Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/7nFl5X3Q94pv1-yGYLjIgD9aPlw.roa
File: 7nFl5X3Q94pv1-yGYLjIgD9aPlw.roa (raw, json)
Hash identifier: v+RRjck5OcoAgRQLawW0l0Lrs7aIQD7L2zTwWmqX1Qk=
Subject key identifier: EE:71:65:E5:7D:D0:F7:8A:6F:D7:EC:86:60:B8:C8:80:3F:5A:3E:5C
Certificate issuer: /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial: 018CC870F6F6AA6EDB49371EF9493203642D
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/7nFl5X3Q94pv1-yGYLjIgD9aPlw.roa
Signing time: Tue 02 Jan 2024 04:31:35 +0000
ROA not before: Tue 02 Jan 2024 04:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 692
IP address blocks: 193.41.58.0/24 maxlen: 24
185.178.20.0/22 maxlen: 22
64.224.12.0/22 maxlen: 22
185.101.140.0/22 maxlen: 22
2a10:5940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:f6:f6:aa:6e:db:49:37:1e:f9:49:32:03:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Validity
Not Before: Jan 2 04:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee7165e57dd0f78a6fd7ec8660b8c8803f5a3e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:ab:8f:96:de:9d:58:86:32:84:ee:62:ca:
4b:17:51:c5:10:4b:18:1f:89:d4:c3:15:61:64:b1:
06:c1:6f:3c:8a:3c:7e:67:99:33:b5:05:dc:89:f6:
dd:2c:4f:34:c3:52:8a:57:2e:f8:ce:4f:c2:a2:34:
49:0d:a0:e4:26:8e:2c:7b:ef:26:f5:6b:f3:ae:a6:
72:43:9f:58:3d:b6:06:a0:35:eb:3a:d3:35:5d:8e:
95:f0:19:cf:63:81:af:67:3f:ee:ae:1f:7b:e6:b8:
73:94:28:a8:22:9a:7e:ce:4e:41:b3:51:51:3e:d7:
a6:12:f4:09:66:29:95:8c:61:3b:d9:b3:9b:8d:08:
b8:a9:b6:95:c2:3b:44:77:91:25:fc:8b:82:79:33:
b9:74:da:76:16:8f:44:39:18:ad:ad:e8:f5:bb:87:
5d:5a:5b:5d:9c:c7:0e:8d:48:9b:f9:18:44:0f:16:
c5:db:40:e6:66:15:16:ef:23:a9:8a:da:d4:29:d7:
48:86:ae:30:a8:97:a6:44:6e:70:bb:03:b8:a8:38:
b9:d4:94:bd:ed:08:16:0f:97:1e:e0:54:70:e0:ce:
27:1f:9f:85:ab:1a:45:e9:d0:18:96:7f:e5:be:6f:
11:13:19:1f:da:72:81:d8:2e:87:9f:54:d1:b4:f6:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:71:65:E5:7D:D0:F7:8A:6F:D7:EC:86:60:B8:C8:80:3F:5A:3E:5C
X509v3 Authority Key Identifier:
keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/7nFl5X3Q94pv1-yGYLjIgD9aPlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.224.12.0/22
185.101.140.0/22
185.178.20.0/22
193.41.58.0/24
IPv6:
2a10:5940::/29
Signature Algorithm: sha256WithRSAEncryption
13:43:68:d3:ba:67:66:99:89:51:98:1d:a0:24:9f:98:b5:21:
26:25:2e:ba:8c:79:bb:f6:99:17:a0:36:6a:51:9e:b5:70:72:
d4:3f:9d:99:c0:e6:ae:e8:a4:07:68:90:20:b6:3d:48:b0:32:
82:0a:a2:6d:34:ec:fe:e5:fb:24:85:70:e1:46:8d:48:b0:de:
1c:57:1c:7b:7c:ef:0f:a0:80:cc:9a:65:4f:73:3a:44:da:c1:
1a:c6:c7:97:30:bb:c6:cf:c4:44:c4:ce:cb:63:38:09:f2:3a:
03:17:be:99:56:69:f2:ed:76:84:e6:71:97:bf:e9:bc:0e:47:
a9:38:c2:34:93:40:2d:d0:ed:99:7b:17:94:94:9d:06:22:41:
df:ca:78:f0:7b:55:a6:b9:76:cb:2b:75:dc:96:8c:b7:50:df:
01:a2:72:ca:ac:8e:f6:54:8e:36:ff:b2:44:79:2e:34:15:d7:
94:bc:67:a4:ad:8b:0a:41:d2:0c:1d:95:80:d4:ba:26:f3:b3:
90:7b:6d:e2:5d:83:f9:36:2b:fc:14:4a:e8:e6:eb:7d:22:58:
68:f9:5d:02:0b:93:29:7b:f4:df:4c:09:b3:7d:69:5d:4d:6c:
02:52:1e:f7:96:0f:78:de:f4:70:f6:1f:8d:bb:b0:54:e1:d7:
b6:56:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:17 2024 by rpki-client on console-fra.rpki-client.org