Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7hZVw1G1Ns_ak1qbPzf3yzXbTrQ.roa
File: 7hZVw1G1Ns_ak1qbPzf3yzXbTrQ.roa (raw, json)
Hash identifier: N8EIakINZS7Hvc07aLEfOOEfaEchNF5hROgXzqYLyC0=
Subject key identifier: EE:16:55:C3:51:B5:36:CF:DA:93:5A:9B:3F:37:F7:CB:35:DB:4E:B4
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC795532F851DC1FF1E78BC6C1BED0F9E
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7hZVw1G1Ns_ak1qbPzf3yzXbTrQ.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50275
IP address blocks: 188.211.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:53:2f:85:1d:c1:ff:1e:78:bc:6c:1b:ed:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1655c351b536cfda935a9b3f37f7cb35db4eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:75:3c:9b:4e:43:00:47:30:69:dc:bb:6c:
06:e6:73:2b:d3:9f:81:e9:0c:6b:9f:e7:99:9f:42:
a9:b7:14:2b:40:af:ef:61:90:0b:7a:c1:c2:db:5c:
23:07:98:c1:b5:f7:e9:e0:54:b8:77:62:7f:ce:11:
40:5c:ce:b2:49:e9:e8:a4:95:a4:4b:3d:8e:a6:18:
7a:b3:a1:28:3c:32:ff:a7:eb:a3:b9:33:b6:6b:b9:
1f:41:d9:24:d0:24:0c:ae:b4:c2:43:99:24:cc:47:
5a:bc:4c:36:42:26:a3:b7:47:53:3c:7a:78:42:f4:
bc:29:38:c1:98:65:4b:3d:77:d0:62:3f:02:c2:3c:
85:6a:6a:e7:4f:0b:86:12:f1:ef:9a:c2:13:ec:f8:
11:54:72:e0:e4:32:75:5d:b9:48:28:da:e7:e9:30:
88:d1:54:2d:c3:10:16:b7:88:37:ec:14:8a:d7:57:
90:5e:d2:b9:93:90:1f:18:b4:a3:31:a1:74:ee:15:
2c:55:67:09:40:be:58:36:a4:43:1e:df:8d:0e:0f:
1b:69:60:0a:51:78:10:0c:f0:9b:74:2c:e0:a7:55:
29:51:31:a7:f4:18:f1:43:e1:d5:1f:ae:b3:3a:dd:
61:a7:c8:0c:f4:9f:0f:5c:b8:c6:6c:20:4c:4d:73:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:55:C3:51:B5:36:CF:DA:93:5A:9B:3F:37:F7:CB:35:DB:4E:B4
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/7hZVw1G1Ns_ak1qbPzf3yzXbTrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.211.232.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2e:22:28:45:8f:eb:0e:92:7c:12:0d:86:b3:ab:48:71:31:
0a:14:6c:b2:5d:a7:25:dd:53:22:f5:9d:85:98:95:2a:28:31:
74:40:9f:69:7c:87:42:82:92:44:cf:39:9e:c7:f3:91:41:46:
df:b7:f2:3e:c6:ed:7b:83:6e:b6:f9:84:56:ce:ef:3f:e6:a3:
e3:96:85:72:7e:90:b9:e7:95:b7:e1:78:1e:2d:b4:79:d1:69:
01:7a:d6:b3:2f:34:c4:34:f6:2f:1b:32:42:85:73:41:e2:45:
3d:69:11:ef:c5:36:12:40:8b:a3:dd:ed:01:2d:84:7e:78:11:
2b:eb:8d:16:43:f3:6d:26:4d:a2:c0:19:7e:a5:c3:28:da:97:
18:6f:f0:20:b3:4f:2f:d5:8c:cb:3e:c4:fe:81:f5:d7:16:29:
7b:a3:99:f3:3a:db:1c:aa:22:7b:6a:0f:ac:c4:63:93:94:c1:
1d:b4:6e:5e:41:e6:49:0d:bc:58:a1:27:b1:4e:11:83:74:2e:
67:95:f8:9e:bf:8e:44:30:b7:fb:8e:43:da:9e:08:31:90:87:
13:05:06:cb:fc:35:5b:ba:c7:f8:45:61:7f:f9:f2:86:32:75:
1d:80:a0:a4:e5:9b:66:e3:38:dc:ed:ff:96:63:9c:79:eb:e2:
6b:40:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:16:38 2024 by rpki-client on console-fra.rpki-client.org