Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7AQlv9RueUr-hXhpE70M0Yx26GE.roa
File: 7AQlv9RueUr-hXhpE70M0Yx26GE.roa (raw, json)
Hash identifier: N9VFHWS45P+Fz1EQJWNg2oe9XKYV3pOKIjIfHAPfBGk=
Subject key identifier: EC:04:25:BF:D4:6E:79:4A:FE:85:78:69:13:BD:0C:D1:8C:76:E8:61
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 018CC8DF27F3E7E8A4EEFA098F0AE30CD078
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7AQlv9RueUr-hXhpE70M0Yx26GE.roa
Signing time: Tue 02 Jan 2024 06:31:57 +0000
ROA not before: Tue 02 Jan 2024 06:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41562
IP address blocks: 195.34.72.0/23 maxlen: 23
195.34.72.0/24 maxlen: 24
195.34.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:27:f3:e7:e8:a4:ee:fa:09:8f:0a:e3:0c:d0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Jan 2 06:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec0425bfd46e794afe85786913bd0cd18c76e861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:04:63:26:1d:b7:2c:72:01:35:a3:07:e6:b2:
80:37:63:07:d7:25:17:db:e8:99:2e:5c:5f:29:fd:
aa:7e:bd:d2:0c:6e:77:d4:0f:ee:91:6b:bf:4b:40:
51:d5:fc:13:aa:08:06:95:ca:fc:b6:d9:56:85:5c:
b0:10:ca:76:f6:20:2a:56:e9:a6:06:3e:a8:8a:4a:
53:ab:af:d7:97:54:23:48:65:84:84:36:f1:c7:86:
20:99:73:2e:97:fd:35:fa:3a:a2:69:9f:25:65:3e:
a1:7f:3e:21:a7:d0:68:49:18:ca:96:cd:9a:1e:30:
db:89:1c:87:ec:9f:86:69:bd:6a:fb:c1:ca:36:c0:
43:b3:25:3d:5d:6d:81:d0:fc:7e:f0:c3:e3:4e:2d:
de:cd:9e:12:29:2d:91:13:80:51:61:73:7a:68:59:
ed:cb:28:2f:8a:57:10:24:be:b5:08:b5:45:bb:34:
3d:2a:63:47:18:50:6b:c9:95:09:f7:a2:c0:62:33:
9c:87:20:80:34:f4:38:80:86:8e:a5:25:8b:5b:76:
e7:f5:4a:35:bc:21:cf:62:8c:7a:6c:35:1d:c6:19:
dd:fd:4c:a1:fa:c7:1c:58:0e:48:16:44:f9:62:13:
92:54:0e:65:cd:65:c4:ef:87:86:15:ea:16:a8:83:
d2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:25:BF:D4:6E:79:4A:FE:85:78:69:13:BD:0C:D1:8C:76:E8:61
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/7AQlv9RueUr-hXhpE70M0Yx26GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.72.0/23
Signature Algorithm: sha256WithRSAEncryption
10:4b:c4:e8:59:c8:d9:89:a1:27:8a:c1:22:90:75:9c:11:91:
13:19:e7:9a:8c:a1:6f:f3:d0:05:af:1d:c5:ca:07:b9:f6:db:
f0:c7:da:ea:a5:83:a6:9b:d5:4f:82:13:c3:6d:c0:fc:23:54:
4f:5e:a1:7c:a3:c9:62:2c:10:3b:7b:b1:bf:04:ae:88:98:44:
62:4f:b8:a2:7b:4f:8b:a5:f1:51:23:82:c7:03:fb:b3:a0:3a:
d0:dd:ff:2e:7e:35:1b:1e:04:0e:92:44:2c:20:26:c8:08:9e:
c7:c6:38:20:3e:0e:32:c9:29:90:05:96:f7:da:c5:8b:32:81:
fb:d0:fa:01:3c:db:92:79:1c:cf:72:d1:fb:9f:05:54:43:82:
3a:5e:79:f2:53:0b:8d:d7:2a:f2:b7:82:95:f0:d7:8d:ec:3c:
c8:88:33:0c:43:07:af:30:83:72:0f:8a:9e:05:0e:5f:0b:ad:
26:eb:17:78:e7:01:36:72:e3:38:9c:f2:61:f4:1d:a2:3b:9d:
82:97:45:84:04:81:5b:ea:69:d2:b6:a3:03:45:b7:a3:6e:da:
b4:bb:3b:60:b2:a7:55:cb:b7:e4:c5:91:1c:24:63:0d:26:87:
58:fb:a1:b6:44:90:d5:56:ff:30:91:fd:16:29:66:8c:d9:98:
73:89:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:08:35 2024 by rpki-client on console-ams.rpki-client.org