Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/fTVFaUxiUJB3PvhFmt1eP4YeRLU.roa
File: fTVFaUxiUJB3PvhFmt1eP4YeRLU.roa (raw, json)
Hash identifier: zYnLnFFwCza7fNgqcScuTgGLISnhm1Nhe87tW3qadqY=
Subject key identifier: 7D:35:45:69:4C:62:50:90:77:3E:F8:45:9A:DD:5E:3F:86:1E:44:B5
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 018CCA2B8B3487009BE32ED49C86AE6CE584
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/fTVFaUxiUJB3PvhFmt1eP4YeRLU.roa
Signing time: Tue 02 Jan 2024 12:35:00 +0000
ROA not before: Tue 02 Jan 2024 12:35:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213208
IP address blocks: 37.200.85.0/24 maxlen: 24
2a07:5201:1::/48 maxlen: 48
2a07:5202::/48 maxlen: 48
2a07:5200::/48 maxlen: 48
2a07:5202:1::/48 maxlen: 48
2a07:5200::/29 maxlen: 48
2a07:5201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:8b:34:87:00:9b:e3:2e:d4:9c:86:ae:6c:e5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Jan 2 12:35:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d3545694c625090773ef8459add5e3f861e44b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:cc:28:ff:c3:6b:61:a7:49:9b:45:9f:cc:
9b:d8:43:25:32:bf:8b:d9:70:03:f8:6b:2f:22:63:
8a:d8:2e:8f:33:3d:19:0b:de:32:20:2f:6e:cb:93:
cd:19:d8:2d:64:1a:dc:59:9a:fa:43:cd:d5:18:b6:
c4:cd:cd:3d:54:c2:e3:54:8e:9f:c2:5b:82:be:22:
02:11:8e:10:c3:c4:f4:98:9b:4a:38:39:35:f3:8e:
f2:52:be:4a:85:09:96:ff:cb:d2:23:94:9a:4d:f6:
eb:7f:cb:c9:85:69:fc:7b:9c:30:fe:16:35:8a:d6:
6a:07:8c:6b:9a:df:f0:99:5d:6f:e1:a2:8a:69:d8:
e5:f0:c4:93:ee:5f:8f:bf:7b:68:c0:0b:58:73:38:
bb:b6:90:93:70:c5:89:48:b0:59:d8:48:7c:f5:f2:
f5:3c:fe:f2:71:0b:49:27:fa:8c:b5:a3:95:ca:a6:
9b:6a:91:28:2e:cc:57:c7:d1:4c:e0:19:42:4b:c9:
8d:fe:39:c6:da:b9:be:69:f0:ce:8a:72:b6:a7:8c:
ae:47:5a:ce:36:d8:ad:d7:ba:ef:6f:cc:57:73:75:
43:f2:73:5a:d3:d7:ab:18:c6:66:42:f3:2b:9f:d2:
a9:9f:ad:e9:77:94:10:21:1a:57:d1:b5:08:64:c7:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:45:69:4C:62:50:90:77:3E:F8:45:9A:DD:5E:3F:86:1E:44:B5
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/fTVFaUxiUJB3PvhFmt1eP4YeRLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.200.85.0/24
IPv6:
2a07:5200::/29
Signature Algorithm: sha256WithRSAEncryption
44:1f:d5:99:2c:ee:15:9b:3a:cc:a7:d1:bf:9c:c5:39:99:a8:
77:9a:42:bc:2b:85:92:45:b6:26:3a:96:f0:d9:e5:db:32:19:
8e:74:f4:f3:40:a6:59:ec:c6:5f:a1:e8:f1:4c:0a:a0:9b:55:
00:29:1b:05:a6:12:40:41:55:21:cc:77:c8:48:bc:a3:14:c4:
50:e7:03:69:9b:60:00:c0:9f:8c:f5:fb:37:99:55:de:06:a3:
54:66:fb:95:c2:c9:d8:bc:aa:a2:16:ff:2c:48:50:6e:60:34:
74:5b:ae:5e:95:3e:92:3d:37:c5:d7:03:7f:5d:a4:a7:36:2c:
4d:e7:7b:6f:53:04:fa:21:95:15:03:3a:40:fb:68:30:3c:87:
7c:e7:1a:d2:65:a6:a5:64:70:42:66:ea:da:eb:bc:d9:09:7a:
eb:bd:57:05:30:78:65:a4:fa:4e:86:b9:76:71:02:a8:4d:c1:
66:df:b1:42:ad:1f:fb:59:4e:1e:95:ac:b7:22:91:a0:a1:59:
63:fe:13:1a:f1:c4:90:ef:0f:7a:6f:f1:f2:0b:8c:83:c5:ec:
9e:a9:c5:6a:d4:2d:29:19:b4:02:28:ab:1e:b6:d0:5b:99:30:
0f:a3:ce:f4:51:03:75:02:b0:4d:18:05:aa:5b:8e:80:8f:59:
f5:68:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:48:48 2024 by rpki-client on console-fra.rpki-client.org