Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa
File: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (raw, json)
Hash identifier: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=
Subject key identifier: 7B:B1:FD:07:9F:A9:07:78:A4:67:9F:A8:87:5E:5F:9B:48:20:0A:A2
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 019420D5F60D28D9DCA2B964013A718FB8A1
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59589
IP address blocks: 195.93.248.0/24 maxlen: 24
2a10:1040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f6:0d:28:d9:dc:a2:b9:64:01:3a:71:8f:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bb1fd079fa90778a4679fa8875e5f9b48200aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:1c:29:c0:f2:15:1c:88:25:cd:b1:f2:7f:
5b:dd:6d:16:79:7e:f2:19:50:2f:f6:f0:cc:68:68:
52:57:f7:c4:48:a0:5c:9b:ea:c3:fa:e4:bd:dd:0f:
13:d2:35:d7:f9:15:b6:a4:f0:f5:91:4f:e9:b8:e9:
dd:73:8c:8a:a7:8a:31:52:00:b3:53:15:e2:75:78:
4b:03:80:90:83:54:c9:0a:3e:a2:c2:5f:d4:39:61:
6e:1f:2e:74:48:59:bb:e9:64:c9:3f:ab:37:ee:66:
80:fc:71:76:6f:0f:63:24:c3:0e:78:bb:02:ec:7c:
2d:48:9c:40:19:c8:6b:9c:65:ee:d8:c9:9b:91:e7:
42:44:00:0f:eb:82:5f:87:6f:ee:63:62:e7:0a:4e:
58:57:e1:15:12:98:f1:6e:71:8e:5c:3a:83:09:50:
10:40:16:8f:72:84:fa:f5:fd:4f:90:55:0a:79:e4:
86:8c:d9:31:27:98:e4:09:d9:ab:02:b9:b5:22:e0:
0e:9d:a6:54:81:c9:26:b2:86:0c:fc:80:ae:0b:d8:
13:84:fd:ee:cc:85:c2:7a:36:d8:a2:90:a4:41:55:
48:55:26:fe:92:d7:5d:9f:6b:17:d3:3d:96:08:28:
f0:64:cd:cd:01:9b:e4:07:cc:94:51:6c:d0:30:bb:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:FD:07:9F:A9:07:78:A4:67:9F:A8:87:5E:5F:9B:48:20:0A:A2
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.248.0/24
IPv6:
2a10:1040::/32
Signature Algorithm: sha256WithRSAEncryption
66:95:ef:c3:c5:d9:d6:65:74:f9:ad:86:6e:72:93:94:36:29:
87:3f:c4:65:e1:48:29:25:d4:96:b5:86:75:cd:07:ec:dd:fb:
6f:87:8e:e0:45:26:f4:1f:19:16:4a:5f:c8:2b:bb:72:af:d4:
6c:d7:c7:a3:26:a5:11:d1:4e:a5:7b:bd:43:81:f7:c7:ff:e1:
23:9d:91:61:d0:48:49:a7:66:43:90:27:74:a3:93:ae:e2:a5:
3d:9c:84:08:a6:2a:b7:02:1e:84:57:ba:ac:cf:6f:05:1e:04:
79:75:a8:28:d7:22:a9:35:89:d5:fb:f8:d8:9e:6c:61:e4:a7:
b3:9a:18:7a:d5:2f:b2:5b:af:48:4d:14:05:f7:c6:d7:11:d1:
2e:bc:5c:f5:55:01:66:95:c1:2d:92:b5:bf:22:c1:26:9a:7a:
38:1d:e9:b6:e4:a3:c9:f0:3c:35:2b:34:43:5b:27:cc:26:69:
06:be:82:2d:83:bc:d2:a3:71:a4:48:0b:2e:78:b3:c6:2c:b4:
02:6f:7d:08:c3:f1:f4:60:d3:82:05:76:c6:90:b0:44:16:7f:
94:e2:24:7f:6e:29:69:a2:ad:bd:e7:2f:3f:e4:f7:3a:42:be:
32:45:ba:66:ea:1b:e1:5c:4a:09:5c:f1:23:6e:a4:73:97:54:
21:7c:b9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:33 2025 by rpki-client