Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa
File: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (raw, json)
Hash identifier: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=
Subject key identifier: EC:AA:0B:DE:31:A5:7C:D1:8F:A7:28:6A:57:D0:2D:64:06:A8:68:8D
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019427472F4780A7AF6D21E0FC819E88A22A
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199855
IP address blocks: 212.14.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2f:47:80:a7:af:6d:21:e0:fc:81:9e:88:a2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecaa0bde31a57cd18fa7286a57d02d6406a8688d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:1c:13:04:03:1f:c0:4a:5a:a0:c2:94:f4:
d3:d1:47:d6:85:72:74:99:4c:76:6e:fc:2c:ed:fb:
f7:bd:16:66:3f:d7:2b:18:e8:41:51:58:b3:dd:3b:
61:ce:64:79:ff:44:18:36:8e:a4:0f:ad:e6:41:7c:
f4:22:2e:8d:3b:df:9b:cd:21:75:7e:67:06:85:56:
bd:eb:fc:72:e1:7b:b5:fb:eb:62:db:5a:c6:11:e1:
b7:d9:e1:56:a6:c2:9a:dc:79:2f:dd:bb:07:80:20:
37:39:e3:0a:c6:6a:af:e8:7e:62:59:20:1a:fe:1d:
0c:a7:95:ce:c9:3b:c8:9f:e2:b0:0d:e8:b0:04:69:
56:44:c9:1b:26:61:fe:14:78:87:6e:17:95:ed:96:
bc:cc:3a:85:21:56:15:81:cb:e6:f6:d0:35:6a:1f:
ff:5a:41:6d:f5:c1:6b:b1:39:7c:cc:3e:ce:33:3d:
c1:bf:3b:ff:a1:97:b9:f9:ef:1b:b2:9b:25:d2:58:
51:da:86:1e:02:41:33:9d:d9:5c:69:fc:30:80:2f:
84:5c:36:73:ba:c1:93:dc:38:3d:38:54:88:6e:ce:
f8:c2:74:0b:32:d5:d8:94:f0:a9:64:d2:d3:19:5f:
97:a0:cb:d0:6a:a5:cc:83:b4:73:6e:76:c6:90:48:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:0B:DE:31:A5:7C:D1:8F:A7:28:6A:57:D0:2D:64:06:A8:68:8D
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.14.55.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:ae:a3:1d:f0:d8:d2:d9:96:f0:45:ec:c4:b7:4a:6c:01:
54:ef:98:c5:bf:96:ab:ed:db:29:d4:0a:d0:12:9c:cb:df:f5:
08:70:1f:92:b9:b2:f4:77:63:9e:69:49:20:91:20:ea:f1:b1:
da:c2:82:c5:c9:33:82:1a:8a:3e:72:b8:c4:98:0c:4f:df:a8:
e0:d0:5c:f5:15:13:91:67:8f:6c:84:81:9b:58:05:c2:12:71:
dd:75:6a:65:f6:9c:ce:f8:bc:7a:f4:8f:e6:4b:d4:a3:ec:9d:
46:74:fc:8d:39:ae:da:b1:bd:fd:1f:34:ad:e4:1f:ba:a4:e7:
b5:1e:18:6c:f3:8c:13:54:e7:1f:ba:a5:43:03:0e:e6:05:e7:
b8:0f:ac:32:09:b3:31:0e:17:ea:e4:ec:ff:80:bb:5f:96:dd:
e5:5f:1c:d1:70:c9:b9:31:68:3b:a4:58:7b:47:ca:d6:d3:03:
66:5a:5d:84:1f:01:8a:21:54:9c:22:73:07:42:81:d8:8b:52:
e9:3a:12:6c:99:6c:76:67:00:a1:03:05:5b:c3:5e:05:54:52:
f0:1b:26:c5:28:aa:57:a3:87:05:6f:21:65:2e:66:b8:6f:4f:
2d:7a:d6:ac:53:a4:40:b0:1d:e2:5c:43:c6:ee:73:01:eb:6b:
99:42:05:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:12 2025 by rpki-client