Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7_aiEInBc0uh6TYUwL3NXZBzaHM.roa
File: 7_aiEInBc0uh6TYUwL3NXZBzaHM.roa (raw, json)
Hash identifier: WKpdVk1jeFfNGCiSnKhV1+Bey+twp648qnb1o1B2wxU=
Subject key identifier: EF:F6:A2:10:89:C1:73:4B:A1:E9:36:14:C0:BD:CD:5D:90:73:68:73
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 018CED1A51FE0C75B4B74FD23F363CA007ED
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7_aiEInBc0uh6TYUwL3NXZBzaHM.roa
Signing time: Tue 09 Jan 2024 07:22:54 +0000
ROA not before: Tue 09 Jan 2024 07:22:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210315
IP address blocks: 91.231.201.0/24 maxlen: 24
91.231.202.0/23 maxlen: 23
91.231.200.0/24 maxlen: 24
195.88.254.0/24 maxlen: 24
195.88.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:1a:51:fe:0c:75:b4:b7:4f:d2:3f:36:3c:a0:07:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Jan 9 07:22:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eff6a21089c1734ba1e93614c0bdcd5d90736873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:49:ec:90:d2:ef:32:e7:15:b3:78:c4:86:
08:7c:5c:1e:87:04:6f:66:cc:d7:be:ac:b4:55:61:
2b:93:c8:ee:14:c0:f7:48:f3:7a:3a:fb:31:1e:52:
9d:0d:23:78:b5:b6:50:f0:ae:db:92:ad:bc:fd:95:
79:14:39:3d:21:a4:dd:0e:7f:f2:77:ff:c9:18:e5:
50:d2:7e:89:18:c6:19:1c:6b:de:83:00:76:e5:c9:
46:4a:15:79:9f:50:fd:d6:69:de:c2:3e:ad:5e:cd:
db:1f:e5:10:a5:4f:8a:18:29:53:ee:6f:80:80:8b:
5f:42:78:08:1f:7d:dd:82:0a:1f:e8:62:00:d2:cf:
bb:f2:c7:cd:cd:84:53:86:0b:9e:2c:d2:f6:5e:cc:
f9:64:be:63:4d:2f:a0:b4:cc:de:b7:aa:e1:8d:3d:
3a:b1:0f:1f:0b:01:e1:44:6e:54:23:7b:1f:8c:f4:
aa:4a:da:15:2a:be:a3:71:45:f5:f6:c1:05:d7:da:
e5:e5:dc:18:35:d6:bf:b3:db:fc:29:ad:ae:bd:bb:
38:ee:48:88:de:89:1e:e7:3d:1f:ed:0a:34:da:db:
5b:02:d9:1b:18:0b:71:70:5c:43:13:87:f6:f1:70:
0a:70:49:3a:d1:5a:ee:d8:1c:91:6f:7c:6f:15:8f:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F6:A2:10:89:C1:73:4B:A1:E9:36:14:C0:BD:CD:5D:90:73:68:73
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/7_aiEInBc0uh6TYUwL3NXZBzaHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.200.0/22
195.88.254.0/23
Signature Algorithm: sha256WithRSAEncryption
87:53:70:e6:f0:b1:d2:6e:9a:c4:e7:0f:e2:07:84:e8:2b:35:
0e:a3:33:04:3b:0f:2e:65:74:7b:ea:1f:46:18:8d:b7:1e:c6:
20:97:dc:15:6e:02:9a:11:13:8d:69:70:67:39:9e:f2:66:2d:
5d:bc:d2:2a:b2:a7:1f:d5:de:a3:6d:9c:4a:69:45:98:58:da:
38:d8:19:83:ee:12:21:5e:d4:e9:2c:7e:7f:db:8c:7d:eb:59:
76:4e:3e:f4:58:00:4c:aa:78:b6:07:ad:9f:84:0c:c3:5d:29:
1b:bf:e2:4c:11:f3:3e:dc:86:a8:88:6a:d1:50:33:5a:e2:32:
9d:0b:94:65:ac:70:16:9e:11:e3:4a:fb:15:07:c7:94:fd:90:
20:4b:74:05:66:be:a0:6a:60:18:e1:70:c7:c4:da:9e:1f:66:
69:4a:01:78:dd:11:f6:95:e1:61:c4:f4:ef:95:3f:aa:25:50:
ce:ef:58:fc:e1:1a:26:d7:de:a0:4d:e9:7a:99:56:5b:a8:40:
41:02:81:c2:7d:3d:2f:0a:66:79:d1:0c:42:32:47:b4:fb:94:
2e:67:66:46:d4:08:f3:dc:3f:3b:17:cc:de:83:cb:13:68:50:
d9:48:c2:d1:8d:84:83:cb:ec:dc:30:a8:40:57:b7:ff:e7:1b:
1a:4d:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:42:24 2024 by rpki-client on console-fra.rpki-client.org