Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7DIkKLyuHt9LH5dGnTCOHq2wkSQ.roa
File: 7DIkKLyuHt9LH5dGnTCOHq2wkSQ.roa (raw, json)
Hash identifier: Qciq+CKgl3/wmrLNkabrTsHeV4dIvmbDwpts5970NEQ=
Subject key identifier: EC:32:24:28:BC:AE:1E:DF:4B:1F:97:46:9D:30:8E:1E:AD:B0:91:24
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456D9524FAF4B1097E1C33059F77B0
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7DIkKLyuHt9LH5dGnTCOHq2wkSQ.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210158
IP address blocks: 195.235.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6d:95:24:fa:f4:b1:09:7e:1c:33:05:9f:77:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec322428bcae1edf4b1f97469d308e1eadb09124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:62:bf:95:7e:6c:c4:0c:2c:77:05:15:e7:
77:45:d3:51:50:ea:2c:0a:a0:ce:cc:f1:6d:7c:a7:
13:af:65:f1:7a:11:b2:cd:d2:e2:30:81:2a:04:26:
2a:70:f5:76:e9:8e:84:33:3a:1c:95:8e:70:d5:5c:
d8:c8:ea:99:47:99:42:54:53:48:d6:28:c9:b5:be:
b2:28:e0:cb:70:83:11:46:3c:41:64:f7:86:93:43:
b7:ab:93:e6:a5:83:f9:81:47:8a:2f:94:e1:14:0e:
0c:6c:c0:9f:76:e4:ce:06:33:ce:4e:0d:29:05:8d:
9b:d0:12:a8:21:aa:a3:95:bc:2c:c0:95:3f:b8:21:
6e:2f:7b:36:fc:90:29:60:d6:88:88:da:5d:07:6d:
f7:6d:75:2c:72:ab:23:bd:98:3e:92:95:a7:2b:9a:
d1:e4:27:f1:c6:c3:d2:25:ea:3b:42:c1:06:de:71:
a5:32:f5:50:55:62:9d:20:52:1e:28:47:37:4a:a1:
59:ef:46:9f:6e:19:8e:10:88:cc:f1:cc:12:ce:c5:
fd:97:d6:c6:c4:c8:b9:be:b5:e2:ff:62:8a:d5:a4:
5b:22:95:1b:e9:b0:27:eb:0a:8c:3f:4a:8f:11:5a:
de:9b:0d:33:a6:2a:c5:5e:a1:ad:f0:e9:5d:82:1a:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:24:28:BC:AE:1E:DF:4B:1F:97:46:9D:30:8E:1E:AD:B0:91:24
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/7DIkKLyuHt9LH5dGnTCOHq2wkSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.235.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:aa:78:cd:cb:1c:51:fe:f1:de:fb:09:9c:18:d8:f3:4a:83:
92:21:28:4f:4b:ba:2d:e4:65:c4:0b:e8:05:9b:91:05:8d:ba:
ae:a8:b4:61:e0:ca:31:39:e5:d7:30:c7:a5:a3:54:4c:a0:91:
70:55:be:2b:b8:3b:4e:8d:9f:47:2c:12:83:d2:95:4c:44:f0:
85:08:78:87:72:2c:b2:79:02:a4:e7:1f:bf:7c:45:25:9c:81:
ab:c1:63:5d:d6:f9:2d:bc:5a:b0:5a:27:b3:4e:4d:a8:94:02:
3e:09:18:66:c6:53:dc:64:7d:4b:77:e8:7c:e1:15:67:df:54:
36:99:ec:35:45:ea:28:90:a3:6d:15:72:5c:9e:f2:82:93:fc:
a8:16:0b:2e:74:0b:fa:f8:ce:7b:ba:66:24:d8:f6:cc:15:aa:
25:3a:fa:86:9b:d0:28:91:a1:4c:d6:80:a8:91:ae:a4:7f:c3:
3e:f3:dc:35:b6:51:d6:f7:b3:9e:b0:36:75:fa:f6:ca:f6:ae:
8b:ae:a5:c1:38:34:e4:95:c0:c1:0c:db:bc:94:5e:f0:34:60:
4b:9f:3e:56:a5:2c:c6:4a:72:da:49:0f:01:f0:2c:cf:4e:b3:
f2:cd:a6:29:79:e3:9d:6a:c3:4f:44:20:70:ad:5c:24:f4:59:
4d:95:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:09:39 2025 by rpki-client