Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/rx7DaT8Yqq-7TYU_ef5WbQshLBo.roa
File: rx7DaT8Yqq-7TYU_ef5WbQshLBo.roa (raw, json)
Hash identifier: Q2hp7oLB8LdHoFsDSVTiHYtDADtfHS8xDcduIszyOa4=
Subject key identifier: AF:1E:C3:69:3F:18:AA:AF:BB:4D:85:3F:79:FE:56:6D:0B:21:2C:1A
Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379
Certificate serial: 01928A3303A0092B348E438E123A52BEE142
Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/rx7DaT8Yqq-7TYU_ef5WbQshLBo.roa
Signing time: Mon 14 Oct 2024 08:44:11 +0000
ROA not before: Mon 14 Oct 2024 08:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 78.153.131.0/24 maxlen: 24
78.153.139.0/24 maxlen: 24
78.153.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:33:03:a0:09:2b:34:8e:43:8e:12:3a:52:be:e1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a44566764ebb511683cb6228fa91997b559379
Validity
Not Before: Oct 14 08:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af1ec3693f18aaafbb4d853f79fe566d0b212c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:dd:fe:b1:4c:ec:1e:fe:8c:d6:c6:54:fa:
c1:d5:ea:5b:9f:61:8f:b9:56:77:02:c1:f0:90:ca:
c6:53:9d:fc:18:03:4c:a8:66:6d:d6:6b:9c:cf:35:
2a:19:8d:d6:5d:41:4b:14:05:c0:2e:b2:21:6f:1b:
d8:0a:30:27:95:0a:9e:26:f2:e3:b6:97:cc:c3:ab:
56:69:d9:ea:58:89:aa:9e:db:b6:01:8d:d3:c1:c2:
9b:7b:38:74:ea:76:e7:c0:77:1c:c2:5d:59:d1:c8:
8d:b1:84:bd:27:76:30:d8:29:0d:e1:a6:1f:5e:09:
5e:c6:c8:20:69:cf:66:7c:ff:f9:3d:51:32:28:39:
a2:82:f2:a4:19:20:90:65:53:37:87:b3:84:f9:eb:
fa:51:b7:6c:8c:97:11:41:cc:e6:fc:08:de:f0:ad:
cc:a4:b6:ec:73:92:bf:1a:cf:9a:12:73:e2:7d:c1:
29:2b:36:96:ce:3f:95:cb:ab:5f:35:5b:43:0b:5a:
44:f4:df:7e:ff:d7:69:05:e4:b8:e3:fd:fc:ae:c0:
ed:cd:6f:56:dc:26:2b:04:c2:09:b6:4c:64:aa:4e:
13:fb:dc:84:89:bb:44:9b:a7:4c:cf:d5:13:c3:26:
fa:ec:f0:00:72:6b:16:74:45:a3:dc:85:7e:b2:5c:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:C3:69:3F:18:AA:AF:BB:4D:85:3F:79:FE:56:6D:0B:21:2C:1A
X509v3 Authority Key Identifier:
keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/rx7DaT8Yqq-7TYU_ef5WbQshLBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.131.0/24
78.153.139.0/24
78.153.144.0/24
Signature Algorithm: sha256WithRSAEncryption
87:22:43:23:20:c9:08:db:21:be:60:c5:08:de:51:d3:4b:30:
4d:db:4f:1c:b5:d1:b7:32:df:04:ce:61:f9:82:fb:ec:41:0c:
af:7a:82:e4:04:cf:11:9e:d4:24:82:de:64:dd:e9:a4:e1:7b:
a0:f2:c2:4e:24:1e:a7:f3:44:6a:73:4a:a6:90:23:de:54:61:
9d:06:04:c1:8b:77:66:5f:aa:33:23:59:07:e1:de:82:48:4e:
a2:df:87:f9:ed:05:d0:eb:88:fa:8d:81:ca:a1:e4:5f:4a:b3:
10:8b:49:70:fb:40:70:cf:a9:9e:95:3e:10:88:7d:72:91:9f:
f8:8c:32:25:9f:d6:93:bd:84:88:6e:02:ff:c8:2c:50:d6:ee:
79:05:68:c1:25:72:ec:86:7d:8e:f6:3a:16:4e:44:bd:a1:b4:
39:80:b8:33:81:38:52:00:88:6a:0f:66:b7:bd:21:ca:c7:59:
4a:29:93:00:14:51:7a:4e:3b:0f:5a:cf:31:20:5a:37:9c:cd:
6f:c5:2a:42:da:86:8b:64:33:d4:a6:ff:13:66:4d:90:91:83:
af:02:9f:83:ba:66:8f:92:98:fc:eb:54:9a:74:39:0c:46:fc:
76:ab:1c:2c:c9:73:ca:46:b8:fe:54:23:ea:39:9a:36:54:80:
23:19:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:12 2024 by rpki-client on console-fra.rpki-client.org