Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/7cZ0zQEzUaPgRsLPlfB2zKG6SCU.roa
File: 7cZ0zQEzUaPgRsLPlfB2zKG6SCU.roa (raw, json)
Hash identifier: /Bfl0oNWqGqlZZIMYfnz9CnkAMGWBkt2xp2ybozALyU=
Subject key identifier: ED:C6:74:CD:01:33:51:A3:E0:46:C2:CF:95:F0:76:CC:A1:BA:48:25
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 018EC9F343AF0A3151102ACEA3AA8CC35CE6
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/7cZ0zQEzUaPgRsLPlfB2zKG6SCU.roa
Signing time: Wed 10 Apr 2024 21:39:06 +0000
ROA not before: Wed 10 Apr 2024 21:39:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 188.172.137.0/24 maxlen: 24
188.172.138.0/24 maxlen: 24
2a03:7d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c9:f3:43:af:0a:31:51:10:2a:ce:a3:aa:8c:c3:5c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Apr 10 21:39:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edc674cd013351a3e046c2cf95f076cca1ba4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:bd:0c:cb:0c:17:34:f1:f2:54:9a:9a:15:
49:d0:52:d2:cf:0c:cb:6a:7c:c9:ed:c3:89:48:31:
ee:ed:ef:6d:3b:c8:5a:a9:b0:7c:39:2f:3e:96:63:
df:c4:31:d3:f3:91:18:cf:33:5f:de:ef:62:44:03:
39:9a:43:68:1a:b3:6f:de:78:d4:61:f4:01:d8:2e:
44:1e:97:af:dd:f9:7e:76:a6:09:0a:52:f0:ab:bb:
22:89:82:3f:ae:5e:8e:d1:ae:cf:29:18:ec:46:66:
de:76:e3:69:3a:61:af:df:37:a9:81:23:33:e8:0d:
90:c7:b1:a2:52:3f:db:ad:82:7a:7f:56:d8:85:f1:
83:de:ff:2e:01:41:d7:07:18:1e:bb:f1:2b:71:44:
e9:34:0b:91:39:81:32:8e:17:fe:4a:a4:a7:00:60:
59:53:56:e0:c5:2d:7f:d0:3b:77:88:59:c0:35:9e:
a7:0d:43:1a:82:f1:30:06:ec:f5:b6:a9:0a:dd:f1:
31:9d:f1:8f:41:45:56:33:e1:c9:5f:00:8b:14:60:
48:4f:d9:3c:6f:24:49:06:b9:cb:7c:06:d7:f7:f8:
bb:48:50:c9:2b:bb:7a:83:c8:57:47:61:dd:9b:be:
fb:67:07:04:c0:b9:22:71:40:7b:b1:1d:63:cc:55:
db:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:74:CD:01:33:51:A3:E0:46:C2:CF:95:F0:76:CC:A1:BA:48:25
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/7cZ0zQEzUaPgRsLPlfB2zKG6SCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.137.0-188.172.138.255
IPv6:
2a03:7d40::/32
Signature Algorithm: sha256WithRSAEncryption
37:e6:ee:af:68:d9:a6:e0:a2:c1:d6:34:ae:f5:e4:0e:ef:aa:
16:79:2d:47:f5:38:e9:19:eb:7d:f9:db:64:56:4a:4b:c4:fa:
75:d7:9b:00:b0:29:98:4b:e3:b6:7b:cc:73:da:9b:33:5e:ca:
6f:48:5f:f5:fd:7d:19:de:d6:1a:ec:6a:15:70:eb:dd:95:9f:
05:49:c6:ee:99:d3:ce:07:56:9e:1b:b4:b7:a4:01:33:0a:e0:
10:c6:13:97:24:f1:8a:85:ec:54:b3:2d:e7:6c:fa:86:ee:6c:
de:0b:14:1f:a1:b3:28:de:a6:61:6f:a9:90:53:83:e4:49:ad:
35:13:ec:17:25:60:5d:70:c9:79:a3:9b:5d:89:bd:da:b1:75:
98:71:79:8d:71:29:56:3f:02:17:1a:ba:83:d3:0e:b7:d4:a8:
a8:11:68:17:7f:15:99:fd:d6:61:13:f6:ab:3f:cd:05:8b:41:
02:bb:5c:d7:ec:ef:19:31:41:37:4c:8b:1b:48:46:95:db:2f:
d9:70:4b:33:05:3f:cd:ed:3a:d1:92:04:69:13:f2:c0:64:ec:
45:f7:33:8d:5e:b6:71:a8:e3:24:36:97:1d:ae:1b:46:36:62:
8e:2a:f0:9f:46:fa:ed:23:da:d9:c5:10:a6:a8:de:64:ed:35:
f6:6e:58:91
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAY7J80OvCjFRECrOo6qMw1zmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjQwNDEwMjEzOTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGM2NzRjZDAxMzM1MWEzZTA0NmMyY2Y5NWYwNzZjY2ExYmE0ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXy9DMsMFzTx8lSamhVJ0FLSzwzL
anzJ7cOJSDHu7e9tO8haqbB8OS8+lmPfxDHT85EYzzNf3u9iRAM5mkNoGrNv3njU
YfQB2C5EHpev3fl+dqYJClLwq7siiYI/rl6O0a7PKRjsRmbeduNpOmGv3zepgSMz
6A2Qx7GiUj/brYJ6f1bYhfGD3v8uAUHXBxgeu/ErcUTpNAuROYEyjhf+SqSnAGBZ
U1bgxS1/0Dt3iFnANZ6nDUMagvEwBuz1tqkK3fExnfGPQUVWM+HJXwCLFGBIT9k8
byRJBrnLfAbX9/i7SFDJK7t6g8hXR2Hdm777ZwcEwLkicUB7sR1jzFXbRQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFO3GdM0BM1Gj4EbCz5XwdsyhukglMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvN2NaMHpRRXpVYVBnUnNMUGxmQjJ6S0c2U0NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAC8rIkD
BAC8rIowDQQCAAIwBwMFACoDfUAwDQYJKoZIhvcNAQELBQADggEBADfm7q9o2abg
osHWNK715A7vqhZ5LUf1OOkZ633522RWSkvE+nXXmwCwKZhL47Z7zHPamzNeym9I
X/X9fRne1hrsahVw692VnwVJxu6Z084HVp4btLekATMK4BDGE5ck8YqF7FSzLeds
+obubN4LFB+hsyjepmFvqZBTg+RJrTUT7BclYF1wyXmjm12JvdqxdZhxeY1xKVY/
AhcauoPTDrfUqKgRaBd/FZn91mET9qs/zQWLQQK7XNfs7xkxQTdMixtIRpXbL9lw
SzMFP83tOtGSBGkT8sBk7EX3M41etnGo4yQ2lx2uG0Y2Yo4q8J9G+u0j2tnFEKao
3mTtNfZuWJE=
-----END CERTIFICATE-----
Generated at Thu May 2 01:29:11 2024 by rpki-client on console-ams.rpki-client.org