Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7dvYZm-HYhDp9gB2swMrsTMu8d8.roa
File: 7dvYZm-HYhDp9gB2swMrsTMu8d8.roa (raw, json)
Hash identifier: clNR+mWvpxMuuIEZ5G4Lgmtv24yNm6vPCSRoGPfdNns=
Subject key identifier: ED:DB:D8:66:6F:87:62:10:E9:F6:00:76:B3:03:2B:B1:33:2E:F1:DF
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0193059AF46B22322F1EBE739D32A7F2FDCD
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7dvYZm-HYhDp9gB2swMrsTMu8d8.roa
Signing time: Thu 07 Nov 2024 07:51:01 +0000
ROA not before: Thu 07 Nov 2024 07:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213389
IP address blocks: 194.36.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:9a:f4:6b:22:32:2f:1e:be:73:9d:32:a7:f2:fd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Nov 7 07:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eddbd8666f876210e9f60076b3032bb1332ef1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:4e:c2:6a:2c:32:b1:94:1f:e3:7d:7b:a3:
4d:60:2a:60:55:e4:31:5b:05:2c:a1:30:e4:50:36:
55:a4:0a:94:5f:79:67:93:33:5f:45:c7:9d:fc:ed:
90:c5:ee:de:12:27:8b:3e:90:52:0f:4e:ea:ba:c5:
ef:16:ea:43:1a:fe:80:53:f3:42:ba:f2:85:85:40:
21:4a:a4:2f:a0:f7:87:91:ff:22:e3:38:cb:93:e9:
a9:62:4e:5a:b0:53:33:1d:bd:b4:67:54:01:18:49:
6c:05:45:68:e6:ea:4c:f6:53:52:ef:92:ae:61:79:
a0:d5:84:e0:77:5d:6e:44:db:e1:fd:21:69:f2:1d:
47:71:36:ae:63:0f:c8:cd:ea:bc:a0:2a:53:63:b0:
f5:37:df:69:fe:73:3d:c2:2b:42:f7:57:88:e8:70:
ae:c2:6b:0d:be:c0:51:46:70:6b:39:5b:29:f6:a4:
84:fc:ce:48:49:c3:e3:21:56:fc:12:46:bc:84:1f:
3b:2f:0b:06:75:4e:7a:1a:fc:ce:46:ef:a8:b3:b7:
78:88:2b:ca:88:c3:d6:2a:0e:96:76:a5:79:45:43:
80:ef:fc:ac:93:af:54:22:aa:6c:fa:84:bc:1c:8b:
ea:02:02:8f:e8:15:28:29:81:20:7d:5c:b7:21:c0:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:D8:66:6F:87:62:10:E9:F6:00:76:B3:03:2B:B1:33:2E:F1:DF
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/7dvYZm-HYhDp9gB2swMrsTMu8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.80.0/23
Signature Algorithm: sha256WithRSAEncryption
13:5a:3d:7b:6d:52:0e:ba:84:11:bc:74:6a:16:5d:0e:39:82:
01:62:e8:21:c6:e1:b6:42:67:68:ed:db:76:16:e1:4c:1c:cf:
73:45:b0:2b:23:76:6c:b5:12:18:b1:d8:d3:4f:c5:fa:64:4d:
93:b1:09:98:01:86:a8:b5:5a:a1:d3:94:df:05:27:77:50:1b:
7b:3f:f1:a9:0b:88:80:82:3f:cb:2a:85:b0:8d:66:f9:b5:68:
5f:24:1e:7a:ca:0a:a9:5b:9c:f4:27:7c:78:58:b2:a5:58:09:
1a:96:0b:20:e9:7f:dc:d1:5a:e4:e0:86:32:16:9e:17:fe:1a:
03:7d:67:6d:3e:c0:48:e6:38:d2:d2:06:83:06:5d:05:4f:50:
e3:f1:27:dd:ec:c0:f3:75:70:98:f3:74:10:5e:de:1d:bd:83:
4c:1a:f3:0d:ac:9f:f7:f7:ce:9f:0c:4d:9a:20:fb:1c:db:03:
85:73:07:af:ef:fb:29:25:78:d5:6b:78:c3:b2:b9:9b:fa:83:
4d:c7:12:db:29:56:31:85:52:16:9a:d1:6d:4f:89:c4:3a:6c:
26:b3:00:55:e4:17:49:76:df:75:03:ba:3f:44:58:23:6c:4b:
0b:93:aa:f0:16:8f:bb:14:03:7c:71:f0:d9:96:69:18:dd:6e:
a7:fd:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:24 2024 by rpki-client on console-fra.rpki-client.org