Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7__iS0PC1sPpziieUf7cPR0483I.roa
File: 7__iS0PC1sPpziieUf7cPR0483I.roa (raw, json)
Hash identifier: WMdPgkVAgvH1xgF/iLZlNWqwQWtXShkyRu4TdlhutJM=
Subject key identifier: EF:FF:E2:4B:43:C2:D6:C3:E9:CE:28:9E:51:FE:DC:3D:1D:38:F3:72
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 0194221FA5E23B2B463F55170711CE6A167C
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7__iS0PC1sPpziieUf7cPR0483I.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 45.15.156.0/24 maxlen: 24
217.196.97.0/24 maxlen: 24
217.196.100.0/24 maxlen: 24
217.196.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:e2:3b:2b:46:3f:55:17:07:11:ce:6a:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efffe24b43c2d6c3e9ce289e51fedc3d1d38f372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:ca:ec:65:1e:7e:fb:62:64:05:1d:63:03:
25:64:8d:b4:f0:91:f4:77:41:31:dd:3c:e0:6c:26:
72:0c:d9:1a:0a:af:c7:ff:bd:69:27:88:e1:ad:3d:
3d:fb:33:e8:f6:80:1c:fc:87:d7:e0:5d:a2:94:c2:
1d:f5:0d:6c:0a:2b:1d:89:e6:55:cb:54:a6:da:64:
25:d2:d4:05:7b:d5:35:14:82:a7:df:6b:63:51:f0:
70:63:58:94:24:8f:66:e6:09:03:90:d9:bc:32:cc:
fd:a1:80:e9:d2:35:e1:27:c9:a7:5f:dd:b5:02:48:
5e:78:03:46:a6:82:44:eb:c7:da:d9:4d:1d:b2:fa:
7b:db:1c:7f:0e:db:54:3f:47:24:0d:21:8e:5b:af:
c4:c2:49:09:83:f4:bb:1b:28:70:50:58:52:5b:80:
19:f4:a8:e1:44:ae:c8:41:7d:79:c6:04:c8:81:71:
ec:d7:82:83:bd:e5:19:51:fe:7c:8f:42:0c:04:87:
21:1e:59:3f:8e:63:7f:52:8f:ef:7e:97:01:f6:8e:
c8:99:94:3c:b1:3b:44:c0:47:e4:62:5d:f0:be:36:
a5:96:fa:b0:16:bd:48:13:6e:5a:a8:20:12:1a:c6:
da:1c:1c:01:81:f3:ea:f4:ca:a4:07:92:48:0a:ce:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:E2:4B:43:C2:D6:C3:E9:CE:28:9E:51:FE:DC:3D:1D:38:F3:72
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/7__iS0PC1sPpziieUf7cPR0483I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.156.0/24
217.196.97.0/24
217.196.100.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f0:76:de:57:cf:bd:2b:70:de:88:08:2d:d0:d0:d7:7f:89:
fc:8b:0f:df:93:08:d1:55:45:d6:9f:e6:57:e7:6e:3c:ed:4b:
9d:fa:d1:43:46:07:de:39:9c:05:b1:4d:a9:2f:40:f9:8c:30:
3c:8e:8e:16:bc:c3:c3:27:a2:50:5e:92:6e:1e:0e:53:3b:2e:
92:f3:46:e8:3c:a3:95:f8:35:5b:8d:2a:96:49:ae:5c:4f:4b:
ab:53:e9:d8:18:bc:68:9e:99:99:48:b1:8f:c2:9a:67:94:23:
ac:d6:0e:f6:07:04:c2:46:82:4b:7d:a7:c7:91:1c:fe:77:fd:
c8:ce:58:a8:2d:1d:de:0b:f5:ec:c5:ab:bd:8b:8a:bc:04:6c:
f7:0b:9c:6d:6c:92:22:1a:a0:a7:bf:15:79:f9:70:e3:c0:39:
4b:7d:41:17:05:b7:ee:70:ec:5a:65:ae:8f:72:8b:c6:b5:d8:
83:cd:cc:d5:4f:13:c6:19:73:a7:df:1b:b8:9c:5d:16:72:64:
57:4d:64:34:6f:76:b7:36:8e:e5:66:c6:03:ee:68:07:63:29:
5a:31:69:ac:61:44:39:dd:71:93:10:f7:c5:46:29:dc:8c:e8:
26:51:8c:d0:28:bf:79:e1:33:87:cd:5d:6a:40:bf:27:9e:ca:
2f:e8:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:30:08 2025 by rpki-client