Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/7elRG4gqnvY-kvee5EC-ljUx8zc.roa
File: 7elRG4gqnvY-kvee5EC-ljUx8zc.roa (raw, json)
Hash identifier: EBapcQW4LSNex4n/3b9OtP2KhuUXB5IUoQf2KZKkJ6Q=
Subject key identifier: ED:E9:51:1B:88:2A:9E:F6:3E:92:F7:9E:E4:40:BE:96:35:31:F3:37
Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial: 019423D774408A34F40C789E2E4847919663
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/7elRG4gqnvY-kvee5EC-ljUx8zc.roa
Signing time: Wed 01 Jan 2025 21:48:30 +0000
ROA not before: Wed 01 Jan 2025 21:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41932
IP address blocks: 31.135.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:74:40:8a:34:f4:0c:78:9e:2e:48:47:91:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
Validity
Not Before: Jan 1 21:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ede9511b882a9ef63e92f79ee440be963531f337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:c3:c0:18:99:00:ec:f3:e4:d4:69:6a:a0:
5f:df:81:3c:e5:47:91:5b:6a:2b:03:f0:a0:b2:85:
4c:1e:3c:01:cb:49:3a:56:db:59:57:c6:00:0b:39:
13:99:09:bb:ef:57:b6:07:0c:df:f2:55:1f:91:fb:
56:9b:04:39:4d:4f:da:38:38:8d:3b:4d:de:a7:89:
0e:94:e1:2d:24:84:84:45:7d:ff:dc:a3:10:88:43:
f3:f4:f2:55:97:2b:31:00:d9:9f:4c:62:71:9f:4c:
f2:b6:02:20:3f:d3:19:08:38:e4:76:b5:07:90:2f:
d6:5e:e1:f2:d9:29:d8:6c:dc:a0:d6:f7:5b:07:58:
c5:14:e6:3b:03:0b:f8:57:97:30:1f:9a:3c:53:2f:
aa:8d:3d:c7:9d:20:f5:84:79:f4:32:d7:12:3f:0a:
a5:c6:31:30:45:7d:9f:19:58:53:bd:62:83:1a:c5:
46:c8:3f:37:41:22:53:fb:a7:26:5b:c4:eb:19:bf:
0b:c5:ab:f1:b0:b2:f8:c9:28:c9:c0:95:97:28:41:
68:83:3b:19:80:cd:d4:59:b0:47:0a:de:fe:68:2a:
d1:11:c7:e3:98:4d:13:0f:80:3e:70:6c:de:54:68:
d7:26:34:a3:34:78:0f:82:c2:ec:91:65:fc:a0:f2:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E9:51:1B:88:2A:9E:F6:3E:92:F7:9E:E4:40:BE:96:35:31:F3:37
X509v3 Authority Key Identifier:
keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/7elRG4gqnvY-kvee5EC-ljUx8zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.135.180.0/23
Signature Algorithm: sha256WithRSAEncryption
38:89:22:34:ed:c9:da:10:81:83:22:4f:4c:db:73:c8:98:74:
57:6a:88:07:d5:2a:32:dd:7b:36:b9:9d:47:11:e7:41:d1:95:
ae:dd:0f:1a:02:a4:67:d4:75:5d:7b:62:db:22:d0:3a:b9:94:
c7:92:2b:25:d2:29:1e:cd:f9:36:d6:bc:2c:fb:f5:5e:b0:0d:
af:e3:72:42:80:1a:95:c3:c1:40:f2:0b:da:43:36:12:5a:97:
cf:46:4e:d6:18:ef:a0:a0:be:f4:97:de:f5:e0:88:31:8c:04:
ea:23:e2:d7:cb:ac:f4:71:ee:13:fd:6c:66:f4:f0:3a:2b:64:
6b:e5:d4:7a:b7:3c:f6:1d:c1:71:a7:99:78:ef:46:23:ea:75:
d1:b0:ae:cf:fb:95:61:51:11:e3:f9:10:98:75:bc:19:87:da:
49:a5:b9:74:d2:69:db:c7:33:6b:a1:8e:b6:bc:d0:c5:70:8b:
6d:70:60:6a:de:b4:3f:9b:b1:89:21:52:d1:a2:19:3a:5c:42:
26:a9:bd:d8:d0:4a:d3:77:ce:c0:8e:0e:f1:cf:75:fc:2c:18:
11:bd:50:73:f2:12:c8:19:59:71:26:ed:93:f7:64:c6:b5:08:
52:fb:cc:4c:f5:b8:a6:4d:8d:d1:89:3e:65:ba:c3:15:a8:7e:
47:df:37:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj13RAijT0DHieLkhHkZZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjUwMTAxMjE0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGU5NTExYjg4MmE5ZWY2M2U5MmY3OWVlNDQwYmU5NjM1MzFmMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2TDwBiZAOzz5NRpaqBf34E85UeR
W2orA/CgsoVMHjwBy0k6VttZV8YACzkTmQm771e2Bwzf8lUfkftWmwQ5TU/aODiN
O03ep4kOlOEtJISERX3/3KMQiEPz9PJVlysxANmfTGJxn0zytgIgP9MZCDjkdrUH
kC/WXuHy2SnYbNyg1vdbB1jFFOY7Awv4V5cwH5o8Uy+qjT3HnSD1hHn0MtcSPwql
xjEwRX2fGVhTvWKDGsVGyD83QSJT+6cmW8TrGb8LxavxsLL4ySjJwJWXKEFogzsZ
gM3UWbBHCt7+aCrREcfjmE0TD4A+cGzeVGjXJjSjNHgPgsLskWX8oPIJAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3pURuIKp72PpL3nuRAvpY1MfM3MB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvN2VsUkc0Z3Fudlkta3ZlZTVFQy1salV4OHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4e0MA0G
CSqGSIb3DQEBCwUAA4IBAQA4iSI07cnaEIGDIk9M23PImHRXaogH1Soy3Xs2uZ1H
EedB0ZWu3Q8aAqRn1HVde2LbItA6uZTHkisl0ikezfk21rws+/VesA2v43JCgBqV
w8FA8gvaQzYSWpfPRk7WGO+goL70l9714IgxjATqI+LXy6z0ce4T/Wxm9PA6K2Rr
5dR6tzz2HcFxp5l470Yj6nXRsK7P+5VhURHj+RCYdbwZh9pJpbl00mnbxzNroY62
vNDFcIttcGBq3rQ/m7GJIVLRohk6XEImqb3Y0ErTd87Ajg7xz3X8LBgRvVBz8hLI
GVlxJu2T92TGtQhS+8xM9bimTY3RiT5lusMVqH5H3zfx
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:27 2025 by rpki-client