Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t7dtt_m0Za9k7seZ9qRbl9_f0HE.roa
File: t7dtt_m0Za9k7seZ9qRbl9_f0HE.roa (raw, json)
Hash identifier: 2kQ1zZjkxC4g+NQ9oJLyZg+3EqPCQKwkyORveJjhToU=
Subject key identifier: B7:B7:6D:B7:F9:B4:65:AF:64:EE:C7:99:F6:A4:5B:97:DF:DF:D0:71
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01916A51FA9449AEE508731C976C3CBDDC8E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t7dtt_m0Za9k7seZ9qRbl9_f0HE.roa
Signing time: Mon 19 Aug 2024 11:07:23 +0000
ROA not before: Mon 19 Aug 2024 11:07:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61424
IP address blocks: 89.46.42.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:51:fa:94:49:ae:e5:08:73:1c:97:6c:3c:bd:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 19 11:07:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b76db7f9b465af64eec799f6a45b97dfdfd071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:54:77:bf:ef:68:8f:45:91:94:36:f1:2b:
d6:89:2e:c8:22:56:1b:84:29:a2:ef:14:0a:e2:ad:
a7:f6:fe:5c:a0:df:56:c6:0c:74:89:b4:73:a3:f8:
44:4d:8f:ce:16:eb:7a:b2:b2:d4:5c:65:34:6f:48:
54:0a:6f:86:b4:b1:c4:67:c2:97:f0:9f:21:e3:01:
67:21:2f:47:5d:77:0a:b5:1b:56:e6:98:c6:7d:f2:
32:b3:41:a1:c4:e0:86:0b:57:10:78:8b:b6:f3:b3:
8f:fa:bd:7f:ec:e3:26:86:e4:3d:41:45:6f:08:94:
03:86:4a:1b:b0:f2:a1:92:56:a0:00:c4:23:bf:d6:
bc:f6:96:b3:fd:2b:e9:f4:02:c3:21:91:03:8d:c4:
42:25:81:15:f8:aa:e9:7a:c6:3d:54:79:51:90:c2:
87:91:75:92:7c:b8:dc:a6:1d:3d:e3:a5:7d:a7:00:
0c:8d:5f:f0:32:f2:74:c8:33:97:6b:17:84:64:64:
84:f9:24:29:1e:16:32:a9:2d:47:55:db:93:b0:62:
44:11:68:67:11:aa:6f:50:11:46:96:cc:3c:60:72:
44:f2:5a:20:c9:6c:09:a8:c9:fa:1e:ae:cd:69:49:
9d:db:0d:d7:ed:a1:c1:cd:99:a1:9a:26:27:3e:c1:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:6D:B7:F9:B4:65:AF:64:EE:C7:99:F6:A4:5B:97:DF:DF:D0:71
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t7dtt_m0Za9k7seZ9qRbl9_f0HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.42.0/24
185.112.249.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dc:47:c2:49:3d:7b:c4:2f:57:ed:b7:eb:72:25:c5:68:ea:
5f:d2:c2:e5:98:ea:07:7f:db:56:65:03:6c:2b:a8:68:99:18:
82:d2:d6:e3:87:51:86:29:d8:7f:7a:dc:1e:9e:61:5e:30:61:
5f:7b:85:94:2a:f3:e1:0e:59:52:6c:71:49:35:aa:5e:52:21:
99:03:0f:62:54:0d:8d:01:8c:8a:0b:bd:af:0f:40:3f:32:aa:
14:dd:c9:b3:b8:43:ae:97:26:f0:7c:35:27:e7:b9:6b:4e:6c:
6f:bb:34:1b:98:a0:8c:ed:71:b7:14:f4:63:67:52:6e:32:e6:
ae:11:f3:3e:d4:c5:05:cd:5f:39:c3:ab:01:36:39:b3:00:15:
8a:25:9b:fb:e0:e7:b8:11:bc:df:6b:de:3c:87:cd:7a:f6:14:
95:40:05:a3:4f:01:c3:49:c7:c4:fe:ec:f6:44:83:14:e5:3a:
7d:aa:f2:28:78:e0:1b:a7:e2:4e:30:ea:80:42:05:5b:db:56:
4c:45:82:c7:b7:fd:6a:8e:2f:80:08:28:83:08:75:5b:87:7e:
a8:d0:02:b2:93:75:66:e3:98:5c:e5:63:7f:b0:9e:a3:fb:fc:
88:2c:71:ef:61:18:18:cd:87:8a:cc:c9:2e:5c:4f:02:e3:11:
e3:6e:63:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:10 2024 by rpki-client on console-fra.rpki-client.org