Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/7JKYqEPeVoQJAv9d6RjpNp7j76c.roa
File: 7JKYqEPeVoQJAv9d6RjpNp7j76c.roa (raw, json)
Hash identifier: VFFng41t63phWj54urTh8tzXUsHOzTVspBGqccBEFbY=
Subject key identifier: EC:92:98:A8:43:DE:56:84:09:02:FF:5D:E9:18:E9:36:9E:E3:EF:A7
Certificate issuer: /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial: 018FBFC7555174351A33C9D398D23E20BFE8
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/7JKYqEPeVoQJAv9d6RjpNp7j76c.roa
Signing time: Tue 28 May 2024 15:17:42 +0000
ROA not before: Tue 28 May 2024 15:17:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8405
IP address blocks: 5.252.124.0/22 maxlen: 22
45.87.16.0/22 maxlen: 22
185.218.168.0/22 maxlen: 22
193.35.216.0/24 maxlen: 24
193.36.3.0/24 maxlen: 24
193.36.42.0/24 maxlen: 24
193.36.74.0/24 maxlen: 24
217.140.72.0/21 maxlen: 21
217.140.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:c7:55:51:74:35:1a:33:c9:d3:98:d2:3e:20:bf:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
Validity
Not Before: May 28 15:17:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec9298a843de56840902ff5de918e9369ee3efa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c2:57:23:d3:38:95:c0:03:96:ed:6d:bc:fe:
2b:cd:f7:0c:a4:be:09:92:9a:8a:de:ec:e7:bd:e5:
c0:f1:de:66:ca:0c:8c:84:e5:bb:3d:88:ec:d4:95:
7f:ee:49:cb:56:b4:d9:8a:96:cf:35:db:ac:7e:ee:
45:54:ea:99:7e:13:d9:65:90:5c:07:ab:77:f9:39:
93:0f:49:55:7d:30:24:e3:5b:3f:b6:a0:f3:92:01:
17:c2:ce:98:82:81:d9:12:41:68:2c:d1:9d:0c:c9:
56:b0:35:f3:75:b8:ab:5d:8c:03:41:13:28:78:e4:
fa:7f:65:e8:ee:8a:73:50:3e:01:d6:6a:bf:e4:e1:
be:12:bd:20:50:06:61:54:6a:74:fc:91:51:68:e3:
ee:05:84:c1:f3:0b:e7:b8:cc:1e:7b:37:46:44:1e:
5f:8c:17:c3:43:1c:cb:f1:ff:83:5a:6c:0d:17:ec:
c1:2e:e6:2f:2c:44:6b:cd:ca:19:40:3f:26:84:08:
61:e1:cc:60:60:4a:11:2d:13:bf:d8:40:a8:ca:78:
14:82:d7:6c:38:84:d4:51:ed:3f:8a:02:8c:e1:cc:
d8:a0:2d:d1:a7:b0:b2:19:5f:d0:08:ea:e8:d9:fc:
19:d7:22:3a:2b:a4:d9:2e:04:6c:8a:43:08:94:09:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:98:A8:43:DE:56:84:09:02:FF:5D:E9:18:E9:36:9E:E3:EF:A7
X509v3 Authority Key Identifier:
keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/7JKYqEPeVoQJAv9d6RjpNp7j76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.124.0/22
45.87.16.0/22
185.218.168.0/22
193.35.216.0/24
193.36.3.0/24
193.36.42.0/24
193.36.74.0/24
217.140.72.0-217.140.95.255
Signature Algorithm: sha256WithRSAEncryption
87:22:cf:6f:0e:aa:c1:d9:7a:30:cb:f6:39:da:87:c0:f0:68:
45:5b:02:3d:f4:62:24:f6:9a:a3:59:a1:0f:34:65:da:fe:b3:
e9:b1:26:2e:1e:26:0d:1e:87:0e:52:3e:0e:e4:7d:ab:63:69:
59:45:70:53:af:f3:69:c7:6b:da:c9:99:4c:4b:04:db:4b:f6:
05:5c:48:89:f8:c8:01:27:58:af:75:b3:cc:cd:03:c3:8e:a3:
2b:9c:8f:fb:32:85:8e:69:70:63:60:fd:5b:bc:ec:5b:a9:8f:
9c:91:d7:88:82:89:92:49:c7:f0:73:1d:2d:02:a8:eb:0e:f2:
0d:cd:5c:ac:12:d1:cb:ef:15:d0:ea:32:d5:a6:61:51:39:5d:
d5:ff:25:87:f7:95:54:57:7c:f2:bf:c0:2a:6b:f7:b3:74:5e:
32:6c:42:97:f6:e4:ef:95:33:d3:7d:6f:8a:1e:99:b2:dc:c6:
62:45:e2:49:17:17:11:2c:64:57:3b:00:03:fe:a7:28:55:d9:
7a:db:5e:9e:50:db:3c:da:b5:26:a8:2f:4b:c0:7f:e5:27:f3:
96:90:78:e9:da:0f:a7:d7:41:7d:9a:08:bb:9b:87:d4:b8:c1:
49:50:b3:4d:ff:ad:8b:e3:b0:80:a5:80:b6:dc:a0:ac:30:01:
f0:44:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:42 2024 by rpki-client on console-ams.rpki-client.org