Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/18p7Ci3FYRjnSUuSYvylnzylknA.roa
File: 18p7Ci3FYRjnSUuSYvylnzylknA.roa (raw, json)
Hash identifier: LM1mefgxf5Tx5qZdCUkPbNfosOkCVxVYnJvV3BXzWRQ=
Subject key identifier: D7:CA:7B:0A:2D:C5:61:18:E7:49:4B:92:62:FC:A5:9F:3C:A5:92:70
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019425FD8CC2CCA7B8D789662F0B0134C053
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/18p7Ci3FYRjnSUuSYvylnzylknA.roa
Signing time: Thu 02 Jan 2025 07:49:21 +0000
ROA not before: Thu 02 Jan 2025 07:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206509
IP address blocks: 194.207.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8c:c2:cc:a7:b8:d7:89:66:2f:0b:01:34:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 2 07:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7ca7b0a2dc56118e7494b9262fca59f3ca59270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:80:af:ec:eb:69:08:22:38:8f:05:f3:b4:
a7:84:0b:e6:65:ac:7b:56:16:33:dc:9b:26:91:51:
15:27:65:cf:cf:c1:b6:c3:37:60:59:a3:94:d0:96:
bc:07:ab:c8:dd:72:33:87:bd:de:fd:8f:ce:ba:8a:
1d:5e:eb:98:c9:99:69:22:30:65:b7:90:0b:2e:9e:
5a:77:a9:50:8d:51:6f:62:d2:a3:b8:97:ca:db:3a:
11:21:ea:12:f3:a0:25:bc:ec:d7:7c:12:a7:ce:99:
97:93:4a:5c:db:c8:2b:f5:40:82:bf:2f:fb:02:95:
15:e4:a5:81:47:fa:35:06:34:5f:01:9a:b4:05:08:
01:5c:88:4e:94:c0:6e:93:e7:5f:03:92:d2:1a:b3:
15:b8:bb:8d:71:3e:ee:a7:34:10:fd:4b:ee:45:28:
dd:93:71:75:c2:13:48:bb:57:f5:27:17:20:14:30:
bc:17:61:18:08:66:5f:c1:78:cc:e9:e4:a3:ae:b6:
23:4b:ca:ca:78:21:60:d6:68:6e:9c:eb:b0:33:03:
45:8d:df:ee:b6:a0:fe:db:6f:b4:f1:36:2f:98:ef:
f3:18:d0:57:b8:34:0b:43:fb:11:15:81:e3:7f:35:
f6:1d:59:2a:d3:de:75:7c:ef:a7:b6:d2:68:35:d4:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:7B:0A:2D:C5:61:18:E7:49:4B:92:62:FC:A5:9F:3C:A5:92:70
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/18p7Ci3FYRjnSUuSYvylnzylknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:f9:c9:ce:fb:4a:93:76:4e:cc:27:21:ff:51:75:a2:33:19:
70:0c:4e:e3:b9:43:ab:49:65:22:a1:6e:b6:98:0a:20:97:ea:
d0:71:24:4a:dd:dd:6a:73:e7:01:40:f2:d1:35:19:cd:de:fb:
fc:1d:53:04:b6:c6:cc:94:f2:04:df:4c:05:5a:3f:ba:a5:96:
3b:64:2c:b1:73:4a:20:5a:9b:9f:73:bb:6c:e7:ce:b8:b1:78:
ee:28:52:9d:1b:ff:a7:0d:42:fe:93:2c:f7:9a:ac:cc:0c:a4:
c2:4b:11:99:bc:84:e7:44:59:d3:0d:d6:8e:77:96:af:5e:d5:
b7:1f:8d:ec:ca:b2:47:85:77:6a:e6:c9:05:fc:f2:0c:50:e3:
db:b4:82:82:5b:4b:31:91:06:e8:ad:96:c0:95:c4:73:5b:5c:
f8:a7:6f:1d:00:86:71:cb:40:37:9e:0f:a6:70:85:a6:45:23:
96:10:7e:e2:86:20:aa:3a:de:c0:a3:81:69:87:0e:81:97:f7:
95:c6:ec:ea:07:e5:94:c5:c3:f9:3a:28:3f:72:1c:77:c9:a2:
2d:e7:a3:f0:7e:b1:61:ce:46:ad:12:fb:51:6b:c5:95:35:e7:
9a:ab:65:94:e5:8d:eb:fa:76:96:f0:5a:f0:a7:11:0c:d0:b3:
cf:fe:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:27:48 2025 by rpki-client