Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/7VsJ00y-qtu22sluXuIt-g0NAQk.roa
File: 7VsJ00y-qtu22sluXuIt-g0NAQk.roa (raw, json)
Hash identifier: kstTPiYxQNb3HdFa44LLQVZx6/85xTzJ8g2ld2Ow5UE=
Subject key identifier: ED:5B:09:D3:4C:BE:AA:DB:B6:DA:C9:6E:5E:E2:2D:FA:0D:0D:01:09
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 018CC26D6ED92CFB9909C17223A7352169E3
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/7VsJ00y-qtu22sluXuIt-g0NAQk.roa
Signing time: Mon 01 Jan 2024 00:30:00 +0000
ROA not before: Mon 01 Jan 2024 00:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203751
IP address blocks: 80.80.82.0/23 maxlen: 24
185.124.140.0/22 maxlen: 24
185.124.141.0/24 maxlen: 24
185.132.184.0/23 maxlen: 24
2a06:ab80::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6e:d9:2c:fb:99:09:c1:72:23:a7:35:21:69:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jan 1 00:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed5b09d34cbeaadbb6dac96e5ee22dfa0d0d0109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:6a:66:84:16:b2:f8:2d:ea:11:ca:b6:cf:
2e:9d:30:de:d8:c2:73:91:71:28:6b:3c:c1:99:c9:
1b:a8:c6:c6:08:0f:97:bb:13:5b:94:ea:c9:29:16:
79:28:0b:d4:a3:65:e5:c7:17:74:34:98:aa:84:11:
c2:e0:e5:a9:f3:14:04:1b:13:a9:c7:1f:4f:ab:cf:
f2:4a:53:08:04:74:01:e9:cd:40:e7:47:28:f7:fd:
7d:31:8a:84:e6:9c:6c:a2:73:9a:73:5b:c8:81:df:
9c:01:f5:1d:3c:33:bb:e2:ca:fe:11:98:c3:94:e6:
8d:8a:b5:5f:87:73:76:f7:fb:57:96:ef:b5:53:35:
d6:c8:60:df:f3:84:47:bb:d4:a3:fe:f7:89:46:01:
63:d5:1a:ca:d7:e1:bb:a5:80:10:1f:92:c3:50:6e:
51:c4:91:69:4d:3d:60:0c:65:1c:5d:35:f9:e0:c7:
96:b4:6c:0f:f7:33:ba:06:70:14:70:b1:4d:bc:f6:
66:17:68:cd:c0:51:5a:fc:1c:30:ba:d5:ec:1c:04:
d9:e2:6f:2f:52:ae:f0:4b:65:48:d0:a5:41:e5:4b:
b3:f3:14:58:9c:29:9f:75:a4:0c:91:a5:13:6d:e8:
b6:4f:15:3e:d4:75:bc:88:55:9c:15:55:b1:83:02:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5B:09:D3:4C:BE:AA:DB:B6:DA:C9:6E:5E:E2:2D:FA:0D:0D:01:09
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/7VsJ00y-qtu22sluXuIt-g0NAQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.80.82.0/23
185.124.140.0/22
185.132.184.0/23
IPv6:
2a06:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
46:3e:3e:72:c1:dd:f3:f9:9c:89:6a:76:44:d4:15:c0:33:db:
94:1a:a5:a3:e3:98:64:3a:f0:c5:9d:54:0a:14:d4:8d:c1:fa:
2f:3a:69:37:f1:fb:de:c8:34:c7:ff:0b:59:a7:2c:57:1f:7b:
aa:20:fd:1c:b9:4a:c0:5d:79:be:ab:e3:17:cc:19:c8:67:d6:
23:25:b8:92:48:a2:03:f5:20:5c:e7:20:34:11:84:62:f5:6e:
a5:7f:29:9d:82:77:ac:94:e6:9c:39:20:64:7b:f8:b7:c1:8c:
e5:2f:1d:c6:0c:c6:9f:75:c1:14:33:bf:55:f1:7d:0c:4e:15:
10:ef:f6:bc:59:b1:46:dd:43:86:3f:98:7d:42:92:a7:d8:31:
6c:e3:55:c7:de:95:af:9e:fb:d6:95:92:84:1e:7e:cd:10:5d:
02:cb:46:16:d5:61:cd:1e:4b:ee:8b:ba:35:ee:ec:18:fd:6c:
3a:aa:a6:3d:15:cf:46:af:2b:92:ca:fe:d0:42:4d:f2:64:a6:
01:7a:24:60:72:49:98:7d:05:db:41:17:0a:74:2c:78:b7:a2:
1a:59:ad:23:b8:47:86:c2:c9:77:a4:94:c8:a9:b7:b0:e4:f9:
4b:0c:c6:f5:1b:28:20:4d:13:57:b6:8d:a8:cf:a9:31:fd:79:
8f:2d:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 12:33:31 2024 by rpki-client on console-fra.rpki-client.org