Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa
File: 7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa (raw, json)
Hash identifier: SDzGA3Q2FNgDauQKmW2Jv8qW/avp6qEtixhOMX8zOc4=
Subject key identifier: EC:D9:E1:D2:59:8F:E8:65:A2:DD:A3:7D:14:75:BC:2C:83:52:AE:84
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 018CC3495E0934E3FF9CEEAD48D29A2FEA3E
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199791
IP address blocks: 147.111.0.0/18 maxlen: 18
147.111.0.0/16 maxlen: 16
81.175.16.0/22 maxlen: 22
147.111.128.0/18 maxlen: 18
185.45.36.0/22 maxlen: 22
147.111.64.0/18 maxlen: 18
147.111.192.0/18 maxlen: 18
2a01:79e0::/32 maxlen: 32
2a01:79e0:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5e:09:34:e3:ff:9c:ee:ad:48:d2:9a:2f:ea:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecd9e1d2598fe865a2dda37d1475bc2c8352ae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:ad:72:1f:bb:53:db:a5:3c:0f:74:72:c6:
39:1c:b7:54:92:4f:11:e9:db:9c:f1:bd:54:7c:c7:
73:08:75:cc:2f:20:ea:c9:79:1d:fa:d5:da:d7:0e:
a5:bd:83:41:c0:1b:fd:48:b2:96:43:94:7b:5f:1c:
5d:7a:38:e8:0f:4c:dc:a9:e6:04:d9:3f:54:87:1a:
5b:a2:63:62:36:f2:97:b4:c0:1b:60:41:8c:e8:86:
70:17:0f:9e:9f:0a:4a:a9:de:66:2a:8d:c3:28:14:
ba:2b:11:f9:92:d3:81:03:b9:83:68:3a:3f:00:ab:
88:46:f9:61:89:a8:d3:74:e3:b5:b5:37:c1:8d:cf:
b7:b6:88:ed:df:e3:09:73:f6:e0:96:0a:cd:53:b0:
9c:26:51:b8:cf:65:7b:ad:76:f0:31:3b:27:84:39:
58:cb:91:76:b5:3b:2a:e8:e2:f1:bd:e7:22:68:59:
1c:85:0a:1e:09:09:11:08:d3:3b:9b:9d:f1:43:bf:
f9:5c:f0:f7:93:a6:9c:f8:78:d4:13:c8:69:df:60:
bf:e6:05:aa:60:e3:59:a1:bb:08:56:ff:90:21:a4:
cb:70:4e:17:25:63:dc:b5:fb:49:cb:fd:ed:f2:ae:
61:06:15:67:0e:2e:94:44:22:49:ab:ac:99:ad:e4:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D9:E1:D2:59:8F:E8:65:A2:DD:A3:7D:14:75:BC:2C:83:52:AE:84
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/7Nnh0lmP6GWi3aN9FHW8LINSroQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.175.16.0/22
147.111.0.0/16
185.45.36.0/22
IPv6:
2a01:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
89:93:9b:9f:d6:cb:2e:e5:ab:cf:84:60:db:13:f5:14:2c:f8:
88:f9:f2:a7:52:04:d4:87:38:d1:55:82:87:e9:1c:50:f3:a0:
40:4d:54:cc:2f:94:89:b1:86:db:0c:75:b1:9f:97:ec:91:fb:
17:91:a1:20:8b:d2:7c:df:29:fc:e1:5f:97:cb:ac:64:f5:b1:
4c:d1:10:fa:d5:00:70:29:17:c2:df:76:5d:8a:b0:b4:f9:03:
ea:c4:2b:46:a9:75:05:04:c5:fa:b1:fa:9b:dc:05:80:37:be:
1b:89:f1:bb:cb:fc:87:8b:5a:2d:6f:d2:95:71:68:04:36:eb:
dc:9d:f5:66:d4:21:72:ab:bd:19:cb:04:07:2e:2c:41:1f:9b:
16:8b:04:e7:70:ec:0b:6d:b7:2b:b0:c2:70:0d:04:b8:71:5a:
a0:83:bc:8a:e9:54:cd:84:f2:8a:a8:c2:ae:35:70:52:40:a0:
38:3f:a0:cc:71:0a:6d:3e:d8:72:03:58:bf:ae:09:5a:c5:ba:
3f:10:72:d0:7e:28:eb:8e:9b:63:64:0d:a7:fc:a8:fb:83:d4:
d1:9c:8d:a3:6c:bc:99:34:64:b7:9a:06:8c:0e:05:1f:fd:77:
e6:53:da:0c:11:3c:01:f6:99:ee:cb:b2:3c:a4:2b:ff:67:a9:
81:2f:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:51:04 2024 by rpki-client on console-fra.rpki-client.org