Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e2hrb3JGBwOtdXFMFyvmkdxx0qQ.roa
File: e2hrb3JGBwOtdXFMFyvmkdxx0qQ.roa (raw, json)
Hash identifier: IDSq8mTtgFPghRQabVJheDWbs4c76KTsTIl/Q9dtl4M=
Subject key identifier: 7B:68:6B:6F:72:46:07:03:AD:75:71:4C:17:2B:E6:91:DC:71:D2:A4
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D2DDB60A8A43CFCA9E3FDAC5E2B7
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e2hrb3JGBwOtdXFMFyvmkdxx0qQ.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 213.170.222.0/24 maxlen: 24
185.71.147.0/24 maxlen: 24
185.71.146.0/24 maxlen: 24
185.73.217.0/24 maxlen: 24
185.73.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d2:dd:b6:0a:8a:43:cf:ca:9e:3f:da:c5:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b686b6f72460703ad75714c172be691dc71d2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:5f:79:2e:70:23:7a:c3:03:31:69:60:00:
c9:6b:4e:4a:f5:a8:61:ba:f3:0a:e3:af:cb:74:f7:
13:9e:84:27:e7:95:bf:01:00:29:71:7a:b7:c1:9e:
78:bb:35:c2:b5:cc:ab:13:91:8c:6c:82:4d:90:d8:
7a:95:83:56:54:6c:54:6a:56:70:8d:26:a0:24:d0:
92:77:48:26:54:84:4a:59:88:91:54:f1:ca:24:bf:
e0:28:ee:1f:f6:a0:91:87:37:5d:40:d8:66:73:a1:
c4:bc:fe:3e:49:06:77:05:2d:78:5d:a5:e1:0b:d5:
57:be:50:d2:f3:71:7c:ad:13:11:49:51:c7:13:f4:
ca:91:b6:7a:e4:c5:9c:59:89:f7:e0:2c:b6:34:5c:
45:73:69:ce:57:97:c3:fc:0d:31:96:b9:a9:01:75:
43:9c:e0:8a:bc:03:ec:93:71:1d:0c:94:95:88:3b:
23:a7:fc:60:86:ed:cf:3d:03:e2:d8:5e:a9:1c:c5:
49:07:54:58:de:23:ee:7d:a7:c0:1c:ef:bb:e7:08:
2d:15:82:a9:aa:0f:5f:be:ad:99:cd:72:98:99:2e:
16:82:fc:41:24:0d:cc:13:75:eb:35:7d:f9:56:7f:
c0:43:08:02:4f:a6:be:79:a4:3a:b8:a6:84:7f:ef:
82:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:68:6B:6F:72:46:07:03:AD:75:71:4C:17:2B:E6:91:DC:71:D2:A4
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/e2hrb3JGBwOtdXFMFyvmkdxx0qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.146.0/23
185.73.216.0/23
213.170.222.0/24
Signature Algorithm: sha256WithRSAEncryption
74:95:18:36:e8:d9:72:70:8f:12:39:ac:52:08:56:3f:31:60:
b4:70:76:ff:b9:b3:22:60:d7:57:d7:9b:52:69:30:7c:21:1a:
52:9e:3f:bd:a6:21:fc:92:c1:37:ae:d7:07:dd:79:e8:36:7d:
e0:d0:78:0a:76:da:be:ff:b5:a7:2a:8b:c3:06:6c:d5:a0:ca:
58:5b:37:f8:ca:10:ab:c1:bd:31:ef:e0:bc:ec:d0:a1:82:13:
8d:75:af:3f:9c:92:f6:fc:11:90:4e:4e:b1:2b:c8:5e:9e:a0:
d0:93:5a:57:5b:db:93:b6:a0:a1:0c:11:57:f3:1b:74:cd:41:
df:ef:2c:5f:0b:eb:4c:40:96:ce:16:ad:01:2d:c3:2a:0b:bf:
b4:6d:e4:53:73:70:32:ed:af:7b:d8:1e:c4:58:a1:d5:ba:4d:
ed:1e:6e:f6:45:23:6f:71:32:72:3a:5d:3e:98:e3:2f:3c:25:
57:9f:2a:9d:65:7b:d0:0f:72:8b:6e:c3:b6:30:5e:14:d0:dd:
5b:2a:f8:52:0c:82:30:6d:78:50:aa:fe:17:4d:93:c9:0e:97:
0c:45:1c:75:5d:02:5b:da:06:13:7c:72:a2:80:a5:0e:70:87:
1b:ce:eb:98:46:37:48:b9:e1:98:a2:2a:eb:f1:cd:14:11:f8:
fc:1a:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:48:19 2024 by rpki-client on console-fra.rpki-client.org