Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p7kWSjjLXqciyxVoQ0JksSWtDwk.roa
File: p7kWSjjLXqciyxVoQ0JksSWtDwk.roa (raw, json)
Hash identifier: eiDZV4j3kNBHnzKXh9NZHcjYbVHchbfqF40WRU7Pr6M=
Subject key identifier: A7:B9:16:4A:38:CB:5E:A7:22:CB:15:68:43:42:64:B1:25:AD:0F:09
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018EF0D0987F2CD72B9757A7B0C917B89292
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p7kWSjjLXqciyxVoQ0JksSWtDwk.roa
Signing time: Thu 18 Apr 2024 10:46:26 +0000
ROA not before: Thu 18 Apr 2024 10:46:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202940
IP address blocks: 82.166.240.0/22 maxlen: 24
82.166.244.0/23 maxlen: 24
194.90.229.0/24 maxlen: 24
199.203.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:d0:98:7f:2c:d7:2b:97:57:a7:b0:c9:17:b8:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Apr 18 10:46:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7b9164a38cb5ea722cb1568434264b125ad0f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:a3:cb:02:70:70:26:f9:4e:0a:ad:f5:d5:
2f:cd:d2:3f:df:e7:c0:b0:b3:9a:92:37:9a:49:17:
43:4e:66:e7:30:6f:be:02:42:a4:57:1b:0b:89:c1:
d3:ed:a3:59:cd:02:e1:6c:df:43:d0:a1:5d:d9:ee:
09:8e:85:1e:a1:75:15:f7:f1:05:7e:40:a0:45:8b:
89:78:dd:c1:86:be:7b:87:d7:f7:11:c0:10:0d:bc:
45:10:c7:d8:f6:25:47:a3:d6:6c:8b:48:f6:aa:59:
86:c6:fa:79:b3:34:86:a9:ae:2f:0e:25:38:83:d2:
25:35:8f:2f:7f:da:b0:ad:5c:bf:3e:ab:a3:6e:a9:
f9:00:c8:30:e0:63:c0:38:d3:2c:7a:50:68:35:50:
84:d9:d5:cf:8a:1c:a5:33:32:6a:c7:3b:ae:fd:1c:
3c:78:03:5b:66:60:bb:5e:dd:b9:e9:37:03:94:13:
66:25:0f:c8:c1:30:72:f2:91:56:2a:e4:b7:e8:a0:
72:c3:5c:ef:55:9b:b6:95:b2:63:47:d6:c5:7f:0a:
19:34:d9:f8:2e:c5:fb:c8:fa:0b:92:ef:9a:31:ca:
7d:27:09:68:9e:9d:7c:e0:6c:7f:23:54:39:65:b5:
21:1f:2d:92:ef:67:3d:b6:7a:74:04:d2:0d:20:bb:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:16:4A:38:CB:5E:A7:22:CB:15:68:43:42:64:B1:25:AD:0F:09
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p7kWSjjLXqciyxVoQ0JksSWtDwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.166.240.0-82.166.245.255
194.90.229.0/24
199.203.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:c6:4a:21:97:dd:68:05:00:d0:b1:71:ca:74:29:9b:87:80:
70:84:3c:41:91:9f:1c:70:71:a6:48:1c:10:30:81:e8:c7:2b:
1c:cf:fc:be:21:7b:7f:d4:f9:51:a0:75:12:ea:4c:b3:18:57:
75:cd:9c:b3:23:40:54:2a:62:92:55:e0:a0:9b:4a:b0:1a:f1:
74:54:cb:49:19:b0:71:9a:41:eb:6b:fe:91:b9:20:c9:32:55:
bc:d9:61:9d:8c:f4:78:a3:49:07:09:88:6d:4a:cd:30:38:91:
19:1b:89:15:e5:22:9e:ee:f9:55:8b:ce:7d:f1:aa:69:31:a4:
cf:de:24:13:b0:39:a9:d6:d5:bc:f4:c7:aa:99:48:3e:dc:48:
5b:d2:e2:7d:23:1e:35:35:58:b1:89:00:7f:96:90:21:f4:78:
6b:e8:8a:b1:48:fa:9b:57:2f:6f:d8:f1:a6:6e:d8:d3:fb:bc:
33:93:c1:63:e8:8e:39:6a:3a:39:a2:f6:01:34:f8:e0:aa:af:
49:f9:2d:78:5a:39:47:94:0e:6b:17:b5:42:7f:19:ea:c6:44:
2a:83:74:f8:2c:c8:25:e4:79:8f:a9:08:a9:62:83:fd:59:2c:
40:a6:21:b4:72:6b:24:83:e2:cf:a3:f8:87:72:77:21:bb:9e:
2c:2b:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:34:30 2024 by rpki-client on console-ams.rpki-client.org