Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/S7FO3CaFUR3PNdsjKrCNA2sVUG4.roa
File: S7FO3CaFUR3PNdsjKrCNA2sVUG4.roa (raw, json)
Hash identifier: UMX4S4tJW73j3zD8YwmeK0vseYLUq0Qxcd19t4+mH8U=
Subject key identifier: 4B:B1:4E:DC:26:85:51:1D:CF:35:DB:23:2A:B0:8D:03:6B:15:50:6E
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 018CC794858DFA05ED149E972BBA38200DC6
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/S7FO3CaFUR3PNdsjKrCNA2sVUG4.roa
Signing time: Tue 02 Jan 2024 00:30:48 +0000
ROA not before: Tue 02 Jan 2024 00:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200521
IP address blocks: 212.128.96.0/22 maxlen: 22
212.128.101.0/24 maxlen: 24
212.128.102.0/24 maxlen: 24
212.128.100.0/24 maxlen: 24
212.128.105.0/24 maxlen: 24
212.128.103.0/24 maxlen: 24
212.128.104.0/24 maxlen: 24
192.187.17.0/24 maxlen: 24
192.187.16.0/24 maxlen: 24
192.187.18.0/24 maxlen: 24
192.187.19.0/24 maxlen: 24
192.187.22.0/24 maxlen: 24
192.187.23.0/24 maxlen: 24
192.187.20.0/24 maxlen: 24
192.187.21.0/24 maxlen: 24
192.148.214.0/24 maxlen: 24
192.148.215.0/24 maxlen: 24
212.128.112.0/24 maxlen: 24
212.128.110.0/24 maxlen: 24
212.128.112.0/22 maxlen: 22
212.128.111.0/24 maxlen: 24
212.128.108.0/24 maxlen: 24
212.128.109.0/24 maxlen: 24
212.128.107.0/24 maxlen: 24
212.128.106.0/24 maxlen: 24
212.128.116.0/23 maxlen: 23
212.128.114.0/24 maxlen: 24
212.128.113.0/24 maxlen: 24
212.128.118.0/24 maxlen: 24
212.128.122.0/24 maxlen: 24
212.128.123.0/24 maxlen: 24
212.128.120.0/24 maxlen: 24
212.128.121.0/24 maxlen: 24
212.128.119.0/24 maxlen: 24
212.128.125.0/24 maxlen: 24
212.128.127.0/24 maxlen: 24
212.128.126.0/24 maxlen: 24
192.148.211.0/24 maxlen: 24
192.148.212.0/24 maxlen: 24
192.148.209.0/24 maxlen: 24
192.148.210.0/24 maxlen: 24
192.148.208.0/24 maxlen: 24
192.148.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:85:8d:fa:05:ed:14:9e:97:2b:ba:38:20:0d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Jan 2 00:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb14edc2685511dcf35db232ab08d036b15506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:3f:9b:5d:3c:75:62:75:87:53:2e:c7:dd:
fb:f7:2b:4e:a6:9e:a3:84:31:2c:bc:38:8f:cc:6b:
6f:bb:17:3a:cd:f0:2d:11:be:e5:19:69:73:1c:f3:
50:88:77:02:70:d0:df:96:d7:aa:c2:32:19:81:4f:
28:a4:13:85:b9:62:ce:ab:5f:dd:f1:a8:bd:cb:ce:
9a:65:53:d3:50:6f:ea:56:c1:75:54:43:ce:5f:0d:
9e:ab:6a:9d:0b:0e:d6:8f:8e:ac:d4:50:a7:b5:3f:
5a:3d:b5:aa:a3:c0:2f:fb:28:fe:95:bf:29:a3:4a:
23:8f:fa:a4:33:cb:ba:cf:7b:b2:84:18:21:ca:9c:
5f:56:f2:e9:37:42:d2:10:09:92:2c:91:02:54:a7:
58:5e:f2:ca:8d:4f:98:d5:ad:89:d6:e9:47:2c:d9:
ab:9d:d0:26:4a:50:58:40:f3:72:86:ce:89:db:13:
14:56:6b:52:a8:7a:35:19:5f:d5:5a:ab:6c:38:e0:
e4:0b:b1:d7:86:e8:bd:03:f1:3f:87:38:1c:cf:2c:
1b:67:63:22:ed:af:b1:88:3d:dd:5f:48:98:c2:69:
85:72:50:d0:ee:07:75:98:5f:4c:17:73:3b:07:60:
b2:e3:23:e3:7e:ad:f5:86:de:fa:7e:30:0d:fc:a5:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B1:4E:DC:26:85:51:1D:CF:35:DB:23:2A:B0:8D:03:6B:15:50:6E
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/S7FO3CaFUR3PNdsjKrCNA2sVUG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.208.0/21
192.187.16.0/21
212.128.96.0-212.128.123.255
212.128.125.0-212.128.127.255
Signature Algorithm: sha256WithRSAEncryption
08:2a:22:b6:fd:62:fd:d1:69:43:52:d2:88:cf:0f:37:f8:cc:
a7:c4:7d:87:90:55:6b:bc:20:f3:0c:e4:fe:71:5b:aa:f3:89:
20:c1:81:7c:8c:89:21:b3:04:71:28:83:ab:46:f2:65:13:40:
af:a1:9c:7e:f8:aa:77:2a:55:10:64:3a:7d:58:70:19:91:41:
02:e5:30:7b:7d:e9:ee:fc:fb:cf:e3:73:1b:f1:8f:0b:f0:82:
c2:93:3d:ad:f5:52:f5:d8:3c:9f:63:f9:c6:d9:c5:ac:ba:14:
ee:00:7b:81:11:b3:58:a4:07:01:96:93:b8:6d:7a:4e:51:44:
69:69:a0:3e:20:dd:f6:ad:5c:37:4c:80:d2:07:4c:65:ab:4c:
fe:26:7e:8f:9c:4b:39:8d:5c:8f:75:e6:21:ab:3c:db:8f:b4:
fd:1a:eb:6e:91:df:e9:1e:52:28:b6:a4:2c:99:bc:8a:93:b2:
cd:8c:31:38:e4:60:ef:1f:f6:7a:62:89:cf:fd:23:8b:07:b0:
a7:9b:e6:bd:14:27:54:86:ed:e7:46:8f:6d:d8:80:ee:95:07:
0c:e1:bb:9a:cd:72:82:1d:bf:c3:aa:12:fb:39:f5:7d:04:69:
87:fb:fa:68:c6:d9:af:75:b1:e4:dc:73:98:54:f8:63:48:de:
d7:8e:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:51 2024 by rpki-client on console-ams.rpki-client.org