Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa
File: 7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa (raw, json)
Hash identifier: QDQDp66qUB/PS0udUW8HZwiMOu3YUPHCWXgV2/sElsM=
Subject key identifier: EC:18:95:A8:34:73:13:36:79:2E:A7:DB:36:E6:99:7B:FB:52:10:3E
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018DAC2C9ECEF618BA01B0253F229D3B9FD8
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa
Signing time: Thu 15 Feb 2024 09:50:21 +0000
ROA not before: Thu 15 Feb 2024 09:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 89.222.36.0/24 maxlen: 24
89.222.37.0/24 maxlen: 24
89.222.38.0/24 maxlen: 24
89.222.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ac:2c:9e:ce:f6:18:ba:01:b0:25:3f:22:9d:3b:9f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Feb 15 09:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec1895a834731336792ea7db36e6997bfb52103e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:92:d5:06:3b:01:a3:f7:7d:16:2a:de:68:
4f:c1:7f:68:c3:16:0c:bc:4a:e3:d5:86:45:d0:ca:
38:5d:ca:29:9e:e4:4f:db:87:62:66:9e:60:b2:d4:
1a:e6:39:ae:b2:a3:c6:66:44:a7:20:7f:f6:f8:e5:
7f:ee:ee:91:b2:ef:97:ac:4c:70:89:b6:a4:3b:01:
ea:33:88:11:3d:41:44:a1:c3:c3:3c:3f:ad:70:60:
dc:3b:eb:0f:7e:08:9e:96:09:17:71:9c:bc:4b:f7:
9a:80:3e:16:9e:f2:10:ce:a2:5b:d1:36:51:fe:db:
c8:2e:e1:ce:9c:0d:1a:97:ed:33:ca:02:ca:64:26:
c1:52:c6:58:1f:72:2f:79:9f:d8:84:50:3a:da:33:
fc:e1:4c:eb:31:fc:8d:f1:36:d0:c2:2f:01:cf:fa:
7a:52:19:ba:a4:23:21:18:52:c1:5b:4d:20:20:e3:
db:f6:7a:93:11:32:49:a8:56:26:9c:2a:93:bb:4e:
44:f9:e7:c8:52:3b:7f:f4:88:81:20:de:1f:7f:ce:
23:39:dc:2d:7d:a6:f9:d9:b3:aa:26:ca:55:c2:8e:
68:73:3f:8c:65:5e:14:cf:15:5c:71:7a:f7:57:33:
18:27:73:f7:fe:78:5f:b3:32:1a:9e:25:3a:5d:75:
98:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:95:A8:34:73:13:36:79:2E:A7:DB:36:E6:99:7B:FB:52:10:3E
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/7BiVqDRzEzZ5LqfbNuaZe_tSED4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.36.0/22
Signature Algorithm: sha256WithRSAEncryption
63:68:4e:40:dd:3c:6d:d2:58:69:d1:e9:ef:b7:5a:f6:83:3f:
3a:05:35:7a:f7:3a:1e:a0:95:1e:ed:ea:16:8f:c8:50:c7:67:
a7:e2:06:4d:46:57:34:93:24:63:76:93:ae:3e:60:c9:3e:3c:
b7:41:70:5a:de:fe:8a:5c:38:b3:b4:0b:e7:a3:d3:f1:a1:02:
4c:ba:fc:77:f6:e7:9c:7d:c0:f0:75:69:d7:24:5b:d7:fe:09:
97:94:31:ee:de:88:95:4f:cc:9e:7c:60:8f:f9:9a:5a:ff:cf:
72:41:0d:1d:eb:42:78:97:16:83:f1:5b:0c:9c:73:1c:cd:87:
a1:47:2c:ed:c1:53:91:43:55:eb:30:0c:ed:30:0b:c0:68:74:
37:70:68:f9:f4:b3:c5:b9:89:55:e0:2a:43:2b:09:66:57:8a:
3e:55:66:79:72:0d:da:18:93:05:d6:cc:63:50:e5:f9:13:3f:
03:60:91:ee:33:7f:a6:29:bb:00:9f:ac:e3:02:c2:96:19:5f:
ab:e9:ad:30:f0:9c:4c:38:f0:22:3d:59:16:01:be:3e:dc:e9:
a2:e9:4e:29:79:23:4d:be:9b:2f:d8:14:69:7e:e2:91:cc:fe:
4c:73:98:0c:c8:17:f4:ee:89:49:39:f7:7f:07:73:4d:eb:71:
bb:3b:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:52:53 2024 by rpki-client on console-fra.rpki-client.org