Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa
File: eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa (raw, json)
Hash identifier: pySOsCgZVAtRnTClT396cb7iWVIwE3V7HZRoqKyCYOE=
Subject key identifier: 7A:1E:D0:20:E5:0B:4E:4B:8F:77:C8:59:7D:E0:AD:D4:37:29:F5:68
Certificate issuer: /CN=95ea055146a0136705cb6a6dae4d4249c514c693
Certificate serial: 0196700F427F3C0B40F3F6B6396FCC88A87F
Authority key identifier: 95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa
Signing time: Sat 26 Apr 2025 03:06:10 +0000
ROA not before: Sat 26 Apr 2025 03:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197809
IP address blocks: 91.227.116.0/22 maxlen: 22
193.169.112.0/22 maxlen: 22
193.169.116.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:0f:42:7f:3c:0b:40:f3:f6:b6:39:6f:cc:88:a8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95ea055146a0136705cb6a6dae4d4249c514c693
Validity
Not Before: Apr 26 03:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1ed020e50b4e4b8f77c8597de0add43729f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:33:21:34:c9:ac:18:c4:09:5e:59:67:85:
93:4c:17:8e:ee:53:ea:48:ce:57:06:4a:d8:0c:6a:
e0:66:61:29:cd:e1:f5:14:ae:bf:47:1f:43:7a:74:
63:d9:c5:00:fd:03:b3:33:36:c6:ca:85:12:9a:8f:
e5:02:f2:a3:2a:c7:42:42:3e:bd:2c:e1:a0:e3:ab:
fc:d2:ae:58:76:6c:25:1c:7b:c0:df:ca:09:b7:21:
5d:1e:bd:76:30:2d:70:09:a9:d7:e5:ec:a8:1e:3c:
45:43:74:72:00:e3:82:c2:68:fc:bb:8a:a9:a6:83:
cc:bd:15:05:d5:2c:15:be:aa:e1:1c:64:7a:b9:c5:
72:8a:92:82:80:85:5f:6e:a5:cc:e9:35:1f:56:e1:
ea:ac:51:6f:6b:80:e1:78:f0:98:12:17:19:45:ba:
94:43:e9:5d:ab:3f:2b:90:e8:c7:c7:ae:45:e8:5c:
35:ee:eb:d2:a0:7e:4c:dd:ca:60:13:20:33:60:7b:
c8:2f:4d:e5:15:2f:37:6f:96:e4:be:15:f7:d9:85:
84:68:43:a5:80:c1:c0:d8:b0:f0:f6:11:1b:c2:e5:
cd:f4:68:ee:a7:d3:fb:16:f6:f5:86:f6:ac:9f:66:
68:50:18:82:47:19:ed:3b:c9:99:9e:31:04:19:50:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:D0:20:E5:0B:4E:4B:8F:77:C8:59:7D:E0:AD:D4:37:29:F5:68
X509v3 Authority Key Identifier:
keyid:95:EA:05:51:46:A0:13:67:05:CB:6A:6D:AE:4D:42:49:C5:14:C6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leoFUUagE2cFy2ptrk1CScUUxpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/eh7QIOULTkuPd8hZfeCt1Dcp9Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0472a2-ef78-424b-be3f-6782625ef2f9/1/leoFUUagE2cFy2ptrk1CScUUxpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.116.0/22
193.169.112.0-193.169.117.255
Signature Algorithm: sha256WithRSAEncryption
b7:f8:d4:ba:3d:6c:f5:d2:0f:f4:e7:a4:81:a2:f2:2e:8b:a2:
02:cc:59:60:72:24:a9:c4:98:72:19:50:4c:2a:13:23:70:c1:
9a:7b:95:06:12:7d:08:c9:e8:79:06:1f:44:70:10:a2:c6:e1:
c2:bf:67:86:75:1b:86:c1:4f:2b:0f:fa:98:6f:70:46:18:53:
07:04:ab:01:9b:20:88:78:be:a0:44:f2:5e:6a:8d:b6:61:8b:
3f:67:55:36:ea:e8:15:29:5b:7e:f6:aa:75:c0:09:fa:83:9b:
9b:17:da:cc:cd:b1:dc:d9:2f:5f:fc:e8:43:a6:0e:ff:d6:84:
2f:b7:94:7e:19:d0:67:eb:6b:e6:fd:f8:8f:59:28:83:9b:0e:
ee:00:a7:7d:c3:b1:32:3e:4d:88:1c:10:f0:03:3a:3a:5d:97:
c4:66:ef:8b:1d:aa:4c:5f:80:c9:dd:27:95:83:23:35:31:27:
1b:7e:80:2f:04:04:bd:d1:5b:e0:c7:d3:7e:21:6a:a7:a1:68:
b8:0b:25:18:94:b6:8a:d1:02:72:2c:e4:49:39:fb:91:79:75:
98:e1:be:12:5c:cf:55:6b:c2:75:7f:85:03:d6:e3:8a:f6:af:
00:c9:eb:a4:3b:26:cc:97:cd:0b:78:97:d4:e0:a6:96:4e:5d:
a1:04:b7:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:04:54 2025 by rpki-client