Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/7ZlchC01W2yoeX1jz8x73dhzfkw.roa
File: 7ZlchC01W2yoeX1jz8x73dhzfkw.roa (raw, json)
Hash identifier: Pv3amnA1aAAmoHqSVnEkqNsSQorsezqPe/JsddWheQk=
Subject key identifier: ED:99:5C:84:2D:35:5B:6C:A8:79:7D:63:CF:CC:7B:DD:D8:73:7E:4C
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 018FE3C063FAED0A0A692D991CD0E6C1388E
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/7ZlchC01W2yoeX1jz8x73dhzfkw.roa
Signing time: Tue 04 Jun 2024 14:56:27 +0000
ROA not before: Tue 04 Jun 2024 14:56:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 93.157.38.0/23 maxlen: 24
2a00:4bc0:2000::/44 maxlen: 56
2a00:4bc0:2100::/40 maxlen: 48
2a00:4bc0:2300::/40 maxlen: 48
2a00:4bc0:2400::/40 maxlen: 48
2a00:4bc0:2600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:c0:63:fa:ed:0a:0a:69:2d:99:1c:d0:e6:c1:38:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Jun 4 14:56:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed995c842d355b6ca8797d63cfcc7bddd8737e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:be:27:31:4f:49:4b:8b:6d:c7:92:93:4e:
9c:d3:7a:0c:7b:7a:25:64:5f:ad:88:d5:64:5d:62:
ed:94:1c:8d:75:7c:5a:8f:8d:a2:9f:04:f4:9f:8a:
09:79:7f:f8:ed:a7:3b:83:2c:fa:b6:52:58:b4:ed:
58:d5:04:5c:2b:38:af:08:9c:82:52:4a:5c:aa:5a:
af:58:f3:9e:4c:9f:59:53:76:db:e4:72:ee:f0:c3:
0e:90:44:bd:ad:37:a9:2c:7e:f6:0e:38:93:5c:c3:
af:3b:1f:b3:d1:24:20:c4:3d:51:63:fd:35:95:a0:
7f:08:1c:85:6f:8f:35:65:7c:89:c5:9a:fe:20:bf:
8b:06:26:c2:3d:22:b6:29:e7:07:6c:c4:b2:97:af:
61:d1:32:b1:03:8b:4f:2f:c1:06:c8:42:be:e1:5e:
94:3e:8d:53:e8:30:b3:60:d1:71:65:86:9e:30:b9:
72:b7:1c:4c:c3:f3:c0:b9:e3:22:42:24:d3:e2:b9:
3f:01:fb:97:3b:cf:fa:30:d2:f3:e5:cf:15:72:25:
8f:41:9e:74:a7:1d:27:51:b7:78:15:b1:b2:0f:8f:
27:45:3a:aa:e0:57:5c:f1:35:78:4b:0c:25:6a:62:
5e:ac:8a:00:68:f1:29:33:4c:ca:e9:23:5e:0d:e2:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:99:5C:84:2D:35:5B:6C:A8:79:7D:63:CF:CC:7B:DD:D8:73:7E:4C
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/7ZlchC01W2yoeX1jz8x73dhzfkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.38.0/23
IPv6:
2a00:4bc0:2000::/44
2a00:4bc0:2100::/40
2a00:4bc0:2300::-2a00:4bc0:24ff:ffff:ffff:ffff:ffff:ffff
2a00:4bc0:2600::/40
Signature Algorithm: sha256WithRSAEncryption
52:f1:d2:f3:3a:26:3f:4b:7c:cc:63:5b:e3:22:7f:0a:78:d8:
c6:7e:81:93:03:07:d2:d5:61:84:cd:5a:82:d2:3d:65:d2:ee:
b7:ad:eb:02:95:0f:8c:f5:39:b0:83:ac:49:6d:35:c4:a8:a3:
de:e1:7a:0b:c4:aa:ac:77:0c:72:50:e1:47:0f:d5:a3:7b:76:
16:b7:78:bf:7b:c1:22:1c:85:56:64:61:b4:36:d3:b9:53:18:
2a:77:bd:32:26:af:17:61:c4:30:fa:0f:ba:0a:4e:c2:ce:70:
41:9a:0c:93:7a:af:0e:9c:b6:ca:e1:24:2e:c4:c4:79:dd:1b:
19:ae:37:dc:1f:61:71:c0:8a:3e:67:c6:f4:a2:04:8b:5a:07:
31:0b:41:f2:a2:fa:53:cf:92:40:c7:d4:70:d0:11:09:a4:7e:
82:6a:3d:c7:96:aa:0d:66:43:7f:0c:82:cb:91:b5:6f:da:72:
61:0b:ff:97:b0:38:32:94:6d:5e:ee:0b:aa:c2:1b:0a:39:ed:
ce:ac:e6:52:84:2a:99:1a:92:74:98:be:d7:02:86:47:4b:f3:
65:fe:e8:0a:27:2f:4f:1a:1d:84:89:4c:bf:d4:9e:46:c5:f6:
71:3a:29:19:25:2c:51:90:f8:39:4c:d7:a0:ec:a8:66:98:66:
99:9b:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:24:58 2024 by rpki-client on console-ams.rpki-client.org