Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7G_hYF-28PHUuuplHvQ_XS8fHkM.roa
File: 7G_hYF-28PHUuuplHvQ_XS8fHkM.roa (raw, json)
Hash identifier: 3A9jfEgE6p64whkRxziY1eGJb5L4ENT0Y3L1g0qWmfM=
Subject key identifier: EC:6F:E1:60:5F:B6:F0:F1:D4:BA:EA:65:1E:F4:3F:5D:2F:1F:1E:43
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01919DEB34B1BD62A13D69602ED28D3FE45C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7G_hYF-28PHUuuplHvQ_XS8fHkM.roa
Signing time: Thu 29 Aug 2024 11:35:22 +0000
ROA not before: Thu 29 Aug 2024 11:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8568
IP address blocks: 195.166.160.0/19 maxlen: 19
195.166.160.0/20 maxlen: 20
195.166.160.0/24 maxlen: 24
195.166.163.0/24 maxlen: 24
195.166.176.0/21 maxlen: 24
195.166.176.0/24 maxlen: 24
195.166.184.0/22 maxlen: 24
195.166.188.0/24 maxlen: 24
195.166.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:eb:34:b1:bd:62:a1:3d:69:60:2e:d2:8d:3f:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Aug 29 11:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6fe1605fb6f0f1d4baea651ef43f5d2f1f1e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:da:90:c0:b3:fb:a9:19:54:45:e7:88:43:
75:ba:92:7d:56:a9:ad:7b:d6:5f:5b:57:5f:e4:30:
b1:51:94:fe:4c:54:91:3c:09:22:a5:e7:78:fc:92:
26:9e:d4:31:f3:4c:d6:2c:c5:b0:f7:94:f5:c3:a2:
84:f0:b9:93:45:c1:95:a9:d8:bd:a8:2d:70:dc:ef:
7f:60:f2:75:0a:34:96:68:40:ed:26:12:cc:d3:fd:
47:b4:f8:7b:d7:19:8d:f8:1d:00:52:0f:0a:19:ef:
86:61:c5:88:9e:c2:07:2a:23:1e:5b:4a:53:e5:12:
9e:13:be:cc:f4:26:66:e0:78:09:ab:4d:ed:00:0f:
c2:d7:7b:d8:b4:49:43:04:99:3b:77:ec:9c:c0:1c:
76:f0:d6:94:d2:aa:46:c8:55:18:e8:4e:7d:5d:bf:
3b:9e:75:a3:07:91:09:fd:02:ab:6f:94:1a:53:9c:
49:8d:25:af:ad:29:42:6b:a2:40:e1:e7:75:04:6d:
fb:c7:3e:65:4b:5a:a0:51:08:c2:d9:5f:65:39:74:
39:59:20:e8:54:fb:d1:2c:ec:0e:c3:b0:95:e1:df:
a5:c2:98:cb:be:02:77:09:4e:ba:1a:d7:ce:7a:6d:
5f:db:1d:e7:2a:f7:73:c8:b7:17:b6:90:4a:2c:5e:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:E1:60:5F:B6:F0:F1:D4:BA:EA:65:1E:F4:3F:5D:2F:1F:1E:43
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/7G_hYF-28PHUuuplHvQ_XS8fHkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.166.160.0/19
Signature Algorithm: sha256WithRSAEncryption
22:64:e7:a8:9f:d5:43:fd:5b:22:fe:d6:ea:b1:43:5d:2c:d8:
f1:eb:6d:e9:07:3e:b5:fe:e7:cd:db:9e:33:2e:ca:14:61:22:
34:33:2c:5e:4a:a4:5b:d1:40:44:21:13:ab:b9:27:2e:2f:48:
fa:c6:8d:8e:0c:67:e2:9e:7a:2c:74:60:29:86:e8:8d:32:3e:
e1:64:3f:be:7e:67:56:ea:63:74:9f:bc:a9:e6:97:78:c5:f8:
be:21:99:5e:e0:a6:65:e4:97:8c:26:37:a1:ef:e7:50:de:07:
db:50:4d:74:fe:8c:57:78:c3:e6:73:b0:0b:40:fd:d0:66:95:
fd:e5:55:91:5a:7a:5e:4a:96:58:80:b7:be:e2:eb:c6:08:b6:
2b:dc:34:f0:55:d5:09:b9:56:4b:8e:7f:92:24:6b:9e:44:2f:
17:74:4f:06:31:01:f1:56:7a:98:20:0c:42:ba:c1:ea:6d:77:
04:3a:b6:e0:ff:4b:35:75:5a:0b:09:9c:cc:8b:27:d6:5c:49:
aa:03:37:e3:a8:55:09:2f:ae:5e:7c:1a:7d:bc:dc:22:50:3c:
46:18:2b:ab:e1:fa:88:41:38:12:55:77:41:e5:7f:35:85:38:
4d:74:99:f6:5d:bc:6d:98:e0:cc:e1:1e:63:89:c4:39:2a:1a:
82:ef:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:43:39 2024 by rpki-client on console-ams.rpki-client.org