Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/7t7MlmcK5nHqyL8qD10NpjUf4kU.roa
File: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (raw, json)
Hash identifier: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=
Subject key identifier: EE:DE:CC:96:67:0A:E6:71:EA:C8:BF:2A:0F:5D:0D:A6:35:1F:E2:45
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01968B21289A04FD86A538F79900530FE45D
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/7t7MlmcK5nHqyL8qD10NpjUf4kU.roa
Signing time: Thu 01 May 2025 09:15:28 +0000
ROA not before: Thu 01 May 2025 09:15:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 164.152.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:21:28:9a:04:fd:86:a5:38:f7:99:00:53:0f:e4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: May 1 09:15:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eedecc96670ae671eac8bf2a0f5d0da6351fe245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:25:ed:98:70:c2:eb:9a:97:4d:b7:35:6e:
6d:81:f7:54:3d:0c:1a:00:3c:83:b5:7f:90:d8:08:
d8:b2:39:2e:7f:8f:b1:e4:03:02:68:c2:3a:5d:ad:
de:af:19:eb:a1:7e:1c:0f:bf:43:e1:07:6a:7c:b0:
09:7d:50:c9:2a:02:d2:91:a8:17:4c:28:9b:69:9e:
33:10:a3:ed:99:aa:de:84:a1:6a:94:ea:eb:10:d7:
3d:8a:8d:d4:74:6b:dc:31:cd:a1:fc:1f:f4:23:b4:
cd:32:cb:79:22:26:35:a2:a5:2f:cc:88:6d:fb:46:
3d:70:1e:ad:9e:76:04:62:66:b9:18:46:4c:90:2d:
5a:29:a8:14:ff:d4:ff:15:f4:81:b5:de:6e:32:ab:
d0:6e:4e:4d:57:5c:1b:92:9f:3a:e1:a6:c0:32:4c:
7f:ab:5b:5e:4e:c9:7e:90:88:74:d5:28:85:a4:7c:
5e:a7:2b:41:4f:f4:95:97:e0:fd:62:4f:47:39:f4:
4e:ea:d6:33:74:80:7a:36:26:5e:92:65:94:ed:c4:
6b:d1:0c:e4:fc:22:e5:2a:08:10:cc:f4:64:0d:42:
cb:4e:eb:71:0a:38:a3:25:60:cc:e7:b7:00:0d:9a:
ee:da:cb:fc:62:ee:21:45:6b:07:ab:07:e3:10:3c:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:CC:96:67:0A:E6:71:EA:C8:BF:2A:0F:5D:0D:A6:35:1F:E2:45
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/7t7MlmcK5nHqyL8qD10NpjUf4kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.152.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:80:0f:69:24:10:e1:fd:a4:33:ed:aa:1a:4b:41:08:ee:b3:
10:6d:53:77:ee:b3:6e:74:45:5b:de:93:81:36:cc:d3:cc:95:
b2:fc:ee:28:bf:a8:81:20:ff:54:ca:88:96:99:b5:36:1c:4f:
99:69:c1:1d:07:13:e7:8b:c1:1f:fc:a7:cd:bf:ae:c7:34:4f:
4f:b4:de:13:d6:15:c9:c8:ee:4e:54:4a:51:db:e8:ca:3c:bd:
48:8e:03:f7:0b:4c:f9:10:8e:ed:3f:c3:6b:3a:8d:b0:f4:73:
1d:cd:69:42:8a:42:07:54:da:a0:b2:ce:3d:66:74:2e:10:38:
d2:45:f1:58:39:d1:4c:fb:db:4f:bd:06:8c:23:60:b9:f2:ef:
57:79:02:f7:31:f0:ae:79:bb:ea:04:7c:cb:aa:f5:83:dd:c2:
5d:46:b0:e1:4b:c5:da:85:d1:59:65:b3:f0:a1:67:d9:93:9f:
58:f4:bd:a7:96:63:96:e1:6c:36:76:39:27:3e:7d:68:72:07:
77:92:92:35:e3:6f:b6:bd:a7:cd:a6:f4:5e:ed:8c:16:89:32:
85:dc:84:c5:3d:36:21:f3:f0:f8:30:16:1b:65:20:71:25:c8:
26:21:0f:4b:8d:42:bb:c5:ff:cd:e8:79:cf:23:6f:e6:b8:e5:
00:64:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:38:25 2025 by rpki-client