Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7H-gv5_EU1xgyQL3Fwr9Ti3ldV8.roa
File: 7H-gv5_EU1xgyQL3Fwr9Ti3ldV8.roa (raw, json)
Hash identifier: GfZNpqCfFPI4SruOS+PuW/xPD+NoVArHkQIWeNYXs4s=
Subject key identifier: EC:7F:A0:BF:9F:C4:53:5C:60:C9:02:F7:17:0A:FD:4E:2D:E5:75:5F
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019426D856CCFBDD6203C9685E18431C72C3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7H-gv5_EU1xgyQL3Fwr9Ti3ldV8.roa
Signing time: Thu 02 Jan 2025 11:48:19 +0000
ROA not before: Thu 02 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152672
IP address blocks: 46.37.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:56:cc:fb:dd:62:03:c9:68:5e:18:43:1c:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 2 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7fa0bf9fc4535c60c902f7170afd4e2de5755f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:07:40:0c:4f:3c:8f:e7:25:e5:8c:30:16:
00:75:ea:a9:ec:1d:bc:df:1a:19:c1:b1:90:a1:6e:
0e:44:bb:55:3b:9f:e2:05:b7:d2:74:73:e1:bb:d9:
90:24:db:12:e1:44:14:4f:fe:c5:a4:2a:4a:ce:4f:
3f:33:92:14:5c:e6:68:37:80:58:e2:01:81:26:30:
0f:28:34:20:81:66:ed:0f:5e:ad:02:2c:dc:b6:78:
85:1f:3a:62:27:64:34:c4:4d:5b:75:d7:68:9c:ad:
22:32:61:44:db:94:37:21:54:4b:6a:6f:c7:2b:67:
4d:ee:e2:56:d0:31:be:1e:0b:27:25:79:58:f7:aa:
85:a6:46:7b:80:1c:b0:df:5d:bb:c5:10:2e:e7:8d:
90:8d:d0:6a:c8:9c:b8:1d:a9:9c:f9:0a:bf:2c:0b:
0a:f6:3b:d4:a6:9c:9b:9b:6b:92:ac:66:52:1c:64:
e4:83:4c:32:cc:a1:0b:bd:fa:dc:a7:e9:b4:52:c7:
5d:c5:02:d8:e4:6b:09:92:a0:bf:33:73:06:65:22:
93:87:e0:38:0c:31:24:ec:12:61:a7:5c:a1:29:3e:
f9:4a:88:28:96:37:ba:a3:b2:f5:0a:27:bd:2e:0d:
1c:3e:59:53:fc:fc:08:da:37:2d:be:94:78:0a:70:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:A0:BF:9F:C4:53:5C:60:C9:02:F7:17:0A:FD:4E:2D:E5:75:5F
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7H-gv5_EU1xgyQL3Fwr9Ti3ldV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6b:14:18:b8:bd:e7:32:b8:c1:15:18:2b:cc:ce:4d:de:6d:
cf:50:56:b0:09:a4:ba:27:24:6d:24:c2:70:ad:75:09:98:99:
fc:a2:ea:26:3d:5c:01:5d:d9:76:d3:9e:17:8e:54:43:bd:72:
e9:53:f3:d7:f4:7d:80:d3:79:0e:a3:0a:51:75:71:8b:ad:29:
d9:81:9e:75:83:e1:00:f8:dd:2b:91:75:1f:88:8b:3d:12:3e:
69:50:b7:c0:e3:9b:42:63:67:1f:11:5e:33:36:4c:2c:9c:62:
c3:22:2c:13:d4:f1:0c:99:5c:be:c3:f4:67:c5:ae:5f:e4:24:
17:4a:17:bd:a5:bc:0f:45:33:3f:53:05:42:82:8f:c7:6d:16:
78:39:8d:f1:68:ba:d4:bc:6e:e4:47:69:95:18:b8:7d:56:23:
0b:69:87:7a:1b:2c:1c:20:4b:10:4c:da:41:b3:2d:60:25:a8:
23:66:67:3f:63:30:04:78:1c:4f:f8:8a:44:f7:87:89:af:1f:
e6:8f:d6:4c:99:fc:fc:f4:89:e8:aa:c9:7d:58:45:44:e4:a3:
27:70:b4:b7:c1:5d:4b:8f:8e:70:70:b9:da:be:33:76:7e:54:
52:ac:a5:c0:29:1e:0d:16:85:c3:2d:81:06:e0:04:90:72:83:
be:9f:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:50 2025 by rpki-client