Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7u7SfmaI8tt6j3sAtR5C7TbxIck.roa
File: 7u7SfmaI8tt6j3sAtR5C7TbxIck.roa (raw, json)
Hash identifier: 6LvETCGFT58/f398ZxwnBX9isPfDthD+bbix7XyEJwY=
Subject key identifier: EE:EE:D2:7E:66:88:F2:DB:7A:8F:7B:00:B5:1E:42:ED:36:F1:21:C9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FBB51AB7DD177068BEECD0A22B1E89BBE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7u7SfmaI8tt6j3sAtR5C7TbxIck.roa
Signing time: Mon 27 May 2024 18:30:42 +0000
ROA not before: Mon 27 May 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 45.88.138.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:51:ab:7d:d1:77:06:8b:ee:cd:0a:22:b1:e8:9b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 27 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeeed27e6688f2db7a8f7b00b51e42ed36f121c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:64:2d:02:37:84:e4:5a:1b:13:a4:55:84:
a7:56:e5:e2:20:93:24:f2:a4:4c:ac:fd:97:7c:04:
94:a3:ec:0b:6a:64:ae:91:16:88:68:2a:3f:65:78:
59:41:70:3a:4d:42:1a:32:fd:99:d7:14:e4:9b:e0:
43:63:39:32:d8:1b:03:15:71:23:f3:84:af:26:49:
8b:b0:41:0c:c8:5a:f5:dc:2c:6e:48:0f:2c:23:9a:
b7:40:76:30:71:17:f5:93:28:a2:eb:80:fd:f9:4b:
57:5e:8e:69:b0:e0:7a:24:f0:84:93:f2:43:e1:38:
ae:f0:f6:54:2d:b3:7a:ea:1f:da:5c:2c:2d:e5:4f:
47:0e:49:3c:85:4a:b3:f3:55:18:54:52:12:03:8c:
cc:91:fb:4d:42:6e:78:55:30:d2:e5:d1:6f:32:c1:
8d:c1:a1:38:9a:33:d5:71:93:5a:db:f5:72:9a:dc:
70:01:e2:1f:56:2c:e8:0d:7d:45:15:63:d5:d4:12:
57:e1:be:7c:6b:8d:f5:46:b8:e2:ac:22:ee:9f:c6:
b9:bc:7c:e9:97:f1:bf:19:e0:af:dd:a5:3b:62:2a:
cc:62:09:bc:c2:81:0e:42:b7:b8:a0:0d:c6:ae:86:
99:c7:16:91:d9:f4:49:4e:9a:61:c3:c0:c6:c8:e5:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:D2:7E:66:88:F2:DB:7A:8F:7B:00:B5:1E:42:ED:36:F1:21:C9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7u7SfmaI8tt6j3sAtR5C7TbxIck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/23
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4d:76:66:ca:48:75:fa:68:79:a2:e5:2a:bb:df:3e:82:00:
aa:03:6f:81:27:12:8f:71:f6:37:7c:0d:1b:d0:2b:a0:65:d3:
12:3c:c8:68:cc:4c:7d:75:23:f3:77:7c:23:36:8b:ad:6e:8a:
6c:59:58:e4:e1:69:05:ba:00:36:57:d5:94:bf:ef:e8:5f:ba:
62:b8:df:f4:d2:8e:3b:2d:b0:12:41:9d:bf:1e:4a:2b:76:1a:
f2:93:ac:42:3c:ac:03:f8:40:35:33:07:fa:10:8c:d7:93:cd:
8d:89:01:38:74:47:a1:66:9f:b1:56:a4:ed:2a:01:b8:1e:43:
67:56:db:89:98:37:1e:3b:5e:fb:b9:f3:94:58:0d:93:38:33:
72:5b:5e:f4:db:a1:8d:27:a9:95:d4:42:9d:8e:7e:9f:b5:9c:
df:5d:b3:7b:56:fd:7d:23:a8:12:b4:ac:7e:0c:39:7b:fc:7d:
22:e2:92:e5:a5:fd:76:e5:7c:df:54:0e:77:0d:d2:a3:b8:d4:
41:d4:ac:5c:3d:33:07:90:75:4f:5f:68:b3:25:ed:db:69:8b:
c7:73:a1:38:8e:47:dc:44:28:65:fd:6b:fc:8a:9f:4f:f9:ea:
79:2a:23:55:1c:54:58:fa:22:a8:ef:63:7d:fa:92:95:4c:2a:
7a:b9:7f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 03:22:44 2024 by rpki-client on console-fra.rpki-client.org