Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H7Vkw4tyBo9x3jCRAdkJJwOaRrs.roa
File: H7Vkw4tyBo9x3jCRAdkJJwOaRrs.roa (raw, json)
Hash identifier: L1jkz3Q4vGzhkRfGE1obTxW8KF/ZJAcbhIPRIU2ISAc=
Subject key identifier: 1F:B5:64:C3:8B:72:06:8F:71:DE:30:91:01:D9:09:27:03:9A:46:BB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220212B7CE9E784E2008699196BA855
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H7Vkw4tyBo9x3jCRAdkJJwOaRrs.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396998
IP address blocks: 14.102.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:21:2b:7c:e9:e7:84:e2:00:86:99:19:6b:a8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fb564c38b72068f71de309101d90927039a46bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ce:ad:04:ba:9e:68:37:21:2e:f3:6d:56:a1:
ff:0a:50:24:79:43:b8:83:a6:44:a5:16:18:6b:b4:
15:f7:6b:15:aa:af:92:b4:34:65:66:a8:0e:76:1d:
3e:5d:35:c8:6f:a1:b4:b7:11:57:cd:30:78:89:4b:
44:d0:42:92:7c:17:b3:e5:1a:d1:eb:85:5b:50:58:
ce:6e:d6:b2:1a:64:c3:9d:95:b5:d3:a2:7d:bc:54:
b7:8a:67:0d:e9:79:30:7e:f5:c4:40:50:71:76:84:
fb:73:0f:99:94:de:22:e2:f7:1c:8b:56:70:43:a8:
0f:a0:ff:f1:ed:1f:82:4d:cd:82:83:6c:45:38:38:
9d:2c:29:0d:91:79:8b:ef:e8:7a:5b:1f:75:7f:7a:
c6:24:33:22:20:eb:79:64:29:e1:64:dd:a8:60:6c:
c1:92:74:e7:79:96:ab:a2:c5:6c:85:e8:5d:cf:32:
77:92:24:82:49:0e:4c:ca:e1:41:55:49:e4:89:68:
3c:b7:65:64:a3:01:0b:8d:43:3d:15:ee:ff:57:3d:
d1:32:e6:29:0e:63:90:fe:a2:10:72:a1:6d:d8:59:
94:95:d8:83:81:a1:cc:20:85:75:83:a1:61:b4:16:
c2:3b:39:bb:a2:88:e2:ce:91:cb:5d:d7:c5:2a:47:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B5:64:C3:8B:72:06:8F:71:DE:30:91:01:D9:09:27:03:9A:46:BB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/H7Vkw4tyBo9x3jCRAdkJJwOaRrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
07:65:24:43:72:8c:9a:c5:79:08:05:74:fb:ea:67:6d:a8:98:
a1:d0:35:7b:0c:0f:35:6b:a1:26:e9:fa:ec:88:47:c5:d7:e9:
1a:a9:a8:8a:71:12:17:a7:f2:98:3a:15:21:24:0e:fb:0e:fc:
4c:2f:41:3f:d2:25:f3:19:ce:0f:a7:ef:10:5b:4a:89:ca:0c:
f8:31:1b:70:76:e5:3f:cc:19:5c:43:f7:c5:36:44:fd:5c:88:
37:55:7d:58:c7:df:ca:fd:cb:8d:e6:fb:f5:71:fa:36:b2:59:
29:f5:9f:d4:8b:72:72:61:20:cc:dc:77:fd:b8:53:5c:65:f7:
ce:18:1a:64:37:07:2c:42:cb:25:e1:08:2c:d7:88:e7:84:ef:
a8:bb:9b:ee:a1:a6:92:3f:5a:5b:73:6b:a5:c7:52:54:7f:a0:
91:00:e4:4d:04:00:d9:cf:7e:ff:80:62:73:36:38:5b:4c:81:
f1:ce:63:5f:72:e7:1e:14:03:a4:08:1a:f4:e0:4f:db:1c:cf:
36:d0:f4:78:d6:87:d8:2b:38:83:c6:8d:8f:fe:73:80:04:63:
35:a7:32:90:1e:96:9f:40:96:d5:97:67:e6:46:9b:e4:32:9e:
3c:a7:01:3c:d4:99:28:66:a1:2f:c7:ec:ec:e2:6f:c0:43:bb:
f0:98:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:57 2025 by rpki-client