Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/irb7gvv0sz5ZAihCzAEmNGFtZqs.roa
File: irb7gvv0sz5ZAihCzAEmNGFtZqs.roa (raw, json)
Hash identifier: lOq6ilooYLFJ19Fyfw0wXdDG9+KMSjFd52AiKFnJ7t4=
Subject key identifier: 8A:B6:FB:82:FB:F4:B3:3E:59:02:28:42:CC:01:26:34:61:6D:66:AB
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 018CC49240BAC499465E686882713FF6A694
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/irb7gvv0sz5ZAihCzAEmNGFtZqs.roa
Signing time: Mon 01 Jan 2024 10:29:28 +0000
ROA not before: Mon 01 Jan 2024 10:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21217
IP address blocks: 193.72.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:40:ba:c4:99:46:5e:68:68:82:71:3f:f6:a6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab6fb82fbf4b33e59022842cc012634616d66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:46:15:cd:c1:81:ef:2c:46:f1:a5:30:b8:
d9:f9:2b:c6:c8:09:a9:9f:11:60:33:b9:36:8d:68:
f4:2c:c7:5b:0f:d8:3d:e4:74:27:13:ec:4e:4c:a7:
7e:b4:aa:28:73:9a:41:fa:e9:af:ce:d1:5d:12:32:
25:49:99:48:30:14:ba:97:d1:99:61:46:c5:14:ed:
d1:27:30:e0:0f:bd:69:f8:17:3b:c8:1d:c2:71:0c:
8e:2f:36:04:c7:dc:07:4a:01:3f:f5:cb:0a:a2:6c:
a1:3d:c9:f2:24:9a:c7:56:7e:06:a1:b0:26:10:2a:
10:05:f2:93:38:03:2b:cb:ac:bf:a9:9b:98:f8:09:
6e:ad:f2:0e:a3:bb:df:e6:27:e5:a7:2c:e8:be:c7:
ff:44:25:83:fd:bb:4b:f0:38:67:71:f5:ac:26:29:
1b:46:68:b2:77:4c:21:fc:6f:27:66:7d:c4:d5:bc:
90:3e:1c:14:5a:66:40:20:77:37:91:ee:5d:2b:82:
19:5f:69:54:83:48:ff:95:cb:d3:fa:e2:62:2a:cf:
88:ed:f9:a5:5f:f8:28:4b:53:a9:e2:e4:91:f4:b9:
c7:d8:6d:5c:a2:b8:e1:8f:09:a6:e5:e0:99:1e:ff:
7f:80:a9:a9:34:6d:25:09:d6:de:73:e9:bc:01:ea:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:FB:82:FB:F4:B3:3E:59:02:28:42:CC:01:26:34:61:6D:66:AB
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/irb7gvv0sz5ZAihCzAEmNGFtZqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b4:bb:e3:82:c7:9f:d0:19:e4:5f:ec:02:09:45:67:b7:3d:
72:a8:98:fe:7b:2a:22:89:31:d9:d7:6b:a7:8e:71:5b:46:d5:
9e:dd:10:78:ff:37:d9:8a:0c:a3:1c:84:b9:8e:bd:bd:14:50:
4c:f8:f1:4a:f8:45:e3:6b:15:40:ee:30:64:05:6e:3b:ae:7b:
28:b2:b2:11:7e:a5:b0:3a:77:76:80:e8:62:99:41:ae:1c:d6:
29:fd:84:74:9c:08:84:3f:4d:41:a4:1c:f0:fe:b3:e6:43:a2:
fe:c4:73:64:4c:39:92:66:f6:f7:fc:c3:12:59:bb:0c:1b:89:
29:68:c7:6b:66:fb:14:72:1a:ae:55:db:0f:d5:86:e7:08:42:
01:6c:a0:1e:96:06:1b:1a:80:ab:be:31:0d:a6:4b:a1:06:f7:
35:27:f6:18:11:3d:48:af:cc:14:ae:dc:99:36:e9:4c:b0:a5:
d0:36:36:e8:e4:54:ed:2d:24:9b:5e:7b:54:24:51:6d:84:a5:
13:90:e7:5c:64:4a:e9:fb:77:97:8e:69:48:c3:c1:8a:d8:db:
58:b4:be:14:1d:48:63:88:46:09:e2:00:db:76:62:67:85:bf:
56:0e:ee:f8:09:8b:50:ec:35:c0:81:60:fa:9c:43:28:a9:12:
96:99:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:10 2024 by rpki-client on console-fra.rpki-client.org