Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7nnqkMDij59LJpu56X648t1XkuQ.roa
File: 7nnqkMDij59LJpu56X648t1XkuQ.roa (raw, json)
Hash identifier: QQJecVDc9ts8khp+cjXiArCDnAGSgRzkxHld7zSeO/0=
Subject key identifier: EE:79:EA:90:C0:E2:8F:9F:4B:26:9B:B9:E9:7E:B8:F2:DD:57:92:E4
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018EE8F8D776698CEE61A8CDECB2913D8EA4
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7nnqkMDij59LJpu56X648t1XkuQ.roa
Signing time: Tue 16 Apr 2024 22:13:25 +0000
ROA not before: Tue 16 Apr 2024 22:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215638
IP address blocks: 37.128.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:f8:d7:76:69:8c:ee:61:a8:cd:ec:b2:91:3d:8e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Apr 16 22:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee79ea90c0e28f9f4b269bb9e97eb8f2dd5792e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7f:38:4e:88:e1:ee:dd:02:1a:9f:b8:73:e1:
ef:66:29:64:23:9d:4f:79:27:04:5a:dd:7d:d1:d0:
b8:79:1d:c1:6b:f4:e7:01:28:4a:2e:e4:5a:3e:64:
86:82:0f:03:68:4a:3a:43:ef:b0:66:e5:b0:af:95:
72:21:28:81:b5:d1:e8:75:a4:69:85:42:1b:3b:34:
0f:25:76:63:23:42:6f:f3:92:19:7f:b1:37:58:4f:
8e:d7:b1:cd:61:9b:d6:a0:df:eb:ea:1c:03:7e:64:
ed:3c:a1:da:38:eb:7f:13:b9:45:81:e0:df:78:a8:
eb:eb:44:90:34:19:ab:ad:d5:f1:f2:99:82:2b:53:
ed:1a:f7:b1:2c:1b:15:ea:25:ff:26:88:56:01:1a:
fa:94:d2:79:25:75:7b:f5:d5:ca:b7:cc:29:a8:3d:
a2:cb:53:99:d8:0e:08:f8:d4:65:98:43:c3:2a:f8:
e7:47:07:d1:ed:5b:18:cc:ae:1d:13:c9:7a:ac:d3:
7b:8d:ef:7a:04:40:b3:90:a7:2b:4e:c5:b1:2d:e6:
be:1c:78:e0:b6:08:0b:e1:74:0c:a7:f1:36:18:23:
f1:e7:b4:10:55:39:aa:95:f6:e4:2b:eb:33:a5:17:
2d:d5:ea:ff:56:2d:f9:91:de:70:0c:68:8c:57:fd:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:EA:90:C0:E2:8F:9F:4B:26:9B:B9:E9:7E:B8:F2:DD:57:92:E4
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/7nnqkMDij59LJpu56X648t1XkuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:84:0e:2d:0d:9e:15:96:f4:73:07:69:cf:2f:94:40:27:69:
77:f8:b8:94:2e:4b:71:d2:df:b6:de:a7:d7:fc:cc:f1:d8:d9:
54:d6:1b:ef:31:6f:0e:35:5e:6f:d2:66:79:b8:bf:cb:91:7c:
b9:29:90:6c:a2:c0:a4:3f:f6:51:f5:f7:54:97:e0:61:bb:f6:
77:5b:a9:ab:6d:0c:d4:37:db:96:8b:aa:18:f9:4c:75:9f:19:
6d:f1:1b:8b:23:57:5c:d9:fa:13:22:46:05:7e:6c:07:11:4c:
0f:1a:01:42:42:0a:24:e5:c0:22:94:00:6b:20:89:f8:38:19:
4c:05:53:05:2a:cb:17:ca:85:5b:1b:2c:31:7e:74:4b:df:92:
46:3d:ae:4e:79:a1:1f:71:6b:47:e0:e7:fa:2d:f8:35:e5:a4:
d6:44:6b:c8:db:53:bb:ae:38:f1:b2:47:25:f4:26:65:49:f6:
3a:2f:8c:f5:08:8b:2c:8b:27:b0:2d:cc:40:ce:be:22:ad:93:
77:38:e3:ad:bc:29:28:4c:7d:4f:29:dd:66:54:20:98:09:76:
53:7a:90:1c:cc:29:40:b3:bd:5c:9c:06:8f:1a:82:bc:9d:d1:
1d:ad:81:0d:1c:6b:9b:f7:a5:cb:4f:ad:68:66:08:0a:41:0d:
c3:8b:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:57 2024 by rpki-client on console-ams.rpki-client.org