Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/C-7UZ8BlMnxUKqQrGDOhJhB0sek.roa
File: C-7UZ8BlMnxUKqQrGDOhJhB0sek.roa (raw, json)
Hash identifier: XyKx8gnK0kxECPD5Ym37+XZ1ckasRXiOcpVOj0QeiJM=
Subject key identifier: 0B:EE:D4:67:C0:65:32:7C:54:2A:A4:2B:18:33:A1:26:10:74:B1:E9
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0190E072D19DB53B47FCF733F05AFC276AA5
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/C-7UZ8BlMnxUKqQrGDOhJhB0sek.roa
Signing time: Tue 23 Jul 2024 16:35:39 +0000
ROA not before: Tue 23 Jul 2024 16:35:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 185.251.144.0/22 maxlen: 22
190.102.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:72:d1:9d:b5:3b:47:fc:f7:33:f0:5a:fc:27:6a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jul 23 16:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0beed467c065327c542aa42b1833a1261074b1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8f:47:72:f4:c8:2e:6c:84:5d:2a:65:23:63:
81:df:18:6f:f3:56:f6:f6:99:2b:26:b4:37:c5:35:
2e:0b:7c:84:ae:18:cf:62:10:df:65:43:0d:0f:40:
8e:4e:a2:c4:83:b3:ce:83:06:00:2d:12:3a:c3:c9:
8e:d6:0f:8a:00:c9:9b:0c:27:45:44:49:0c:d5:09:
e1:a2:6d:da:92:4e:1d:ad:45:62:45:b7:47:41:22:
6b:ae:fc:8a:08:25:ec:66:1a:83:57:64:83:6b:46:
ac:e8:b6:0c:aa:e3:e8:9c:4a:c8:f4:00:32:71:fa:
eb:7d:8c:3d:cd:64:c6:08:9c:a1:9e:f2:ce:31:e4:
4f:f1:44:f0:30:d0:dd:63:55:04:af:6d:4a:76:f0:
6c:a2:d7:e1:1d:cf:ec:86:83:36:bc:24:63:38:20:
78:cc:39:bf:db:e8:49:24:74:fe:ee:2e:d3:ab:dd:
8d:b9:ae:e2:1b:fe:43:1d:dc:e4:6e:bd:c7:cd:a7:
86:5d:c1:c5:f7:c3:30:79:bd:70:ed:77:a2:c7:6b:
45:b2:5f:45:49:a1:8e:af:43:26:cd:87:b4:9e:10:
24:1b:16:bd:f0:49:84:83:a9:82:6d:39:c8:5e:14:
d9:63:2e:27:b4:96:0a:c4:3e:82:1a:65:43:0a:03:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:D4:67:C0:65:32:7C:54:2A:A4:2B:18:33:A1:26:10:74:B1:E9
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/C-7UZ8BlMnxUKqQrGDOhJhB0sek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.144.0/22
190.102.100.0/22
Signature Algorithm: sha256WithRSAEncryption
99:dd:87:86:3f:e0:1b:a6:25:65:9c:73:3e:b3:91:5d:6c:53:
15:da:ee:e1:f7:be:75:37:22:e7:d7:f6:a6:ed:a8:59:eb:f8:
43:66:63:51:62:1b:c2:5c:cf:c2:58:ec:d7:05:ee:8b:69:66:
a8:a7:60:b3:f5:e4:7a:c7:cf:e3:07:6e:89:69:33:d0:8d:a7:
1c:23:22:7c:51:d5:4b:59:95:c3:a3:e5:c8:4a:e1:c1:71:85:
d5:98:03:47:8e:cc:60:53:12:1c:c2:91:c7:21:27:ec:1e:75:
a1:88:e4:c6:fb:55:f9:e2:88:2c:7b:83:c4:b1:31:5e:69:1c:
ee:85:1d:d0:8e:e3:4c:a2:4c:a8:b1:2d:5d:07:f2:e7:b6:e4:
6e:23:e8:5c:09:40:6b:8c:03:0e:6b:32:73:87:d6:94:d6:8b:
53:cb:a3:db:e8:50:22:80:ac:58:35:ae:f2:61:78:ed:8d:30:
b3:4f:71:4a:ea:33:30:19:9a:af:72:ad:f2:6e:a3:98:aa:c5:
0f:73:09:f8:44:04:ef:45:e5:b0:9e:bc:c1:f5:23:48:06:1f:
29:d8:71:4e:f5:06:1c:50:9d:a6:b6:5f:1e:56:e9:c3:ee:8a:
5f:ed:65:8b:3e:ba:79:dd:c7:2d:7e:02:91:a0:ad:4b:f3:52:
50:7e:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:27:32 2024 by rpki-client on console-fra.rpki-client.org