Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t7fB-EOq9Sg6zn2t9HqgT1-_UUo.roa
File: t7fB-EOq9Sg6zn2t9HqgT1-_UUo.roa (raw, json)
Hash identifier: l5LshZBk8HzNsfDJjmBvznjvslySa6jT+l6ihvl7kmA=
Subject key identifier: B7:B7:C1:F8:43:AA:F5:28:3A:CE:7D:AD:F4:7A:A0:4F:5F:BF:51:4A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0196CDB542AB1A8FFE10B2050C05344801BE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t7fB-EOq9Sg6zn2t9HqgT1-_UUo.roa
Signing time: Wed 14 May 2025 07:32:10 +0000
ROA not before: Wed 14 May 2025 07:32:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34576
IP address blocks: 194.103.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:b5:42:ab:1a:8f:fe:10:b2:05:0c:05:34:48:01:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 14 07:32:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b7c1f843aaf5283ace7dadf47aa04f5fbf514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:d0:74:56:55:0c:b4:ed:e7:6d:d0:70:31:
0f:3c:3c:8a:ce:c2:7a:7f:78:1b:88:02:60:50:46:
16:e9:56:4b:8c:a8:45:83:7d:5b:84:17:93:f7:12:
49:b1:95:cc:f6:95:c8:cc:64:1e:42:9d:09:12:82:
44:5f:b4:68:8e:25:f8:02:92:b1:48:13:9e:a3:aa:
eb:9d:f8:8f:3a:33:13:27:12:bf:a8:00:32:0c:bd:
4f:12:5e:69:8f:31:3f:3b:da:2d:e7:25:be:46:1e:
ac:ba:a1:e3:36:da:0b:61:2e:09:d0:dd:c7:8e:6c:
bc:63:fb:33:9c:82:67:21:0f:43:9f:cb:31:56:b9:
7c:e7:2f:c6:a5:d6:4c:2d:01:af:bc:33:b6:6c:50:
74:5e:39:1a:b7:74:0c:8e:85:e7:db:87:1c:f7:f9:
7a:27:93:21:d5:2b:aa:8e:0f:60:1a:d8:fc:3d:59:
f4:e1:c3:51:bf:49:1d:39:6d:36:d4:95:32:f9:11:
9d:84:e7:91:9c:ee:36:74:ef:b8:cf:9c:74:6e:d2:
96:9d:fc:a8:ce:5b:12:dd:ba:34:63:85:10:69:8e:
67:98:ae:d2:66:d8:9d:29:6d:09:ff:31:56:b0:0b:
07:df:de:4b:d4:b7:af:03:b9:a0:28:21:3d:3f:d0:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:C1:F8:43:AA:F5:28:3A:CE:7D:AD:F4:7A:A0:4F:5F:BF:51:4A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/t7fB-EOq9Sg6zn2t9HqgT1-_UUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.188.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:b1:95:ee:3e:bc:10:ff:cd:66:84:5f:2d:3f:62:f5:78:f8:
59:2d:24:47:94:69:bd:41:7b:52:38:d0:80:69:1f:5a:96:1d:
da:71:63:bd:de:50:a1:2a:8c:b7:06:ab:88:40:5c:e5:59:db:
73:3f:6b:44:2a:6c:6c:bb:77:8a:58:6c:fe:71:62:1f:10:e0:
44:99:5d:2a:9a:e4:c8:db:b0:99:e1:ae:1f:3e:6c:62:c9:ef:
71:4f:c1:f7:c4:1c:29:76:8a:c1:93:fa:f8:74:40:e8:58:2e:
41:df:c5:44:22:9b:f8:b7:e7:2e:4e:f2:28:b3:91:53:ad:1a:
1c:21:c2:c8:82:65:57:65:6d:91:47:14:ce:80:d8:01:f0:f3:
8a:8c:34:2a:6b:e9:7f:35:21:9c:ed:04:36:b8:dc:46:0e:55:
b6:c3:5c:ee:69:66:2e:a8:b9:68:0d:43:42:b8:1b:ec:e7:70:
39:bd:d4:85:ea:4d:53:e2:6b:90:b3:98:88:09:34:86:35:f0:
21:67:48:3c:d6:7a:91:51:52:82:80:f7:9f:03:67:57:bf:36:
39:bc:55:9a:b5:87:59:59:f2:e6:5c:98:b6:ab:3f:b1:c9:76:
ce:08:af:a8:a3:7d:8c:a4:31:3e:a0:f1:87:0f:cd:49:02:17:
bd:99:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:43:35 2025 by rpki-client