Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0P7AK6Z_SNa4Jqp-i5lcXZ3tanw.roa
File: 0P7AK6Z_SNa4Jqp-i5lcXZ3tanw.roa (raw, json)
Hash identifier: naaYzLhECLP0AH0iFfsVU+hPlBTTaZ20V+e7n0N3u7I=
Subject key identifier: D0:FE:C0:2B:A6:7F:48:D6:B8:26:AA:7E:8B:99:5C:5D:9D:ED:6A:7C
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019325AE73DD8EC5F16E86B12EBFF138C328
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0P7AK6Z_SNa4Jqp-i5lcXZ3tanw.roa
Signing time: Wed 13 Nov 2024 13:20:10 +0000
ROA not before: Wed 13 Nov 2024 13:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44029
IP address blocks: 87.229.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:ae:73:dd:8e:c5:f1:6e:86:b1:2e:bf:f1:38:c3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Nov 13 13:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0fec02ba67f48d6b826aa7e8b995c5d9ded6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a1:d1:42:96:93:a4:9d:04:e0:94:dd:94:a0:
68:3e:de:00:d8:e9:7b:7d:60:e2:67:51:3c:68:87:
4c:0f:d6:10:3c:96:e2:09:24:4d:7c:2c:64:66:8f:
4d:52:2e:b1:53:5c:92:6a:c0:f4:39:39:0e:b9:24:
f7:34:3e:18:01:1a:60:83:73:14:d0:18:82:47:17:
81:c5:52:2c:f4:2b:83:83:a2:ba:76:57:85:55:fe:
97:d0:da:93:5c:65:83:33:8f:b3:aa:8c:77:c3:35:
9a:c2:3b:09:70:1c:4e:28:5e:d6:ae:80:55:35:77:
97:9c:39:5e:83:19:53:98:9f:9c:e6:1d:1b:1b:1c:
d9:1b:74:9c:57:5d:81:fe:36:69:dc:e8:4c:75:47:
2c:6f:99:ca:62:6d:92:50:ae:58:84:02:fd:e5:cd:
95:87:8f:73:27:0c:32:2f:54:9e:b7:2f:ae:ac:f4:
b2:bf:7a:07:ed:2f:98:d6:8c:d4:40:6e:97:99:3e:
69:20:29:af:2d:21:ff:af:be:ec:9d:4e:3b:5d:1a:
d2:61:28:75:a6:a9:48:60:6c:d1:e2:c8:9f:ca:f2:
9a:0d:3d:0f:41:ba:70:f4:69:e9:06:e1:0b:9d:16:
b8:90:e4:57:74:5f:d0:8a:e2:55:f7:69:1a:2e:6a:
b7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:C0:2B:A6:7F:48:D6:B8:26:AA:7E:8B:99:5C:5D:9D:ED:6A:7C
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/0P7AK6Z_SNa4Jqp-i5lcXZ3tanw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.10.0/23
Signature Algorithm: sha256WithRSAEncryption
70:8d:56:82:c7:cd:c6:31:a4:49:32:cd:d9:aa:e7:c1:c0:78:
d1:6b:74:07:85:a4:91:d9:07:d0:ac:cd:6d:1f:07:b1:20:4f:
c1:ee:b1:a1:57:86:2b:2b:a6:32:24:0f:30:d6:76:de:00:f5:
e4:20:a6:ec:fb:72:50:64:6f:22:1a:3d:94:99:ab:53:61:f5:
ce:3b:30:34:9d:43:4c:a0:1d:94:06:84:2a:ef:82:b9:48:56:
28:e8:77:79:54:69:23:1c:b3:2b:62:1a:23:24:87:40:a0:80:
a3:c7:7e:98:81:6b:45:b2:07:fa:64:f3:1e:e1:6f:85:0c:a1:
f1:d4:57:2d:1d:27:10:b9:e8:49:3a:c8:60:16:00:f6:88:2a:
ce:c6:0d:7f:d5:2d:34:1b:1d:2c:97:77:d0:ba:41:6d:04:d6:
ee:44:0b:ec:42:c1:3e:a3:fa:16:c0:12:ad:6a:49:82:4a:0c:
d3:60:6a:46:8f:c2:02:91:a4:a6:40:03:3c:9f:76:52:1b:7b:
93:c0:eb:1f:ef:2a:ea:03:0d:eb:87:b4:01:9d:3d:b4:be:ab:
19:30:e7:28:9c:8b:00:57:75:5a:0d:51:86:31:c2:02:0e:aa:
f3:e6:9b:a2:84:81:60:07:43:36:ce:3b:77:c4:39:69:fb:63:
60:e2:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:03 2024 by rpki-client on console-fra.rpki-client.org