Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/7rcZDVNnUuemcGHJqOmJWPG5YOc.roa
File: 7rcZDVNnUuemcGHJqOmJWPG5YOc.roa (raw, json)
Hash identifier: uMhL8XLfIiuCAjgm1wqweu2/tVfWPOdPdP+lryHN7os=
Subject key identifier: EE:B7:19:0D:53:67:52:E7:A6:70:61:C9:A8:E9:89:58:F1:B9:60:E7
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018FCA0B9557BAD4E51BB254BD7016FAF505
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/7rcZDVNnUuemcGHJqOmJWPG5YOc.roa
Signing time: Thu 30 May 2024 15:08:27 +0000
ROA not before: Thu 30 May 2024 15:08:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212650
IP address blocks: 92.61.168.0/21 maxlen: 24
92.61.172.0/22 maxlen: 24
185.190.88.0/24 maxlen: 24
2a10:6540::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:0b:95:57:ba:d4:e5:1b:b2:54:bd:70:16:fa:f5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: May 30 15:08:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb7190d536752e7a67061c9a8e98958f1b960e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:52:b5:db:22:42:fa:86:5e:7e:87:e5:0b:
f7:27:d5:71:27:cb:1b:f8:a9:9f:66:80:d4:a2:ab:
26:78:a6:18:f8:f0:9b:39:d9:90:5b:a5:76:5e:73:
3d:50:b5:c0:49:d5:7b:38:e7:cd:ff:d0:d3:13:1a:
9b:dd:b4:d0:a4:2d:1b:66:70:af:7f:35:00:54:8d:
06:92:74:d2:dc:59:76:af:a2:ba:a3:29:6e:92:36:
3b:7b:db:ea:1b:d8:da:66:de:c7:ab:b6:73:a7:43:
ce:20:e9:fc:d8:c1:5d:d4:89:9a:6c:d0:15:db:2e:
64:92:42:44:ba:7f:e3:95:dc:cb:30:25:72:0c:89:
5e:cd:bc:b3:a9:18:08:9a:f7:8a:17:91:7e:60:f7:
7a:73:f0:9e:d6:e9:7e:c1:69:18:99:7a:0a:1e:f1:
12:bd:ef:76:87:20:03:51:7c:1d:fd:2e:30:b1:66:
75:41:1e:e9:cd:30:a8:30:0a:41:89:88:3a:54:ee:
7d:8a:ab:99:5e:e9:dd:e5:99:30:b5:5b:c6:a2:bf:
83:cc:d5:6b:e5:1d:d5:9a:78:e0:5f:de:a9:22:a5:
73:63:9d:94:fc:02:10:db:38:e5:fd:25:82:75:9f:
0d:59:0e:0a:79:64:e5:24:fe:da:ed:66:72:e4:22:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B7:19:0D:53:67:52:E7:A6:70:61:C9:A8:E9:89:58:F1:B9:60:E7
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/7rcZDVNnUuemcGHJqOmJWPG5YOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
b1:ca:0e:9c:da:0a:5a:dd:b9:a2:d9:83:0a:e6:07:9f:5e:eb:
e0:70:91:b3:a6:29:1d:e0:d0:54:7c:fa:9a:cd:a1:da:0e:e0:
2c:31:3c:90:2b:38:48:23:7f:57:ad:b9:f6:28:05:9b:24:71:
1d:73:79:8e:c2:a8:51:46:de:d4:04:f5:99:c2:e8:5f:48:16:
4a:c3:c9:63:e5:52:02:ad:c3:5d:ab:15:c8:07:56:1e:6b:56:
77:16:cc:e9:68:2a:09:2d:2b:2c:b9:6c:a8:e3:af:b6:fc:c1:
90:b3:37:53:17:ef:b2:4f:19:15:12:db:fc:7a:7f:88:21:aa:
34:74:2b:88:4e:e0:6e:3e:67:58:a4:78:a0:7e:d6:eb:de:38:
5e:58:b5:a7:54:5a:d0:b2:92:db:ee:60:46:01:de:89:b5:14:
62:f0:6a:05:b3:be:8e:b0:52:ce:27:1b:b5:25:68:c9:2d:05:
7e:f5:60:78:ec:d0:67:de:b0:63:46:6d:9c:a0:10:f3:30:45:
e5:3a:38:84:07:91:9f:2b:d3:be:1a:53:02:d0:b4:54:ed:cb:
a5:53:98:20:85:24:64:7a:6e:68:bd:52:e6:22:0a:7e:7c:09:
91:8d:6f:37:e6:4e:f7:49:e9:f5:17:09:77:eb:3b:3e:02:bb:
c2:45:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:55 2024 by rpki-client on console-fra.rpki-client.org