Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7ORyFqK3Ov-PBNkn6l0NuNBE07g.roa
File: 7ORyFqK3Ov-PBNkn6l0NuNBE07g.roa (raw, json)
Hash identifier: vSJJS3lq9wy2KdFK7lTz/E3vLhJVIZ+7rdZXYUJU7aE=
Subject key identifier: EC:E4:72:16:A2:B7:3A:FF:8F:04:D9:27:EA:5D:0D:B8:D0:44:D3:B8
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 018CC726E51EACC1E86F3FC787E92242C840
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7ORyFqK3Ov-PBNkn6l0NuNBE07g.roa
Signing time: Mon 01 Jan 2024 22:31:04 +0000
ROA not before: Mon 01 Jan 2024 22:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57704
IP address blocks: 193.7.223.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.220.0/24 maxlen: 32
193.7.221.0/24 maxlen: 24
45.146.15.0/24 maxlen: 24
45.146.12.0/24 maxlen: 24
45.146.14.0/24 maxlen: 24
45.146.13.0/24 maxlen: 24
5.133.24.0/21 maxlen: 24
5.253.71.0/24 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.68.0/24 maxlen: 24
5.253.70.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
185.132.248.0/22 maxlen: 24
2a09:9900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:e5:1e:ac:c1:e8:6f:3f:c7:87:e9:22:42:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Jan 1 22:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece47216a2b73aff8f04d927ea5d0db8d044d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:c1:dc:0e:00:69:d2:55:32:77:eb:41:60:
0d:6f:64:3c:62:cc:b4:dd:a1:0c:88:e6:e8:d4:5c:
55:41:08:b1:fb:7e:19:9f:43:f9:47:b1:63:97:fb:
42:28:00:f7:5d:c2:5f:e2:b0:15:a0:c8:8c:6b:b3:
28:01:fd:a7:f6:ff:75:1a:59:7a:8d:c8:ab:8e:f1:
a6:1b:53:65:ca:f2:36:a0:9e:7b:c2:15:31:1e:47:
8e:60:23:9d:3f:eb:3a:1c:39:20:5d:59:60:b6:51:
c7:36:ea:79:ad:3e:7b:e9:38:f7:fb:ed:c2:b2:3d:
5f:8d:dd:02:3a:21:85:3d:53:db:db:a1:17:28:60:
56:af:94:2a:8c:07:f0:80:31:a6:41:73:3c:de:dc:
35:29:6a:a6:9a:3f:4e:34:f5:33:98:93:46:7e:9b:
9d:78:1f:4e:f2:4e:5b:8c:20:66:13:a0:64:a7:b7:
db:38:41:1d:35:eb:2c:8a:83:1c:f5:29:0d:8a:b9:
2f:26:86:88:09:ff:60:e8:91:e1:5f:04:34:b5:99:
85:77:93:f6:c1:4b:7e:b5:9d:6c:05:ef:15:d2:46:
7b:c4:20:48:1d:05:67:04:99:b6:1c:ff:ca:31:5f:
20:8c:43:12:db:a9:0e:d4:3d:b4:a7:ee:ab:27:21:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:72:16:A2:B7:3A:FF:8F:04:D9:27:EA:5D:0D:B8:D0:44:D3:B8
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/7ORyFqK3Ov-PBNkn6l0NuNBE07g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
45.146.12.0/22
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
65:15:3c:a4:6e:db:55:d7:e0:5a:9d:77:a6:f7:e7:b2:59:65:
de:2b:6c:f4:09:5b:4c:7f:20:a7:32:97:b9:c9:72:51:78:b0:
c8:4f:73:8e:b2:3f:cc:a4:85:92:55:83:ab:16:4f:df:4b:68:
c1:89:f3:96:bb:e4:8c:1a:07:aa:4f:ce:f7:d2:cf:41:9c:16:
e3:f8:df:24:b7:2c:76:3d:9d:dd:3d:06:23:6e:99:02:9b:fa:
ac:d3:0f:43:c4:5d:c1:40:d5:92:53:6a:78:33:f7:ef:7a:e9:
93:43:64:cb:ef:44:2c:b1:49:d0:e4:3a:78:4d:31:3d:d5:0c:
d4:c6:f0:f2:51:f4:57:6c:b5:db:ab:7b:d7:bb:6e:02:c0:78:
b2:9f:c9:4e:3f:e9:a0:39:eb:c9:6f:94:08:6d:a5:4f:2c:11:
82:2d:bb:7a:a6:31:41:a5:9a:c6:2a:ff:5a:29:68:22:75:1d:
06:14:aa:7d:a6:31:12:23:d8:27:33:1c:b7:42:7a:f2:a2:63:
30:58:19:4b:6c:f0:55:b1:9a:ab:ad:2c:f9:fe:29:1a:f3:c8:
8b:3a:4a:47:4d:f4:5f:d4:e1:20:f9:37:ff:e0:42:f4:fc:bb:
3d:86:f3:33:8e:8a:7e:92:29:8f:c8:4d:69:40:b2:d2:74:22:
01:de:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:31:48 2024 by rpki-client on console-ams.rpki-client.org