Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/7i0LFd2oe8WgfnL7G7-cQ_JwTEs.roa
File: 7i0LFd2oe8WgfnL7G7-cQ_JwTEs.roa (raw, json)
Hash identifier: yKdgh+2czFSKQ/qEB25EqBC8ejfjP9qPIgT8RczRBa4=
Subject key identifier: EE:2D:0B:15:DD:A8:7B:C5:A0:7E:72:FB:1B:BF:9C:43:F2:70:4C:4B
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 0192439B10C8C1AD5A378B7769DB58F8ED4F
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/7i0LFd2oe8WgfnL7G7-cQ_JwTEs.roa
Signing time: Mon 30 Sep 2024 15:44:48 +0000
ROA not before: Mon 30 Sep 2024 15:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44673
IP address blocks: 185.29.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:9b:10:c8:c1:ad:5a:37:8b:77:69:db:58:f8:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 30 15:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee2d0b15dda87bc5a07e72fb1bbf9c43f2704c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:85:ed:97:b4:cb:eb:7c:35:e6:6a:f1:16:
98:07:cc:0b:8d:bb:34:aa:67:02:0d:d4:7a:89:c7:
a6:b1:23:49:dc:32:11:cd:9f:56:1a:75:46:7b:1c:
7b:dc:2b:1f:53:70:c9:45:e2:ec:0f:de:e1:e7:5e:
a0:7b:0f:15:82:02:ef:55:fc:9d:87:79:03:3d:a0:
50:1b:3b:80:88:60:7f:41:4d:e0:d4:c7:18:34:70:
99:5a:c0:b8:d0:cd:2a:66:4f:bc:48:d0:49:52:a4:
d5:bb:b0:a9:6a:2b:96:fd:ac:c0:b8:57:41:da:1e:
8d:94:e5:87:dd:e6:30:19:48:4a:13:74:d4:64:a8:
4e:f0:c6:7d:43:2e:23:b1:62:4c:07:8c:b9:60:a6:
8b:03:63:44:6f:f8:9d:04:e3:93:e3:23:c8:eb:0a:
79:c9:e4:67:3b:6b:a6:f1:93:f4:b9:85:a1:2a:ca:
94:7e:05:d7:d3:be:8f:c3:df:0c:72:43:f0:a6:e3:
34:97:f8:b3:dc:ce:12:af:ad:49:4f:d8:fa:7e:ca:
c3:2d:a4:42:26:92:54:ae:72:6e:b5:7a:52:ca:4a:
5f:eb:e2:88:7a:56:1e:54:be:ec:8b:18:e6:94:11:
0c:21:c8:87:ec:7a:cf:1f:1b:bc:96:43:0e:8e:e1:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2D:0B:15:DD:A8:7B:C5:A0:7E:72:FB:1B:BF:9C:43:F2:70:4C:4B
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/7i0LFd2oe8WgfnL7G7-cQ_JwTEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.252.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:49:ec:86:f1:94:a1:75:34:62:b9:dc:90:04:a3:2b:03:db:
d6:08:e4:1b:34:36:df:6c:97:cf:38:32:05:79:06:a0:04:2d:
d8:34:4e:51:f2:ac:5a:9c:a5:24:8e:06:02:c2:2f:c9:06:e6:
97:e4:df:5b:90:3f:70:62:c9:f9:6c:c5:d8:70:73:eb:1f:b6:
67:8b:7d:51:4e:bf:03:18:23:85:51:ad:cc:db:dd:e6:ea:d9:
42:e7:57:f1:13:02:47:13:30:4a:eb:54:6c:8a:c9:f6:ce:ac:
71:43:bd:e4:b6:5c:82:8b:72:3d:9e:e0:ce:a5:57:c5:0a:29:
fb:fd:f7:d9:d8:a7:0b:c0:ab:5b:a1:e9:1a:70:bf:4d:f9:92:
9d:af:a1:1b:2f:77:27:4b:3c:f4:6c:43:c0:f7:03:de:41:bd:
ac:e0:ec:6f:63:f3:a1:75:20:6e:76:1b:b9:d7:06:6e:35:c2:
79:e1:5e:73:da:a0:4b:48:98:06:0e:2e:f0:e8:2d:54:e5:5b:
42:92:38:0f:2c:75:0c:96:81:b4:77:e9:48:82:32:f7:9b:83:
08:27:84:39:9f:6e:64:2b:9a:33:13:6e:bd:f7:8e:83:0a:c1:
3a:2a:b2:39:49:4f:22:28:7f:0f:49:60:8c:59:4f:11:bd:61:
38:76:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:39 2024 by rpki-client on console-fra.rpki-client.org