Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/7G85L4VhiQ08-ggvnV8V0yYID2w.roa
File: 7G85L4VhiQ08-ggvnV8V0yYID2w.roa (raw, json)
Hash identifier: 6TfGmh5wVVDUiTQo+GUCB8+uGseooNQDS6qP3YkCsoY=
Subject key identifier: EC:6F:39:2F:85:61:89:0D:3C:FA:08:2F:9D:5F:15:D3:26:08:0F:6C
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 0193030F1A74F541C0A3BA84FF02CC4ACF86
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/7G85L4VhiQ08-ggvnV8V0yYID2w.roa
Signing time: Wed 06 Nov 2024 19:59:01 +0000
ROA not before: Wed 06 Nov 2024 19:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 37.140.242.0/24 maxlen: 24
195.85.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:0f:1a:74:f5:41:c0:a3:ba:84:ff:02:cc:4a:cf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Nov 6 19:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6f392f8561890d3cfa082f9d5f15d326080f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:fc:89:1e:68:80:99:98:dd:24:b0:46:7a:
0c:01:c3:cf:5b:76:b4:df:09:a5:2c:f2:de:a3:95:
63:9c:02:a4:99:ee:f3:2b:e9:69:d3:d4:e0:68:e1:
d0:1c:d6:cf:e0:90:41:62:dd:92:c0:63:78:c7:99:
b6:56:4d:5c:3a:3c:5b:fd:39:5e:64:05:af:cc:b0:
39:f2:96:96:62:33:58:39:e2:be:c2:a7:ae:1c:c7:
cd:d8:d3:39:f6:9a:cc:1d:e0:f3:c6:6b:4e:26:68:
12:61:70:c0:2d:c2:4f:77:8f:05:a4:4f:e5:5a:74:
f7:f2:f0:77:50:75:08:3a:0d:39:2c:54:dc:27:cf:
12:77:2d:48:95:56:cf:3b:7e:52:96:db:e5:1d:c0:
07:f0:ae:b6:6d:90:a6:f8:58:ae:52:f1:8b:0f:79:
f2:7d:19:d0:00:5e:d4:e7:14:de:00:67:c9:5a:2d:
ac:d6:4e:79:66:d2:a4:e6:1e:a2:56:a2:91:7c:41:
f1:cd:ab:a8:cd:3f:b6:59:0c:b2:e5:ee:82:d8:a2:
2d:43:25:37:9a:68:f3:55:ff:a4:10:94:87:72:9d:
26:86:67:6f:75:e0:b0:ca:f0:e3:ca:4b:7f:fe:39:
c3:b2:66:97:15:e4:d9:37:41:c8:9b:db:e8:b7:0a:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6F:39:2F:85:61:89:0D:3C:FA:08:2F:9D:5F:15:D3:26:08:0F:6C
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/7G85L4VhiQ08-ggvnV8V0yYID2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.242.0/24
195.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b5:ee:51:19:8c:a1:77:9e:4e:7e:ec:4a:cf:47:7c:fe:31:
e4:d0:83:fc:88:19:1e:d0:af:15:1c:d9:0c:ba:23:40:b5:bc:
d9:cd:c4:53:ed:49:39:55:2c:3f:d1:59:d6:6d:41:41:37:c1:
15:c3:0c:36:d1:88:3f:1f:58:b4:a9:9e:11:12:19:2e:b1:17:
48:ef:25:3d:db:d5:ba:7d:92:3a:7c:90:47:85:f5:3d:63:65:
69:a1:93:d1:52:12:8a:69:32:3e:00:c8:d7:1f:1d:30:94:01:
79:0c:19:d5:1a:40:fa:62:30:dc:06:b6:30:28:fe:ce:89:b7:
99:d8:da:13:76:92:84:19:0d:f8:4b:a7:ea:ad:83:b0:66:d0:
77:e2:f5:ee:0f:9f:c9:b6:77:b1:89:bb:d3:33:fd:81:41:5d:
6c:39:8b:dc:60:2a:ee:37:1f:b6:78:2d:63:26:2f:30:aa:5a:
6f:00:8c:a0:d9:0d:b0:61:b5:33:1e:17:79:da:49:f8:d0:7c:
9d:24:ff:93:9a:a7:a6:9e:58:89:83:dd:9d:7b:7a:fd:b0:6c:
62:f8:00:d0:e3:3c:dd:aa:4e:bf:81:d9:2d:21:66:da:a4:cd:
53:74:b4:04:55:0b:71:d9:ad:0c:e2:5d:9b:e7:79:55:0b:fc:
3a:11:db:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:25:19 2024 by rpki-client on console-fra.rpki-client.org