Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/7aC58fjbj6yZcLhSe-jBFKi5Ygw.roa
File: 7aC58fjbj6yZcLhSe-jBFKi5Ygw.roa (raw, json)
Hash identifier: emJeLvCY98pSf6zqYorjPfIBbvArZDorw8+6gc/bxWU=
Subject key identifier: ED:A0:B9:F1:F8:DB:8F:AC:99:70:B8:52:7B:E8:C1:14:A8:B9:62:0C
Certificate issuer: /CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Certificate serial: 018F9A8209CDBCB62CF60F37604A9BE038F1
Authority key identifier: A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/7aC58fjbj6yZcLhSe-jBFKi5Ygw.roa
Signing time: Tue 21 May 2024 09:36:04 +0000
ROA not before: Tue 21 May 2024 09:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210403
IP address blocks: 78.24.248.0/21 maxlen: 24
78.138.45.0/24 maxlen: 24
78.138.58.0/24 maxlen: 24
185.98.131.0/24 maxlen: 24
185.238.116.0/24 maxlen: 24
193.203.239.0/24 maxlen: 24
194.126.193.0/24 maxlen: 24
213.156.132.0/22 maxlen: 24
213.255.195.0/24 maxlen: 24
2a00:7ee0:40::/44 maxlen: 48
2a00:7ee0:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:82:09:cd:bc:b6:2c:f6:0f:37:60:4a:9b:e0:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3216cccc863eca0c3dd189941b1b9ea37cacd
Validity
Not Before: May 21 09:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda0b9f1f8db8fac9970b8527be8c114a8b9620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:49:88:cb:e8:f3:7f:54:52:6f:4a:67:db:
c1:08:5d:b5:3d:41:a0:4b:46:7a:d1:e8:af:30:28:
62:ba:b6:7c:54:f5:46:26:53:ec:9c:97:77:a2:84:
18:6f:60:5d:a6:84:bd:e5:97:c3:ff:16:06:8d:0d:
bc:ae:ee:78:4b:74:d1:d1:a7:9a:ba:42:74:a6:f2:
bd:da:69:2e:c9:28:74:e0:36:da:02:33:fe:bf:cc:
e0:d6:f6:49:ca:bb:17:c9:92:8d:48:95:4d:ac:69:
2a:14:fc:f5:df:ef:15:46:4f:72:5b:d3:f9:c8:17:
fd:b4:1f:53:ef:7d:0f:b6:14:fc:91:14:60:d7:69:
6a:39:da:04:81:07:b3:f6:f0:31:12:e2:11:82:49:
07:ff:32:76:2e:04:ae:dd:71:f5:88:9c:d4:56:ea:
b0:01:81:c7:fe:9d:37:f3:98:1c:c9:fe:da:0f:3b:
c3:bb:2e:bb:93:ca:90:b8:2e:9d:86:fc:c5:91:79:
65:c4:3e:c4:8d:70:ad:41:84:fb:7f:04:00:a2:d5:
a0:27:ae:41:ed:5f:e4:9d:7d:c2:fb:1d:41:ca:c1:
c7:da:39:ef:6d:fe:4a:4e:60:2a:b9:e3:e2:5e:55:
e0:2b:4e:f5:c9:d9:7a:01:6b:58:69:7f:3f:74:c0:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:B9:F1:F8:DB:8F:AC:99:70:B8:52:7B:E8:C1:14:A8:B9:62:0C
X509v3 Authority Key Identifier:
keyid:A0:D3:21:6C:CC:C8:63:EC:A0:C3:DD:18:99:41:B1:B9:EA:37:CA:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNMhbMzIY-ygw90YmUGxueo3ys0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/7aC58fjbj6yZcLhSe-jBFKi5Ygw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5b2d1-cba0-4a54-b438-0d44c04a8448/1/oNMhbMzIY-ygw90YmUGxueo3ys0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.248.0/21
78.138.45.0/24
78.138.58.0/24
185.98.131.0/24
185.238.116.0/24
193.203.239.0/24
194.126.193.0/24
213.156.132.0/22
213.255.195.0/24
IPv6:
2a00:7ee0:40::/44
2a00:7ee0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
07:72:28:6d:35:c5:87:5c:a1:77:36:7c:df:12:7f:47:9a:35:
9e:e6:a0:f4:74:91:81:c3:2c:4c:1b:c1:36:3b:29:5f:f7:d9:
8f:b7:7a:a7:a7:ec:83:12:37:57:5b:22:36:7d:0e:e2:04:73:
09:0f:42:57:18:e0:2f:bb:b9:76:29:be:1a:29:31:7b:04:e2:
59:c1:fb:6d:1a:d0:cc:5d:ac:fd:a6:ea:48:03:10:ea:f3:47:
fe:b1:9a:90:72:ef:75:a5:9e:74:82:54:87:cb:d7:a7:98:09:
c5:69:38:c6:39:d0:a9:cc:6d:d0:ea:29:d8:1e:98:0a:5e:69:
84:36:42:54:f7:84:1c:2c:2f:18:4b:2d:35:b5:21:a6:04:7e:
3b:bb:52:b0:3b:05:1f:0f:b0:dc:e1:86:82:96:c7:cf:a1:a9:
b2:31:8c:43:08:61:97:af:ab:7d:43:40:ef:f8:38:26:b5:e4:
5b:6c:c9:25:7c:a8:a3:8b:b1:54:6e:95:3d:b6:18:ff:59:ba:
e9:80:78:80:a1:b4:3e:c4:2a:e0:77:31:ba:9e:46:29:43:7e:
0b:d0:7a:47:45:5b:ca:7d:3c:5a:2d:d1:95:74:da:72:e5:be:
c8:46:d7:12:6a:f1:ff:da:5e:82:37:0d:45:35:ac:89:55:38:
7a:d4:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:36:31 2024 by rpki-client on console-ams.rpki-client.org