Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/7pW0xcLwqI_JhqkW35sSyU6Qdew.roa
File: 7pW0xcLwqI_JhqkW35sSyU6Qdew.roa (raw, json)
Hash identifier: zkSJSU9vNiH97NFOveoyVJKAFkKKOoKebedeLrPmqLI=
Subject key identifier: EE:95:B4:C5:C2:F0:A8:8F:C9:86:A9:16:DF:9B:12:C9:4E:90:75:EC
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 018CC72606B51990674E636420AD9AC168C2
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/7pW0xcLwqI_JhqkW35sSyU6Qdew.roa
Signing time: Mon 01 Jan 2024 22:30:07 +0000
ROA not before: Mon 01 Jan 2024 22:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 195.142.244.0/24 maxlen: 24
195.142.245.0/24 maxlen: 24
195.142.246.0/24 maxlen: 24
195.142.247.0/24 maxlen: 24
195.142.200.0/24 maxlen: 24
195.142.201.0/24 maxlen: 24
195.142.202.0/24 maxlen: 24
195.142.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:06:b5:19:90:67:4e:63:64:20:ad:9a:c1:68:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Jan 1 22:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee95b4c5c2f0a88fc986a916df9b12c94e9075ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:df:49:68:fc:b5:b5:bc:a8:81:de:23:bc:
8d:c9:d1:3f:d5:11:c7:65:5c:70:97:44:31:a9:c0:
9d:69:3e:36:d9:ff:6a:81:67:d2:0c:ca:9c:83:df:
38:8e:d6:27:65:bc:c4:46:27:9a:fc:0d:21:08:7d:
61:3d:4e:7a:7b:65:98:82:bc:3d:b7:8a:4d:2b:fd:
86:ce:bf:78:6a:88:cc:56:77:6d:fa:3e:a8:71:d9:
8f:b3:07:a4:78:a6:0b:ff:c4:17:96:6b:d9:04:21:
a9:e9:8b:ab:99:65:2e:e9:f3:28:26:ef:fd:25:35:
82:4a:f1:d4:5c:6a:8e:aa:a8:37:78:96:5e:4d:e9:
b1:48:02:e4:2f:d0:87:59:58:55:6a:3f:fb:4d:8e:
33:4b:1d:15:f7:c3:7a:8b:9b:15:f1:6d:cd:87:bc:
06:a5:d2:ef:a8:bc:bf:d7:90:5b:99:82:46:d0:16:
4c:62:93:c3:55:f8:bd:76:0d:57:dc:86:e9:fc:14:
47:66:d6:dc:3c:c8:29:b0:91:b4:13:84:bf:ef:76:
1f:47:00:a5:49:a4:dd:3b:1b:66:d2:b9:6d:d2:31:
2d:ea:e6:c9:08:b5:91:ad:af:f0:c6:46:45:79:39:
4d:cc:73:43:25:09:62:c6:11:95:29:2e:86:f4:a6:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:B4:C5:C2:F0:A8:8F:C9:86:A9:16:DF:9B:12:C9:4E:90:75:EC
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/7pW0xcLwqI_JhqkW35sSyU6Qdew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.142.200.0/22
195.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:37:fd:76:e8:4d:c5:5d:61:b8:5a:da:04:46:f1:86:c3:c6:
1d:87:ae:f8:81:ee:05:81:ab:c5:a8:0b:eb:ca:a5:f1:4a:0d:
2d:5f:44:51:a1:92:47:b0:e0:27:53:0b:ec:66:d4:b9:55:c2:
d2:23:fb:37:7a:61:91:6d:78:a4:d7:f4:c4:56:1e:3e:42:51:
e6:a9:e1:dd:d7:26:eb:20:10:ba:21:35:6a:db:99:0e:6f:1b:
78:85:ac:b6:21:ce:25:80:e2:a5:38:c8:b9:de:29:da:52:47:
90:9b:6b:5a:d9:f0:f5:bc:f5:8d:19:af:e4:e3:c7:e1:5c:8a:
3c:c2:f4:fd:2e:1f:0e:0c:e5:84:33:95:00:1b:28:1d:9c:68:
78:c2:9e:6e:d7:c9:b9:b4:98:68:5d:73:a6:3b:d9:ce:12:b5:
bd:99:46:a1:82:07:60:e2:26:b1:f3:61:82:64:39:81:f8:c9:
a1:1b:52:90:c8:a5:85:0d:80:12:d8:00:81:5e:b1:ea:5a:22:
1d:dd:af:7f:23:48:a6:38:d4:47:b0:49:a6:7a:5e:a1:48:92:
1f:9c:c2:a3:85:5d:b7:8a:59:7a:7d:9f:78:10:79:4e:b4:2b:
7c:b6:c7:59:85:9c:86:fe:ec:19:48:fa:0f:ee:02:c1:d7:0e:
46:10:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 11:05:35 2024 by rpki-client on console-ams.rpki-client.org