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee784b2e95f0a89d6fa070a42be3f5b9e407f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:27:02:50:69:97:c6:86:a2:a8:8c:72:6e:
3f:22:a9:95:8b:78:01:26:c1:6f:49:44:e5:43:bd:
56:70:64:4e:59:c7:5f:12:ac:40:55:7d:9f:e5:83:
5b:3b:ef:c5:00:d1:80:4e:90:b1:00:d0:10:9c:15:
da:9e:e3:69:1e:ef:13:4e:c4:d2:95:00:bf:f4:58:
db:95:8b:4e:b6:ac:dc:c9:3b:24:da:aa:4d:4e:76:
27:76:6f:ac:71:9c:f2:3c:be:90:82:51:b3:d6:1f:
b8:41:93:91:55:96:42:c5:87:d7:d4:08:d7:c1:12:
b6:e4:6b:65:52:a4:09:49:35:be:a7:d3:31:8a:bb:
ac:b9:0c:27:36:5a:84:e3:13:9a:98:eb:ee:4f:b7:
4b:fd:61:1b:bb:01:12:ea:0c:2a:79:5b:17:66:87:
7b:34:02:e9:0d:f8:30:73:f8:c4:8b:fa:3e:de:e1:
9a:c8:ed:4a:67:d0:af:f1:03:13:94:dc:6f:3c:37:
75:43:d9:73:4d:90:2b:2a:a7:9d:bd:6d:46:4c:e9:
9c:41:e5:6b:d1:45:ce:3e:e6:02:ea:5e:8d:1f:db:
0d:94:cb:e4:b4:93:9f:a9:86:41:27:7f:9b:2d:d5:
52:b1:91:5a:8e:01:81:af:16:a8:bf:83:7e:d3:ca:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:78:4B:2E:95:F0:A8:9D:6F:A0:70:A4:2B:E3:F5:B9:E4:07:F8:F3
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/7nhLLpXwqJ1voHCkK-P1ueQH-PM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.7.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9b:74:8c:77:37:d8:d7:bc:15:be:52:29:a5:6d:62:99:6b:
d2:06:9b:5f:59:69:08:cd:b5:ee:2e:64:47:2d:d3:7d:9a:2a:
c5:63:fe:7a:93:a6:80:52:b0:62:34:83:77:f4:b5:e3:bf:14:
f6:83:87:03:23:99:96:71:57:af:6e:10:c6:17:1e:74:09:33:
8b:7f:87:39:e7:1f:82:fd:44:3e:fb:fe:cd:5a:e7:9e:1b:99:
7b:bd:6d:8f:2d:dd:50:99:ca:48:72:49:24:91:1d:c5:71:c0:
2d:96:f3:1c:9a:85:ab:4b:0c:0e:18:3a:e7:cc:b3:03:07:c6:
5f:aa:fb:a0:89:d6:0d:66:a4:fa:74:f4:06:ef:e7:a3:be:00:
45:de:0b:8a:a6:ee:d8:2c:19:de:c6:79:b9:ff:c2:0b:1c:31:
f5:21:f6:91:0b:0a:de:18:17:9c:46:77:9d:3a:6b:f1:59:a7:
2e:d8:d6:92:e8:30:53:1e:5f:81:63:b4:20:a5:e3:bc:1d:d2:
09:04:4a:cd:0e:33:05:f2:ce:f7:01:cd:73:06:3c:69:e6:0e:
53:ef:9d:68:dd:ed:ce:fa:c1:c3:1c:01:8c:13:fb:b4:db:fb:
a8:b2:ce:b4:35:1a:ac:f2:16:1a:f0:f8:f8:5a:36:8b:01:28:
87:63:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:34:49 2025 by rpki-client