Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa
File: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (raw, json)
Hash identifier: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=
Subject key identifier: ED:72:EB:65:E2:8E:37:79:A2:FD:8F:07:6D:D9:30:85:D3:89:1D:93
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 0196386255E4F3BBA569BE4447D9B9D4161A
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa
Signing time: Tue 15 Apr 2025 07:38:10 +0000
ROA not before: Tue 15 Apr 2025 07:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36671
IP address blocks: 212.133.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:62:55:e4:f3:bb:a5:69:be:44:47:d9:b9:d4:16:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Apr 15 07:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed72eb65e28e3779a2fd8f076dd93085d3891d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:20:84:be:1d:6f:75:a7:44:7e:b7:7b:24:04:
55:26:4c:22:9f:6c:21:57:70:86:a9:ac:81:40:c1:
2f:8e:f4:3a:fd:ca:a2:59:ba:ad:09:35:ea:41:6b:
3a:76:b3:ce:ed:18:c6:d5:4e:5e:bb:d1:e8:91:3d:
1a:70:53:8c:0b:a1:47:67:42:2f:b8:5e:41:e0:82:
cb:22:95:b9:9e:34:75:19:42:14:08:8a:db:6f:98:
e9:fd:53:12:8a:20:94:b3:d3:b8:3a:50:81:80:bb:
aa:65:54:b5:92:ce:e3:7b:38:be:31:fd:43:ac:65:
7d:15:b3:f1:39:70:0c:0a:51:43:8a:d5:3c:9f:21:
d2:59:51:57:d0:09:30:2f:cd:d0:88:77:32:06:3e:
09:27:ee:67:7a:50:f8:8e:20:5a:ed:cc:c0:f5:9d:
fa:be:7a:5e:96:19:e0:7f:a1:16:a2:8c:fc:5a:ef:
fa:59:ff:f9:3e:bb:dc:dd:85:ee:8d:a7:2b:9b:3a:
99:b1:e2:b6:98:89:cd:2a:a1:5f:b5:80:fa:01:84:
c9:7b:6b:43:c7:4f:70:5d:f1:a0:b5:bc:73:56:68:
7c:69:4b:f0:a2:68:61:d5:b6:f0:6d:2e:56:04:db:
fa:64:72:b0:9c:e9:60:aa:fe:c9:fa:c3:44:1c:5a:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:EB:65:E2:8E:37:79:A2:FD:8F:07:6D:D9:30:85:D3:89:1D:93
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.133.79.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:04:cf:6f:55:67:3c:99:76:53:ac:ad:68:f5:3a:09:a5:
3a:43:1a:5f:53:ec:fa:d5:58:15:c9:65:0b:31:f8:80:ff:00:
02:60:bf:f8:40:0b:8a:68:28:0e:5d:e1:93:e9:7c:7e:a2:60:
25:ef:3e:2f:25:5d:c1:72:49:a6:2e:cf:ac:ad:8b:28:e1:43:
d5:ed:92:30:10:13:10:30:af:c7:48:ca:5a:86:42:5f:c3:ae:
4b:b4:1a:ac:c9:04:e1:50:e7:f1:0b:39:d5:f6:c4:bc:3f:16:
d7:c6:9e:1b:b8:ba:dc:14:49:03:44:f4:3a:59:be:d6:77:98:
56:78:ef:99:04:0a:ec:5e:29:57:df:96:55:65:63:5a:c8:b5:
0b:d2:03:a1:15:bb:3f:02:0d:ca:1d:a8:b8:d7:8c:4c:7f:5b:
2a:3d:f9:2d:d4:d5:90:9b:11:be:e7:64:2a:30:86:2a:0d:e3:
0e:50:35:b7:8e:a0:bb:02:73:89:6c:40:5c:dc:91:e4:22:dc:
9e:90:cc:5e:dd:34:05:cf:2b:d6:08:81:c5:3b:51:7c:a3:5a:
08:38:cd:51:99:ae:e8:a1:81:fe:6a:5b:a6:b9:68:46:2a:b9:
b8:0c:7d:ce:02:3e:f0:d8:b1:84:7c:14:5f:c7:a8:ce:25:12:
63:13:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:35:59 2025 by rpki-client