Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0V7dgmnWkSWg49C41sD8u9BH8N0.roa
File: 0V7dgmnWkSWg49C41sD8u9BH8N0.roa (raw, json)
Hash identifier: mOpmvwFxNFUwohrcal/39YuYDvhJyBEMjvFy9DAXjNI=
Subject key identifier: D1:5E:DD:82:69:D6:91:25:A0:E3:D0:B8:D6:C0:FC:BB:D0:47:F0:DD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01906E1FD71225F94220A33996E3A1EF97F7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0V7dgmnWkSWg49C41sD8u9BH8N0.roa
Signing time: Mon 01 Jul 2024 11:48:18 +0000
ROA not before: Mon 01 Jul 2024 11:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8751
IP address blocks: 80.96.28.0/24 maxlen: 32
81.180.224.0/24 maxlen: 32
81.181.146.0/24 maxlen: 32
85.120.250.0/24 maxlen: 32
85.122.8.0/22 maxlen: 32
193.226.85.0/24 maxlen: 32
193.231.133.0/24 maxlen: 24
193.231.169.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:1f:d7:12:25:f9:42:20:a3:39:96:e3:a1:ef:97:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 1 11:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d15edd8269d69125a0e3d0b8d6c0fcbbd047f0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:c6:4f:c1:6a:d0:8d:bd:f0:d0:d0:aa:b2:
25:22:2d:1e:4a:0e:14:ef:41:1c:65:79:29:48:1d:
04:e6:a8:32:10:bc:60:fc:a2:8c:32:59:98:e3:42:
37:6c:a1:1b:59:11:d1:61:05:ac:d1:6f:f0:d3:79:
38:af:3f:b5:bb:3e:68:9f:1f:dc:c6:1a:58:b0:bc:
dc:0d:9d:e2:6e:f3:c8:eb:ac:94:75:a4:0f:71:02:
1f:92:d0:87:f3:1a:fe:9c:49:04:1e:dd:46:4f:37:
05:37:87:e7:ac:95:76:e0:45:9f:37:b1:f3:e6:33:
5d:b5:db:65:22:de:92:8e:0f:80:25:bd:10:5a:a8:
76:5e:b9:8d:14:74:a9:43:ff:5f:c8:1a:2a:0e:2e:
f7:50:50:55:b1:87:5d:e8:ef:35:3a:c5:3a:18:be:
9c:aa:65:1b:2b:fc:ba:aa:ba:34:ed:7e:47:6a:e3:
45:df:95:09:7c:a5:45:45:e3:25:0d:c5:8a:1d:6f:
2e:cd:9e:46:6b:89:b2:76:4b:26:a8:35:62:e0:ae:
0d:c5:e5:e7:46:33:61:58:80:97:b6:da:02:c2:7c:
6b:52:73:a3:71:7e:0c:47:10:9f:77:53:1f:96:65:
1e:0a:53:78:1e:d0:d5:2d:36:3a:b2:61:6e:1b:58:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:DD:82:69:D6:91:25:A0:E3:D0:B8:D6:C0:FC:BB:D0:47:F0:DD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0V7dgmnWkSWg49C41sD8u9BH8N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.28.0/24
81.180.224.0/24
81.181.146.0/24
85.120.250.0/24
85.122.8.0/22
193.226.85.0/24
193.231.133.0/24
193.231.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:50:d5:fc:82:d1:c4:34:b4:a8:46:40:85:e0:e7:0d:93:d9:
24:38:17:9c:d5:a3:10:b5:00:1a:1a:d4:0c:84:52:b9:e1:70:
de:05:e5:e2:fc:8a:6e:ee:cc:c1:d0:61:9e:35:be:1e:77:23:
8d:ec:c2:47:93:7a:a2:1e:fc:1b:6b:45:9f:03:69:b6:05:2f:
64:6c:41:b7:9d:8f:54:a6:08:b0:02:1c:b5:99:9c:9e:06:ff:
3e:56:84:db:d0:ff:ef:fc:32:81:c3:8a:fc:97:6e:da:b0:2c:
0a:8e:cc:08:9a:f2:39:ab:0a:0f:b4:db:dd:e1:6b:e5:99:36:
3b:af:ab:29:ee:88:0e:e5:f0:aa:71:10:1d:5b:ab:59:9d:08:
6b:c5:ec:e6:ae:46:a3:f6:a3:42:70:27:99:2f:d3:22:51:8b:
21:38:3f:86:12:66:42:57:42:d9:c4:77:8a:2d:1d:9a:ab:75:
85:ba:d7:32:50:9a:c1:d4:bb:e5:d2:c6:7d:d0:ac:bb:98:e0:
ca:e4:db:06:ff:06:d7:ca:15:5a:1a:62:64:5b:18:fa:df:5d:
e1:46:51:db:77:48:ef:1b:dd:e9:8a:f8:13:db:71:44:b4:2a:
7b:c6:0a:2d:7f:cd:8b:e1:d7:07:bd:a6:e0:5e:21:18:3f:48:
70:ba:bd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:07:42 2024 by rpki-client on console-fra.rpki-client.org