Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7-n0YAhYY0dPhhb2pM-qjzyxQb8.roa
File: 7-n0YAhYY0dPhhb2pM-qjzyxQb8.roa (raw, json)
Hash identifier: ZKFxU6vrcGt02RPL8QakuD/+OEIxaGy9cm3VEw70kRg=
Subject key identifier: EF:E9:F4:60:08:58:63:47:4F:86:16:F6:A4:CF:AA:8F:3C:B1:41:BF
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 019015BCD24092CCFCE066AF15801C441F6F
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7-n0YAhYY0dPhhb2pM-qjzyxQb8.roa
Signing time: Fri 14 Jun 2024 07:53:34 +0000
ROA not before: Fri 14 Jun 2024 07:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 2a06:b440::/29 maxlen: 29
2a0e:7780::/29 maxlen: 30
2a0f:e000::/29 maxlen: 29
2a11:f140::/29 maxlen: 30
2a12:ec0::/29 maxlen: 32
2a12:6740::/29 maxlen: 30
2a12:8ec0::/29 maxlen: 30
2a12:ccc0::/29 maxlen: 30
2a12:d3c0::/29 maxlen: 30
2a12:e240::/29 maxlen: 30
2a12:f0c0::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 07:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:15:bc:d2:40:92:cc:fc:e0:66:af:15:80:1c:44:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 14 07:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efe9f460085863474f8616f6a4cfaa8f3cb141bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:02:45:e4:03:0a:a4:6b:45:eb:30:4c:79:
cd:b0:c5:7c:8d:33:49:1a:5d:40:a6:94:59:c3:60:
17:61:06:fe:8e:8e:9b:ca:48:36:af:0f:dc:a6:09:
ef:14:61:41:fd:95:4b:a7:ff:f9:9b:e0:0d:59:de:
44:ea:00:ad:61:f3:66:f1:12:3f:8d:fa:9a:20:ed:
7c:a1:12:6d:62:54:d5:8f:7f:f3:97:e0:82:13:11:
a0:1e:18:d9:9a:34:43:27:44:42:32:a8:44:9b:52:
52:ef:d0:1d:f5:99:28:6f:bf:a8:b3:16:ea:9b:b8:
38:8b:b7:8f:96:8c:87:33:bc:01:b2:a8:67:e1:c9:
5a:78:d5:68:fe:9d:99:ef:62:85:8e:ff:4a:2a:9c:
c4:c6:1f:e4:47:4d:dd:e0:d8:0d:bc:a9:79:d7:82:
5c:4e:5f:f2:1d:e7:5a:d1:e9:bc:e5:f6:21:5d:b7:
6c:dd:7f:17:c8:a1:9a:ad:37:6e:da:32:0d:ae:7a:
2b:3d:16:6a:26:36:df:58:18:26:df:80:e2:49:2e:
81:8e:89:9a:55:11:46:2c:46:21:0f:e2:e5:ee:63:
7b:33:57:63:23:e5:24:b2:0a:cd:f7:07:f1:ec:c9:
49:a5:ab:66:41:20:d0:8c:3d:91:5a:96:c5:a8:4d:
d0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E9:F4:60:08:58:63:47:4F:86:16:F6:A4:CF:AA:8F:3C:B1:41:BF
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/7-n0YAhYY0dPhhb2pM-qjzyxQb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b440::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:f140::/29
2a12:ec0::/29
2a12:6740::/29
2a12:8ec0::/29
2a12:ccc0::/29
2a12:d3c0::/29
2a12:e240::/29
2a12:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
33:e2:bc:b0:89:c5:f7:ee:f0:6c:aa:f2:8b:a3:65:c5:1f:90:
54:27:2c:ab:5f:2c:ee:b6:81:8c:0c:fc:64:ff:b8:96:b8:01:
1d:2c:cc:50:4d:6b:2a:01:7f:e6:9f:a2:a3:07:a3:74:92:7a:
bf:2e:c8:8c:3d:5d:1a:eb:60:b4:1a:a0:cf:cf:7a:8d:1e:ef:
58:a3:e6:7d:27:1c:a7:04:33:26:c1:5e:b9:92:a5:17:64:9d:
f3:c6:19:58:70:a7:ad:b5:f3:41:02:64:25:56:30:cb:de:2e:
47:30:0b:cd:ab:ee:d1:60:68:63:90:3f:cf:c2:f7:a6:d7:0c:
ed:33:00:22:d2:c1:db:74:a7:77:d7:b3:bc:c8:a0:1a:b5:e5:
4f:09:50:a8:21:30:70:5c:6e:d6:5c:e4:cf:e2:8d:af:50:cb:
a8:7e:6d:b4:17:9b:60:cc:d5:00:9c:bb:4a:8e:45:69:5c:16:
68:ff:bd:4a:27:8c:cc:3f:ee:52:72:c1:73:4e:f0:76:b3:3f:
55:dd:2b:51:8c:7b:1e:f2:32:f7:d6:32:a6:ae:e8:7f:82:fd:
e7:5f:4c:19:49:90:0f:72:a8:e0:82:3f:5c:6f:57:f8:86:04:
fd:df:9c:e8:ca:ef:a1:88:f2:c3:79:88:cf:32:cd:68:ac:cb:
0c:9f:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 12:30:49 2024 by rpki-client on console-fra.rpki-client.org