Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/7XdSGfevcJJsevy7fOceWvja7nc.roa
File: 7XdSGfevcJJsevy7fOceWvja7nc.roa (raw, json)
Hash identifier: 738FMMf7Atyvq/JMYg2GIhaCbgWHQKUbxrDxkyANCA8=
Subject key identifier: ED:77:52:19:F7:AF:70:92:6C:7A:FC:BB:7C:E7:1E:5A:F8:DA:EE:77
Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Certificate serial: 01941F8C2524CF4F52AB19042AAD40D24ACC
Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/7XdSGfevcJJsevy7fOceWvja7nc.roa
Signing time: Wed 01 Jan 2025 01:47:45 +0000
ROA not before: Wed 01 Jan 2025 01:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 193.176.112.0/23 maxlen: 23
193.176.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:25:24:cf:4f:52:ab:19:04:2a:ad:40:d2:4a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4
Validity
Not Before: Jan 1 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed775219f7af70926c7afcbb7ce71e5af8daee77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:e5:a0:84:7a:05:d0:bb:92:96:61:e5:af:
3e:cd:0c:cc:d4:fa:1b:8a:42:1a:06:54:4e:83:8e:
10:15:dd:20:45:b0:4a:42:6f:b1:36:f6:db:be:98:
c5:87:f5:0b:4c:12:e8:26:69:bb:99:72:ba:1b:82:
58:06:e9:0c:5a:9c:96:e0:07:fe:45:4d:fe:55:8c:
46:d8:11:7a:5d:7a:f7:c2:9a:c1:6f:05:13:44:b6:
95:ec:20:e3:ee:ca:bb:b3:87:33:04:5d:04:8f:92:
25:79:01:80:c1:79:db:26:e7:41:13:27:b9:1b:83:
13:5b:56:83:c6:ad:16:c9:c5:8b:25:1e:3a:b6:a5:
08:31:62:9f:fb:c0:b1:2a:37:f5:3d:4e:20:88:3c:
a1:d9:38:15:50:07:83:17:f2:8b:c8:a3:07:3c:55:
dc:48:07:45:3e:8c:28:af:bf:4b:31:8d:62:59:01:
47:4e:2c:82:75:45:26:91:6c:e1:aa:55:14:ec:ad:
15:51:34:9b:78:84:89:fe:65:c3:2b:30:61:56:71:
a3:a9:dd:12:32:74:b9:55:55:13:74:34:0d:a0:7c:
85:a9:ef:ee:81:db:b7:3b:2f:76:44:11:a4:19:c7:
bf:f7:40:35:84:d3:27:7b:09:84:ad:53:bf:54:61:
57:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:52:19:F7:AF:70:92:6C:7A:FC:BB:7C:E7:1E:5A:F8:DA:EE:77
X509v3 Authority Key Identifier:
keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/7XdSGfevcJJsevy7fOceWvja7nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.112.0/22
Signature Algorithm: sha256WithRSAEncryption
10:23:5e:c9:6f:da:fb:ad:45:05:45:8c:07:13:94:d3:c4:10:
9c:66:d7:a3:b1:83:a8:bf:ef:0f:9c:6f:d1:a1:64:45:c9:33:
99:7e:ae:ac:c4:af:0c:29:b0:8a:ac:60:3a:34:3f:44:63:35:
9e:18:01:da:ea:08:30:15:1f:d5:78:6a:13:75:db:b2:b4:6d:
4c:d1:e8:e7:27:49:af:f3:49:81:2e:ef:0b:17:6e:33:79:80:
0a:2d:ed:6b:c7:e1:35:e8:69:50:ca:28:5d:8e:3a:8b:75:cf:
3b:81:33:b7:f1:d8:49:d0:f0:72:69:5d:ef:a5:9e:90:08:e4:
ae:be:f1:ba:db:85:f4:8c:12:18:9c:0e:9f:5e:3c:6f:9f:a1:
43:4c:2b:8d:2b:5a:87:02:02:2a:e8:73:4b:79:ac:55:ac:e9:
eb:69:ec:da:b0:73:e0:12:aa:50:a2:70:6c:78:e3:c0:7f:5a:
1b:36:ef:37:39:8e:7c:3d:df:f1:1f:19:fa:43:23:03:b6:0b:
70:6c:34:fa:be:83:5e:8e:9a:1f:7c:6f:20:18:7d:c3:ef:41:
31:ce:ea:4c:ec:78:88:7d:22:e4:84:60:da:e9:38:e8:48:5b:
50:f6:2a:54:8b:50:91:e2:04:ff:54:4b:5a:42:7c:1b:cf:21:
bc:1e:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:40:06 2025 by rpki-client