Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/fBP3u2b2Ou9cS2oKXv_3pFzi2F0.roa
File: fBP3u2b2Ou9cS2oKXv_3pFzi2F0.roa (raw, json)
Hash identifier: cTtyDE4HreL1Xspr5RuIgt7Mz3FEir+JgXGIbh1Rulw=
Subject key identifier: 7C:13:F7:BB:66:F6:3A:EF:5C:4B:6A:0A:5E:FF:F7:A4:5C:E2:D8:5D
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 018CCA9A14DD1D1F8542204CE672664DA15B
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/fBP3u2b2Ou9cS2oKXv_3pFzi2F0.roa
Signing time: Tue 02 Jan 2024 14:35:44 +0000
ROA not before: Tue 02 Jan 2024 14:35:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60800
IP address blocks: 185.181.116.0/22 maxlen: 24
91.197.228.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:14:dd:1d:1f:85:42:20:4c:e6:72:66:4d:a1:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jan 2 14:35:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c13f7bb66f63aef5c4b6a0a5efff7a45ce2d85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:42:04:4c:0c:d1:3b:b7:71:5a:27:e0:d0:
11:56:e9:b0:fc:78:5b:71:d4:8e:c7:74:40:10:4b:
8a:60:fb:b5:2c:aa:cb:64:12:bb:cd:db:74:9c:21:
67:bf:a9:52:6a:49:c4:df:b2:cb:4e:1a:5d:2e:16:
96:96:af:13:a9:8a:42:84:c0:3e:ff:e4:ca:ba:e8:
9c:26:2f:d1:d2:8d:06:ac:39:c6:7a:0d:25:9c:b4:
80:b6:19:ba:72:a4:71:c1:ef:2b:9d:42:41:3d:fe:
56:1e:e6:63:4f:9b:0f:d7:76:69:79:f7:aa:11:8f:
27:89:3e:b1:0f:a9:06:f9:a6:1e:52:ab:3c:61:87:
d0:09:11:54:dc:61:15:f0:97:7e:2b:53:9e:31:6b:
70:3f:0d:08:1a:ed:75:dd:41:52:23:d8:5a:b6:94:
e2:b2:3a:f6:77:34:47:ae:65:1f:7e:f9:8e:20:db:
83:31:5d:64:2a:4c:b8:ca:5f:2b:0a:fc:25:a7:2f:
2a:ea:97:52:92:6f:eb:94:a2:e4:c2:03:95:07:ef:
1a:90:e0:c8:bd:bd:b0:f7:75:38:09:5e:6f:24:57:
2c:7c:cd:65:d9:0e:ff:db:c3:c0:a4:42:a9:5e:48:
4f:61:7e:08:e1:28:aa:92:d9:2d:17:c5:5f:c5:95:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:F7:BB:66:F6:3A:EF:5C:4B:6A:0A:5E:FF:F7:A4:5C:E2:D8:5D
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/fBP3u2b2Ou9cS2oKXv_3pFzi2F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
78:da:74:99:0a:8a:c9:f3:bb:8a:80:f9:d5:9f:4b:ec:8f:ed:
67:a4:fa:8f:01:c2:f0:b4:a1:6e:4d:e9:ff:2d:f0:73:b7:7a:
7d:10:d6:3e:85:f0:34:15:dd:7e:99:51:a5:3f:4d:e5:04:44:
7d:68:b7:94:b3:78:e5:eb:cb:e7:f6:17:8d:6d:a3:ef:4b:04:
15:81:7c:01:42:ee:c1:ee:09:01:20:19:16:09:c4:e8:72:cf:
8e:6d:2d:52:ec:44:3e:ca:70:cf:22:82:9b:ca:fc:55:8b:71:
ee:87:1f:4a:b4:ff:59:42:af:6b:a1:e2:39:97:c2:92:f6:68:
26:ae:6a:e9:63:36:db:f9:b4:a2:5f:48:1a:31:bf:d1:1c:fb:
cd:8e:c0:8a:95:ee:24:9b:23:97:ec:19:9f:8d:c0:0a:d9:4d:
09:ca:5e:ff:cb:3f:b0:bd:09:de:1d:4b:63:ab:04:0b:94:9b:
67:61:b5:f0:b3:a7:9f:6a:84:e7:82:e8:e8:1d:8c:ea:f1:46:
18:43:45:28:73:99:50:db:5b:50:2d:b3:b6:e7:6a:f1:07:43:
58:9e:6a:e4:99:dd:ac:8b:ea:ec:10:5f:95:c2:5b:b6:b6:c1:
af:b5:05:b5:4c:60:62:eb:2b:03:79:cd:6a:c6:8c:f8:98:90:
54:64:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:37:01 2024 by rpki-client on console-ams.rpki-client.org