Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/e91100DKzfvWNJ0tMjpnZk7XODQ.roa
File: e91100DKzfvWNJ0tMjpnZk7XODQ.roa (raw, json)
Hash identifier: vmNC4Vsd6UBZRWcsmFbPrLWEaHaIOXa33LsIR7f/7Kw=
Subject key identifier: 7B:DD:75:D3:40:CA:CD:FB:D6:34:9D:2D:32:3A:67:66:4E:D7:38:34
Certificate issuer: /CN=07b7a0c1babd621e8220d0d777877a844b413c10
Certificate serial: 018CC7953CEE4D56B057385E5CE8ED444D5E
Authority key identifier: 07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/e91100DKzfvWNJ0tMjpnZk7XODQ.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50629
IP address blocks: 193.203.2.0/23 maxlen: 23
193.203.16.0/23 maxlen: 23
2a0f:e280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3c:ee:4d:56:b0:57:38:5e:5c:e8:ed:44:4d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b7a0c1babd621e8220d0d777877a844b413c10
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bdd75d340cacdfbd6349d2d323a67664ed73834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:60:7c:01:44:3a:e8:76:4d:28:ef:d1:e6:
87:9b:f2:c3:a5:00:44:55:d6:a9:83:0e:c2:e6:41:
a2:b3:3e:f0:fd:cc:31:ef:e7:92:5a:1e:1f:9f:6a:
ff:95:ea:e5:62:46:94:bd:30:d7:87:6f:40:19:66:
f4:71:70:91:42:c1:c5:9d:e0:ad:7c:0c:5a:cd:1f:
04:a5:e1:f1:ef:9c:7e:e8:27:e2:7a:12:e8:4b:5f:
53:6b:f3:98:52:56:de:2b:96:8f:41:6e:aa:10:13:
f7:46:96:85:47:9b:da:ec:dc:30:a6:62:17:5a:bf:
d2:e7:10:77:80:82:a9:75:9a:57:c9:92:4f:76:c9:
8e:38:b7:35:fa:73:fb:ee:04:58:b3:0a:fc:e4:ef:
a8:60:e3:af:63:77:73:8a:21:27:d0:cb:80:64:22:
88:3f:eb:6c:bd:ff:51:c5:01:be:71:18:66:2c:cc:
8f:c3:6a:24:1f:94:88:52:7c:5e:6a:d3:8c:51:2e:
53:43:95:e6:46:37:c8:b1:2a:b0:2d:47:6c:db:1d:
d2:33:58:b8:2b:a1:ec:5c:7f:2b:5d:a9:3e:19:8e:
4f:d5:ce:43:e7:d8:c4:90:df:80:26:54:ad:59:09:
bf:0f:16:f6:75:8e:f0:3b:18:fb:60:84:d6:48:53:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DD:75:D3:40:CA:CD:FB:D6:34:9D:2D:32:3A:67:66:4E:D7:38:34
X509v3 Authority Key Identifier:
keyid:07:B7:A0:C1:BA:BD:62:1E:82:20:D0:D7:77:87:7A:84:4B:41:3C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7egwbq9Yh6CINDXd4d6hEtBPBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/e91100DKzfvWNJ0tMjpnZk7XODQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5c3fc3-35e8-4a0c-a30f-fb9217028c5c/1/B7egwbq9Yh6CINDXd4d6hEtBPBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.2.0/23
193.203.16.0/23
IPv6:
2a0f:e280::/29
Signature Algorithm: sha256WithRSAEncryption
1c:fc:73:ff:a6:0b:bd:a7:3f:a1:66:14:a5:b3:5d:2c:f7:cf:
b8:70:37:5e:e7:c3:64:57:02:87:29:12:cd:72:0d:12:61:1b:
74:37:e9:e4:d9:db:2d:55:92:c4:10:8d:98:14:3f:01:7d:26:
b1:9d:3e:9d:c3:29:3b:42:87:c8:1c:f7:6c:22:91:67:ea:24:
1f:1b:df:d7:0a:22:d2:cd:3a:0b:f8:49:35:60:02:13:fb:4b:
08:af:5a:80:91:a9:40:7a:a2:e1:1e:b0:94:81:e0:49:98:63:
43:37:69:ee:a0:14:19:ce:4c:a6:cc:cb:4f:07:8d:fd:14:c0:
c8:97:7b:59:b7:1b:96:54:20:2b:68:15:59:ca:d4:90:a3:65:
14:38:07:54:b0:74:87:c3:27:00:b3:08:c0:a8:ec:f7:1f:ad:
36:92:e6:2c:1b:2a:ee:1f:0f:be:97:78:b0:15:9e:68:52:ce:
19:c3:b1:27:58:43:55:34:0b:10:24:38:7a:8b:a9:31:ce:2d:
40:d1:fb:f1:e4:4e:cf:83:47:54:8b:96:e1:6f:c1:ac:19:e8:
80:20:70:1d:e2:43:86:e7:48:dc:dc:77:1b:36:b6:18:ef:46:
fb:e5:fd:26:7d:a4:fb:0a:d3:c3:39:b3:b0:13:eb:1a:18:f9:
e2:0a:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:20:47 2024 by rpki-client on console-fra.rpki-client.org