Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/ew0FoJ2BoicRxgVvlGXF9Jrxp2A.roa
File: ew0FoJ2BoicRxgVvlGXF9Jrxp2A.roa (raw, json)
Hash identifier: xkP43P7uCklCA6WrmPqYDB0+fucun0VT+Bg6IZrIeXs=
Subject key identifier: 7B:0D:05:A0:9D:81:A2:27:11:C6:05:6F:94:65:C5:F4:9A:F1:A7:60
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 018CC2DB22BC7299FB2B0824E2EFAAD05CEE
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/ew0FoJ2BoicRxgVvlGXF9Jrxp2A.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25773
IP address blocks: 141.226.252.0/22 maxlen: 24
185.139.240.0/22 maxlen: 24
2a07:1980::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:22:bc:72:99:fb:2b:08:24:e2:ef:aa:d0:5c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b0d05a09d81a22711c6056f9465c5f49af1a760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:37:3a:cb:32:21:c9:02:96:95:00:8e:6e:9f:
ad:10:78:47:6e:35:99:3c:1e:47:c6:83:74:38:ac:
cd:91:35:32:8f:f6:70:39:c7:22:cc:d9:c7:a3:04:
1e:6e:04:19:20:a6:98:75:3f:8b:25:04:73:bc:0e:
34:c9:6d:4e:b5:77:c9:e4:4c:c5:d3:1e:2d:cb:b4:
8e:55:ee:7c:07:6b:73:4d:f4:ff:19:7f:4e:40:a7:
20:c4:90:ba:8d:42:88:d1:df:cf:3d:5a:03:c7:0b:
f5:b8:b0:63:8a:f6:29:0f:95:9c:c4:06:8a:91:d9:
6a:1a:6e:db:e8:56:c5:14:55:2e:e2:36:07:4f:d7:
34:cd:4b:e9:b1:9d:b0:f8:9f:19:15:25:cf:88:c2:
4f:d6:4c:50:81:ea:4c:31:be:1d:32:e2:38:27:ce:
fc:80:03:d4:c3:b4:a1:5e:b7:9c:d7:e6:f2:31:85:
f9:3d:23:48:69:31:06:56:93:59:f0:bc:24:0d:c6:
56:72:d4:1c:cb:22:68:7e:a3:e2:31:36:ee:63:f4:
eb:4a:a8:5e:f3:5f:5d:54:7a:12:d9:c1:89:7a:58:
6f:50:11:5c:69:0a:64:4d:1f:e7:05:74:16:5e:76:
cb:87:c1:cf:e4:31:81:07:45:69:da:c5:2f:a1:c4:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:05:A0:9D:81:A2:27:11:C6:05:6F:94:65:C5:F4:9A:F1:A7:60
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/ew0FoJ2BoicRxgVvlGXF9Jrxp2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.252.0/22
185.139.240.0/22
IPv6:
2a07:1980::/29
Signature Algorithm: sha256WithRSAEncryption
ae:c9:c2:75:cc:cc:38:52:61:e3:1e:c1:11:6d:d4:b0:48:c5:
de:ae:f2:aa:d6:41:9e:d8:49:78:2c:85:a0:62:54:b9:02:91:
5a:34:e7:3e:4e:b7:99:15:ce:ec:2f:e8:55:d1:ae:46:1a:12:
1a:f2:79:f2:49:16:05:9c:d3:3a:69:4a:2b:c9:34:fa:bd:8c:
c5:dc:fd:ca:85:5d:4f:a1:ad:ef:02:ac:19:cf:fe:92:c5:d3:
d7:7a:a8:d2:76:54:6b:e2:2b:db:ad:7e:a7:e6:54:13:af:a6:
1e:0a:cd:d1:ac:6f:d1:ab:5d:03:7b:3b:35:a7:32:26:4f:73:
7e:8f:72:04:cf:21:1e:20:f7:5e:69:b1:c0:5d:21:15:cb:fe:
c3:cb:7c:e4:8e:06:95:41:cb:85:4b:0b:81:89:3e:c9:9b:47:
31:00:80:ec:9d:44:ef:0f:0f:ec:2f:81:10:8d:ea:49:23:79:
dd:7c:fa:0d:cc:ef:7d:ba:d4:79:08:7b:b7:c2:ba:f7:b7:3a:
44:84:53:1a:cd:27:3c:05:fe:5c:17:52:0e:34:08:e2:d5:89:
9a:dc:b8:12:ef:31:55:8d:af:03:61:47:5b:23:64:23:d7:35:
4f:9c:85:bf:3c:9a:52:98:05:45:47:54:f0:64:24:47:63:ce:
0d:0e:c2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:17:58 2024 by rpki-client on console-fra.rpki-client.org