Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa
File: Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa (raw, json)
Hash identifier: SD0RplzRHSl5AqxByRd93YJkWu3aK44s9ywFpp3pnJ0=
Subject key identifier: 12:FD:6B:01:12:77:E2:76:1F:1B:55:74:2D:DD:2C:A5:05:C8:F9:55
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E08B74498E844575F05D38ADF923
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207300
IP address blocks: 164.215.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e0:8b:74:49:8e:84:45:75:f0:5d:38:ad:f9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12fd6b011277e2761f1b55742ddd2ca505c8f955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:8c:01:bb:6c:71:af:98:e9:10:7b:8f:48:
6d:82:fd:1f:c4:57:18:73:8a:15:e2:1b:1e:eb:31:
a0:49:67:dc:a1:bf:25:01:57:4e:35:2c:ed:f6:37:
86:0f:e5:96:19:a8:6c:05:4b:4e:56:6a:b5:ff:73:
ff:2c:53:fc:a2:f9:94:4d:c8:3d:ce:a9:32:bf:cc:
d6:d1:af:a4:2c:3f:25:5c:4e:0c:64:45:55:65:c3:
de:3d:bb:64:8c:cc:0c:e0:89:dc:41:23:5f:ef:57:
02:e0:1a:0f:6e:4e:6f:67:84:21:af:64:2c:a8:df:
22:07:3e:79:74:b5:22:19:10:5a:f0:49:ae:b3:1e:
4e:77:f8:d2:98:cd:aa:15:04:56:7a:f2:c2:6f:bf:
04:fe:24:bc:f2:da:aa:a1:f5:84:14:cd:e6:ad:f7:
e7:bf:68:7b:8f:21:ec:43:69:e3:76:f5:29:2c:9c:
26:f7:9a:5d:b5:b7:8e:ef:eb:31:d2:fa:11:2c:1b:
9a:bf:b2:6a:aa:f2:c6:9b:f2:7e:13:5d:93:4b:f4:
d4:d6:e7:da:9b:41:1d:98:36:fc:10:0e:9c:ce:41:
63:1c:f1:73:0a:e2:40:14:a9:b2:f3:23:70:f5:7b:
21:da:51:cb:6a:28:be:09:41:0d:d2:45:c1:eb:10:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:6B:01:12:77:E2:76:1F:1B:55:74:2D:DD:2C:A5:05:C8:F9:55
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ev1rARJ34nYfG1V0Ld0spQXI-VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.102.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:88:07:21:94:30:93:c0:e3:5b:1e:40:54:ef:b3:d4:cf:6d:
c9:84:4d:6c:44:ee:ef:f8:ba:29:10:b0:a6:a2:0d:d6:41:f8:
d3:cb:11:f4:e9:f3:28:b9:e4:00:1e:e8:a1:92:62:f8:82:38:
38:63:34:41:12:21:03:1a:99:f3:05:fa:70:91:00:2b:9f:46:
30:3a:b0:11:5b:33:ae:e6:25:07:c1:ca:13:6b:a2:c8:09:71:
4e:69:de:73:b9:f0:4f:ff:8c:7c:fd:7d:d6:6f:9b:7f:15:1d:
34:fc:f5:01:0b:c6:40:90:11:c0:87:55:95:4b:08:c3:d6:84:
36:47:50:0d:df:74:02:da:51:98:05:b3:55:18:14:98:88:4f:
81:71:59:5e:6a:0a:03:b8:cc:a0:5e:6b:cd:b5:86:57:b9:77:
97:88:b5:1a:15:de:14:b8:28:59:ee:8f:ce:fd:42:8e:67:0e:
38:31:bd:58:c4:89:6b:10:0f:44:53:39:40:ec:e6:a3:9d:0c:
f5:ca:31:34:89:d5:34:2a:95:51:ae:e5:61:86:cb:3d:97:bd:
66:bf:d4:4a:1a:2a:ce:a3:78:1f:18:c4:95:34:f4:ba:c6:77:
f7:cd:6e:a9:7a:e0:95:29:d1:83:74:b0:e3:b0:a3:c6:0a:c9:
c8:25:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:18 2025 by rpki-client