Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7xzVx-2qDp8kOVxI-dEnvHz9YWY.roa
File: 7xzVx-2qDp8kOVxI-dEnvHz9YWY.roa (raw, json)
Hash identifier: 3p20WpDbfFaR0ryhQ7b6s/AUW7gBCx43ij/jdi2/+FU=
Subject key identifier: EF:1C:D5:C7:ED:AA:0E:9F:24:39:5C:48:F9:D1:27:BC:7C:FD:61:66
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01963282DF6099E6CB10509E1F654596846D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7xzVx-2qDp8kOVxI-dEnvHz9YWY.roa
Signing time: Mon 14 Apr 2025 04:15:59 +0000
ROA not before: Mon 14 Apr 2025 04:15:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 77.111.96.0/24 maxlen: 24
89.106.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:32:82:df:60:99:e6:cb:10:50:9e:1f:65:45:96:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 14 04:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1cd5c7edaa0e9f24395c48f9d127bc7cfd6166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:8c:9a:9c:cb:af:93:e8:39:80:1d:fb:c8:
2b:01:ff:32:75:fb:4e:77:8f:9f:40:08:c0:2d:a5:
8c:04:c9:c4:1b:fa:ad:d4:73:61:84:4e:07:2b:bd:
30:af:de:c2:81:45:c2:2d:a0:0d:f7:e0:f6:c7:b4:
b3:d7:ed:a1:32:48:ae:3e:9e:8d:06:05:82:1d:32:
a4:7b:d6:92:34:d1:b6:4e:ce:26:03:e5:35:0d:17:
6b:db:c0:9c:43:0f:c5:5b:a4:c0:db:3d:48:d2:92:
05:0f:b8:4c:32:51:6d:09:40:df:23:2c:77:80:29:
56:c4:47:ff:23:21:db:c2:d2:f1:33:f8:23:a5:ff:
79:c9:57:db:94:4a:e1:ad:12:3d:92:67:42:85:f1:
73:95:9d:eb:38:71:fd:7a:1c:88:0e:04:f0:9e:4b:
67:e9:93:c2:42:a0:f7:5f:0c:a3:05:6b:7f:6f:17:
59:12:73:b9:84:5d:c3:eb:ab:0a:0d:2d:94:d4:ed:
72:3e:fa:e7:d8:57:8d:c1:7c:6c:e0:e3:fe:80:f4:
54:29:55:f1:4e:78:2b:9c:1b:11:fd:1d:a3:12:53:
c4:3c:66:57:95:11:5d:d0:ee:db:a8:df:1c:96:07:
62:aa:a2:91:25:ed:e2:5c:50:07:2f:52:90:1f:e7:
1f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1C:D5:C7:ED:AA:0E:9F:24:39:5C:48:F9:D1:27:BC:7C:FD:61:66
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7xzVx-2qDp8kOVxI-dEnvHz9YWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.96.0/24
89.106.14.0/24
Signature Algorithm: sha256WithRSAEncryption
be:ba:ee:ea:ba:aa:37:cb:aa:e7:91:9e:26:dd:c3:56:50:bf:
43:dc:d0:d8:68:b8:e5:fe:b9:db:45:ef:ce:57:88:21:62:64:
34:5f:69:dd:6e:fd:eb:17:55:8e:26:03:15:31:d4:24:19:b1:
57:2d:95:32:fd:ba:01:6c:1d:f3:c5:df:da:c0:1b:b5:95:36:
67:71:9e:ad:93:e4:a7:44:a4:88:8d:d2:0e:47:35:3c:2f:40:
c2:59:1b:01:08:c3:e9:e9:8b:bd:84:1d:de:82:03:06:32:d3:
9c:ff:9d:a0:c0:01:f8:51:f6:52:b5:9d:32:40:64:b8:a7:7f:
f0:a6:36:17:25:47:c3:ae:6f:07:35:07:d9:2c:0d:8a:70:bf:
b1:76:ac:07:51:dd:20:dc:cf:ef:d7:bb:36:d1:e6:1a:a5:6e:
79:97:7f:54:54:a1:7f:19:44:98:82:54:bf:5b:3c:13:15:6e:
a4:42:19:e5:5a:0d:d5:1c:02:8a:3b:69:db:7b:d7:ea:b5:16:
13:7c:31:85:e3:11:c4:4c:ad:61:f5:d5:5e:f8:f1:b4:6a:dd:
53:c3:f5:f2:96:6f:dc:f7:73:14:ac:8b:ff:a1:5e:0c:07:a4:
cb:cd:14:f2:43:94:fe:1f:38:28:98:fe:db:ba:72:cd:bc:69:
28:47:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:26 2025 by rpki-client