Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/7j8m72yq--gfjof2cl4i7es7Vzw.roa
File: 7j8m72yq--gfjof2cl4i7es7Vzw.roa (raw, json)
Hash identifier: DKXOmtkG8g5KiQ3ynfv7qkW2gUaQPo5IHkIRduEdfU8=
Subject key identifier: EE:3F:26:EF:6C:AA:FB:E8:1F:8E:87:F6:72:5E:22:ED:EB:3B:57:3C
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0192BEFD30C0C34F2C41B9336AFEBEB97BFC
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/7j8m72yq--gfjof2cl4i7es7Vzw.roa
Signing time: Thu 24 Oct 2024 14:45:16 +0000
ROA not before: Thu 24 Oct 2024 14:45:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213961
IP address blocks: 83.220.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:fd:30:c0:c3:4f:2c:41:b9:33:6a:fe:be:b9:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Oct 24 14:45:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee3f26ef6caafbe81f8e87f6725e22edeb3b573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:1d:e4:8b:27:94:c5:0b:20:d8:f8:18:7a:
5f:02:6c:c1:53:3a:6e:7c:20:a4:28:bc:f5:13:18:
d4:4e:ad:8e:95:30:7c:66:26:a3:2f:ef:a8:b4:d7:
20:28:a5:d4:11:11:06:40:49:79:98:8a:47:a2:a7:
fb:8d:e4:99:a1:d8:75:04:87:17:3e:ed:92:1a:15:
19:f8:df:54:15:88:31:0c:01:a7:b0:80:ae:84:e6:
fc:94:2e:f0:93:d7:8c:97:71:79:64:13:48:21:68:
4d:12:8e:44:1a:22:51:dd:ed:4d:b6:17:36:51:2b:
1e:09:a1:c9:04:43:51:8b:44:61:eb:56:c5:01:05:
a1:aa:55:b0:cf:4e:20:bb:fe:8d:fa:a8:f7:f0:55:
06:ea:77:5d:b3:46:81:cc:b9:25:4a:8b:35:4e:86:
33:c6:b7:71:6b:ba:4d:52:20:5e:17:ab:cf:55:3b:
65:53:56:40:0d:22:e1:97:fa:53:39:13:1b:19:61:
3b:a8:e2:3e:f1:a8:c7:6e:d3:b5:49:8b:81:0b:df:
a0:c7:46:bd:1b:c0:1b:dc:bd:77:b1:e5:22:17:19:
a2:ef:ae:f2:7c:a7:79:9d:ad:e9:85:83:a8:0c:89:
f9:e8:1b:78:07:b9:8f:28:58:ee:ff:06:f4:80:b3:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:26:EF:6C:AA:FB:E8:1F:8E:87:F6:72:5E:22:ED:EB:3B:57:3C
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/7j8m72yq--gfjof2cl4i7es7Vzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f5:5a:68:01:b4:11:2c:a0:fb:b4:af:19:fb:28:30:9d:cf:
21:55:7b:11:a5:71:72:c1:a8:aa:0d:f2:d6:e5:3f:78:32:f3:
1b:4a:fc:e7:32:e5:b3:bf:45:58:89:bc:b4:4c:a7:26:30:ee:
5b:54:0f:01:94:35:de:4f:82:c8:41:07:ca:75:c3:95:ee:85:
53:c0:31:00:8c:01:86:d6:4e:2c:93:c1:12:77:7a:c7:5a:2a:
cd:b5:54:eb:26:9b:1b:7c:61:52:af:67:e4:fc:64:1f:9d:70:
d6:aa:14:d3:ce:fd:30:9b:f6:e3:d9:c9:5e:e5:12:f3:b2:1b:
30:89:76:08:47:ce:e3:6a:3f:76:6c:21:b8:d5:6d:7e:71:d7:
ff:ff:1f:9d:eb:a4:31:37:08:ec:7c:0c:df:87:ac:3a:52:db:
30:13:fa:20:06:a4:6b:18:cd:98:a0:26:25:09:2d:80:7f:d2:
02:6e:0e:7e:d7:46:28:f7:6e:38:9f:ca:6a:51:9a:a7:1a:78:
35:68:60:62:40:b0:b4:a7:37:c7:dd:0a:1e:fb:56:23:d9:ed:
d0:b0:b5:86:05:e7:c1:a0:26:b2:d3:61:81:2e:54:92:a8:f6:
f5:7f:1c:d6:81:b5:49:44:20:f8:25:20:8a:c2:9f:a2:69:e0:
8e:b6:58:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:30 2024 by rpki-client on console-fra.rpki-client.org