Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa
File: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (raw, json)
Hash identifier: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=
Subject key identifier: EE:10:02:4F:9B:0A:9F:3D:C7:C4:88:BF:C4:B2:6C:03:98:99:AC:F4
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01942143E994FE7D3C4E2A8E9AB605E14FAC
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201691
IP address blocks: 45.159.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:94:fe:7d:3c:4e:2a:8e:9a:b6:05:e1:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee10024f9b0a9f3dc7c488bfc4b26c039899acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e9:b4:7e:22:d2:81:b7:71:a5:56:07:ab:8f:
6b:a2:45:ca:7f:62:d9:38:10:1c:6c:7f:dc:88:32:
e5:70:4b:e2:fc:d7:5c:85:36:ff:c3:70:74:a1:77:
93:de:f1:fa:74:a6:30:1b:e3:ca:6e:74:d5:47:93:
3f:f2:4c:a4:6b:d9:10:cf:85:70:86:8d:46:f9:8a:
8f:c2:9c:59:a0:41:d9:f2:8d:ce:8a:e2:3a:91:30:
2e:91:33:2a:be:28:40:6e:d0:44:50:b4:2c:bf:6e:
bc:23:74:b9:2e:5f:66:ca:e2:65:40:07:cd:20:9c:
4f:e0:a7:0f:b1:54:04:ad:60:e1:c2:ac:96:07:95:
b4:ea:b5:7a:ba:98:4f:5b:5f:ad:67:12:d6:55:96:
77:86:10:f2:f0:5b:a1:1e:61:45:14:1f:9c:e4:6b:
3e:fa:5a:e9:59:bd:d8:2a:5c:92:39:74:b3:cd:ca:
7f:91:7a:f3:65:5f:4a:c5:16:87:cc:ec:d7:72:70:
10:8f:ec:3f:91:8a:72:fc:97:e3:23:c1:57:e5:71:
77:4c:bb:58:64:c7:d4:d5:b4:93:40:36:5d:6d:2c:
70:85:1d:ef:a9:ca:e1:5f:df:54:ef:f4:ed:a9:77:
3e:5f:58:61:8f:39:81:2a:85:34:ea:6d:d9:53:50:
b2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:02:4F:9B:0A:9F:3D:C7:C4:88:BF:C4:B2:6C:03:98:99:AC:F4
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.151.0/24
Signature Algorithm: sha256WithRSAEncryption
57:a0:b4:3b:e1:c7:fa:dc:3a:f7:60:c5:35:7b:3c:a1:32:0b:
48:a7:26:ce:62:ee:c7:4f:26:fb:09:51:5e:a9:3e:e4:17:ea:
b7:30:ab:b9:91:9d:0c:e2:d8:a2:0b:3a:d7:d6:4e:2f:62:39:
03:b8:6a:99:c8:eb:90:9b:23:b5:a2:1a:7f:48:b4:40:b1:03:
a3:85:85:1f:a6:db:a5:42:65:da:3b:8e:8b:54:06:55:47:33:
2a:a4:81:9e:1b:8c:9d:97:12:a9:1d:b1:e9:0a:2e:44:f9:5c:
bc:ec:ae:44:c9:73:0a:20:da:02:c5:a9:b0:e4:f1:65:ee:5e:
fd:5e:71:3d:04:7f:ce:a9:72:54:89:f8:c5:7b:c3:1a:85:9e:
7b:c7:f6:00:49:c9:a8:c4:6e:57:7b:c1:0d:77:ef:2c:59:a3:
44:86:c2:d4:d8:b9:1c:43:a6:4d:cd:1a:27:0b:a2:96:42:dc:
e9:bf:88:eb:87:61:67:ce:f6:18:57:37:65:8c:41:c0:aa:88:
e9:ac:8c:6c:af:8e:8a:d4:e7:df:47:0e:76:45:bb:09:10:f2:
d8:7e:b2:bf:00:49:80:ea:96:fb:9f:cd:18:63:c2:1f:ca:ef:
94:b7:6c:c4:96:50:61:21:6c:1d:9b:de:f7:b1:59:5f:50:9d:
ab:8a:63:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:42:41 2025 by rpki-client