Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/7QZo8tEe35gWFaaSSVkHJ_4nTFA.roa
File: 7QZo8tEe35gWFaaSSVkHJ_4nTFA.roa (raw, json)
Hash identifier: d9AGA1Ge4+R51ZygUP22uNGxPgADTNWsqXkj6o0+rHY=
Subject key identifier: ED:06:68:F2:D1:1E:DF:98:16:15:A6:92:49:59:07:27:FE:27:4C:50
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 018CC2DB2250CE35CC6A3B97BB31049C789B
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/7QZo8tEe35gWFaaSSVkHJ_4nTFA.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211559
IP address blocks: 213.178.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:22:50:ce:35:cc:6a:3b:97:bb:31:04:9c:78:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed0668f2d11edf981615a69249590727fe274c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:96:34:ec:fe:5f:19:0f:b7:ff:b2:92:66:
fd:16:dc:00:8f:aa:d6:d7:96:f4:98:75:b0:fb:00:
2f:57:f7:e7:94:60:97:f2:04:43:66:8e:fe:0e:4e:
c0:e7:79:1b:07:20:7e:d2:a9:c3:c7:98:50:99:95:
b6:1a:8f:1c:3a:24:fb:4c:f9:f7:d8:66:8c:e4:8f:
24:f6:82:0c:92:a9:80:b1:23:a1:2e:3f:9f:5b:04:
18:ba:37:6c:cd:1a:a9:be:7c:e6:db:7a:2a:c0:12:
f5:ab:5f:ac:11:99:f8:a0:e2:50:b8:d2:e5:29:69:
7a:d5:c6:f9:e2:bb:fc:ef:d8:8b:29:eb:6f:3d:59:
a3:3f:78:02:bf:b5:06:bf:4b:fd:27:cb:24:5a:78:
43:71:c5:f0:68:f4:24:03:cc:a5:26:f4:7b:3b:1e:
27:53:f5:3f:9f:cf:bc:4f:7c:a7:87:81:d7:93:4e:
a8:64:a5:91:60:e7:e6:90:d4:03:fb:d5:7f:74:cf:
87:b6:23:fd:2e:6b:d5:1b:c7:26:d8:b0:a5:3d:ac:
1f:a1:ac:ea:59:b0:d6:23:2f:92:e5:86:e3:25:a8:
13:2a:d3:55:fc:cf:b1:6e:c4:f9:52:c7:60:74:2d:
fa:53:cb:35:25:9c:86:c5:4f:aa:dd:16:7e:5a:f7:
8a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:68:F2:D1:1E:DF:98:16:15:A6:92:49:59:07:27:FE:27:4C:50
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/7QZo8tEe35gWFaaSSVkHJ_4nTFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.178.136.0/22
Signature Algorithm: sha256WithRSAEncryption
55:9e:ab:66:23:72:9c:c9:10:02:52:ba:d6:49:8c:f7:8a:55:
50:d3:a9:bb:53:67:0c:c3:44:5c:52:38:9b:5c:36:07:f4:65:
8e:95:05:70:b7:ee:65:2b:ce:a0:37:63:f4:43:8a:38:f2:8d:
7c:8b:b4:f5:0e:e6:c2:ed:41:12:bc:9b:3f:47:92:31:3f:f8:
82:93:11:ce:0c:a9:f5:dc:e4:00:47:06:24:de:28:ed:db:0d:
ff:5b:2d:c9:a2:2d:92:40:be:c0:ca:cb:69:51:1a:63:71:95:
9f:60:f0:4f:d5:27:3a:5a:b2:26:2e:8e:58:32:ee:30:a9:06:
99:a0:b1:be:1a:82:70:c0:62:45:3e:a9:cd:65:c3:b1:e4:d0:
d4:01:f7:4e:76:c9:94:bd:ed:c8:d3:1a:85:8c:d1:12:7a:77:
ed:70:83:ff:ef:b2:e1:c5:13:6e:b7:5c:60:a1:42:a6:60:55:
74:e7:9b:5d:35:89:cb:a8:b7:c6:8e:d1:9c:ad:fa:da:1d:cb:
b3:85:86:32:aa:9e:7c:81:be:58:86:c0:7b:a6:17:f0:07:d9:
26:74:a4:91:8c:08:a2:c7:df:60:b3:a4:f2:5b:28:eb:39:72:
57:44:d0:14:37:77:75:ab:24:07:99:5b:1b:68:d6:7f:98:5d:
2a:56:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:29:52 2024 by rpki-client on console-fra.rpki-client.org