Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7CfV6RP5_BVblwp0wXucf2kqMv0.roa
File: 7CfV6RP5_BVblwp0wXucf2kqMv0.roa (raw, json)
Hash identifier: eP/Wxw/Rdr/hJL7xlO5wFvOabQXBOc/UFqcCoXO9sSM=
Subject key identifier: EC:27:D5:E9:13:F9:FC:15:5B:97:0A:74:C1:7B:9C:7F:69:2A:32:FD
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018F4DD585266063A2B0E82385B1CC3D4702
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7CfV6RP5_BVblwp0wXucf2kqMv0.roa
Signing time: Mon 06 May 2024 12:16:29 +0000
ROA not before: Mon 06 May 2024 12:16:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207238
IP address blocks: 45.150.44.0/22 maxlen: 22
91.242.68.0/23 maxlen: 23
91.242.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:d5:85:26:60:63:a2:b0:e8:23:85:b1:cc:3d:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 6 12:16:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec27d5e913f9fc155b970a74c17b9c7f692a32fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:ce:48:f2:d8:54:e3:f0:e0:2b:f3:20:b9:
ef:94:d6:42:ee:4c:d3:61:7d:2c:79:13:4d:5d:20:
2f:d3:11:4e:7d:90:ea:7c:04:07:4d:86:9d:b6:b7:
2a:fa:ea:32:ec:ad:c2:9d:e3:ca:bd:f6:dd:44:6d:
bb:09:ea:73:5d:46:5d:68:8e:d3:0e:5c:5e:09:af:
52:6b:54:c9:43:33:3d:e8:b5:f3:1c:df:ff:d0:2b:
30:c9:64:9c:e0:a9:b3:03:9f:09:fa:a9:5f:e5:be:
d3:7a:68:30:ab:f2:37:34:cf:92:58:5f:07:ef:05:
3b:c4:f4:2c:15:c8:8b:78:a5:eb:e6:8d:ed:29:dd:
ee:07:47:6c:e0:f0:85:f6:38:76:d3:a8:7e:5d:18:
0f:e1:01:af:a0:36:da:05:df:99:d8:b5:19:9f:a7:
6a:6f:4a:bb:ed:91:f8:b9:10:4f:95:b4:5c:6a:29:
87:5c:1c:db:43:c8:17:9a:3e:4e:9d:1d:30:09:cd:
f6:4b:fc:b3:71:b9:c5:19:f1:87:1b:8b:38:09:b6:
a5:3c:98:ac:37:c6:34:8b:33:03:29:76:e2:a9:b9:
48:1c:a3:f6:e7:6f:7a:9c:f6:e9:86:d4:6e:2c:72:
27:0b:21:0c:62:c3:16:50:67:9a:bd:e5:46:7c:93:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:27:D5:E9:13:F9:FC:15:5B:97:0A:74:C1:7B:9C:7F:69:2A:32:FD
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/7CfV6RP5_BVblwp0wXucf2kqMv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.44.0/22
91.242.68.0/23
91.242.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b6:6c:5a:97:6a:17:e7:15:63:27:df:34:54:97:49:8c:07:
2d:3d:5e:89:8b:be:f3:c3:db:97:f7:f5:a7:a3:98:b2:99:35:
82:7e:70:3c:30:36:77:df:28:0e:95:24:eb:21:48:c4:27:f4:
58:13:2b:e9:47:c4:5b:9b:7f:5f:68:13:5b:26:67:74:1a:7a:
de:33:d4:86:b0:64:5b:21:1d:f9:e0:f0:bd:b3:34:48:b0:da:
b7:91:2d:4c:05:c1:b0:74:68:a9:fe:1f:e3:c7:61:f5:f4:5f:
4b:8c:48:b9:54:63:83:2f:47:8d:0b:de:12:c1:06:a9:b2:0f:
92:43:17:2e:32:89:b9:bb:6a:c9:e1:af:05:51:d7:89:b7:31:
bd:31:ca:f8:63:df:f3:e5:98:9a:e7:98:a2:0f:c8:4e:f4:a6:
5b:8b:29:96:0c:d3:68:42:df:a9:9d:3c:c1:97:4b:f9:73:4d:
d8:84:de:c0:9c:19:f3:54:13:8c:a1:e2:2f:44:38:84:82:ac:
76:ae:04:68:1d:6b:3d:b6:01:30:a4:62:7d:8c:9c:2f:5e:78:
bc:c9:16:5d:33:28:73:fb:37:cd:65:86:9c:f5:e7:77:2a:ba:
f5:4b:7d:e6:03:b6:87:d9:47:91:52:3c:f6:d3:95:4b:ac:73:
24:0c:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:28:49 2024 by rpki-client on console-ams.rpki-client.org