Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/K7jzUvC5N0aEXC0ZMxtms5HoXFU.roa
File: K7jzUvC5N0aEXC0ZMxtms5HoXFU.roa (raw, json)
Hash identifier: VcWAV+uhTmz80ZWwVY2rT6PaC/IZY3Ld9407lh3/vYw=
Subject key identifier: 2B:B8:F3:52:F0:B9:37:46:84:5C:2D:19:33:1B:66:B3:91:E8:5C:55
Certificate issuer: /CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Certificate serial: 018CFA7944B8B1554B6E6C37DD452BFFFD89
Authority key identifier: 7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/K7jzUvC5N0aEXC0ZMxtms5HoXFU.roa
Signing time: Thu 11 Jan 2024 21:41:40 +0000
ROA not before: Thu 11 Jan 2024 21:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20853
IP address blocks: 91.224.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:79:44:b8:b1:55:4b:6e:6c:37:dd:45:2b:ff:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a10ee228073328a2c2081cbb2a96cd1264dbef1
Validity
Not Before: Jan 11 21:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bb8f352f0b93746845c2d19331b66b391e85c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:50:9c:f4:e2:46:60:5b:e3:74:4a:c5:a9:f2:
50:d0:31:9f:cc:13:bd:b2:1a:1c:0c:31:b0:5f:57:
be:19:a2:52:6f:21:55:b7:b1:df:e9:7d:46:50:51:
c3:ad:82:14:00:64:7e:d6:55:b9:e3:0b:f0:c8:57:
e8:02:8c:c8:ba:89:cc:d7:a1:b6:65:dc:b0:bb:b2:
70:06:2a:da:e2:ea:ac:92:48:c9:4c:ff:78:f0:6e:
3d:e5:5f:c5:ed:f7:82:2b:33:82:bc:0c:77:30:a9:
47:6b:ad:c2:a0:9a:3c:e9:b4:aa:ef:14:dc:2b:c3:
34:f5:ea:1c:d5:c7:30:bc:6b:93:54:02:6b:56:d5:
ac:26:2e:a9:5b:47:3d:fb:81:cf:fa:8f:7f:40:3e:
81:bc:94:68:c1:9e:d9:94:77:8d:22:d7:39:78:08:
8f:71:84:55:f4:86:04:51:01:1c:68:1f:00:a0:44:
fd:ad:ee:47:b7:59:ca:d6:f7:79:d1:f0:06:00:84:
81:4a:61:d9:2b:40:53:16:6d:c4:c9:1d:22:30:bb:
5d:6d:20:8e:af:93:3e:25:1a:88:41:f0:09:b4:13:
e7:aa:8b:b3:22:f8:cf:6f:ec:05:cb:be:22:a8:ce:
d2:e4:72:e5:e4:02:04:a2:32:da:02:5e:3e:d1:34:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:F3:52:F0:B9:37:46:84:5C:2D:19:33:1B:66:B3:91:E8:5C:55
X509v3 Authority Key Identifier:
keyid:7A:10:EE:22:80:73:32:8A:2C:20:81:CB:B2:A9:6C:D1:26:4D:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehDuIoBzMoosIIHLsqls0SZNvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/K7jzUvC5N0aEXC0ZMxtms5HoXFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb1827-a7e9-45c8-b643-76e07a577e4d/1/ehDuIoBzMoosIIHLsqls0SZNvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:23:42:cc:c6:d6:3f:d4:9d:3e:2d:f5:47:a7:84:9b:1c:a1:
a7:be:d0:e8:5d:ed:f2:e7:87:cc:9b:86:c2:57:9c:f7:e1:4d:
dc:9a:3b:93:2a:0a:1c:76:4f:0b:93:ec:fb:88:d1:01:08:c1:
1c:63:fd:e6:37:c7:6e:2e:e4:9b:7e:18:86:5d:76:ff:3d:f1:
d6:16:4d:24:c8:63:66:1d:6d:4b:c5:17:5a:99:a2:10:3f:31:
b4:49:ca:3b:7c:7c:0b:a6:a8:1c:52:55:e1:2d:75:fb:b2:70:
e0:01:b5:bc:8d:26:ea:f9:60:ea:69:73:d9:74:96:9c:8a:ac:
cc:37:8e:3a:a5:e1:aa:be:fe:a4:08:ca:c9:bb:9c:8f:5e:2f:
21:a8:42:91:f7:d0:27:8f:f7:ef:5e:b3:31:0e:e3:64:17:98:
5d:ec:c5:db:ec:4b:2f:31:25:3c:ff:ab:b1:8b:91:49:0d:9f:
52:82:34:3b:ac:35:1e:74:3c:a8:0b:73:53:9a:6c:67:45:af:
0b:51:d1:72:17:d9:77:91:0f:eb:51:c5:bc:77:f2:21:5e:61:
d3:40:c9:dc:47:89:d2:2c:09:d1:77:58:8e:82:0d:a0:bf:50:
43:59:01:6d:fd:a3:1a:27:a2:64:ab:dd:37:6e:4b:0e:89:91:
05:bd:a4:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz6eUS4sVVLbmw33UUr//2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTBlZTIyODA3MzMyOGEyYzIwODFjYmIyYTk2Y2QxMjY0
ZGJlZjEwHhcNMjQwMTExMjE0MTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmI4ZjM1MmYwYjkzNzQ2ODQ1YzJkMTkzMzFiNjZiMzkxZTg1YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91Cc9OJGYFvjdErFqfJQ0DGfzBO9
shocDDGwX1e+GaJSbyFVt7Hf6X1GUFHDrYIUAGR+1lW54wvwyFfoAozIuonM16G2
Zdywu7JwBira4uqskkjJTP948G495V/F7feCKzOCvAx3MKlHa63CoJo86bSq7xTc
K8M09eoc1ccwvGuTVAJrVtWsJi6pW0c9+4HP+o9/QD6BvJRowZ7ZlHeNItc5eAiP
cYRV9IYEUQEcaB8AoET9re5Ht1nK1vd50fAGAISBSmHZK0BTFm3EyR0iMLtdbSCO
r5M+JRqIQfAJtBPnqouzIvjPb+wFy74iqM7S5HLl5AIEojLaAl4+0TSz1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCu481LwuTdGhFwtGTMbZrOR6FxVMB8GA1UdIwQY
MBaAFHoQ7iKAczKKLCCBy7KpbNEmTb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMt
NzZlMDdhNTc3ZTRkLzEvSzdqelV2QzVOMGFFWEMwWk14dG1zNUhvWEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjE4MjctYTdlOS00NWM4LWI2NDMtNzZlMDdhNTc3ZTRk
LzEvZWhEdUlvQnpNb29zSUlITHNxbHMwU1pOdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+B1MA0G
CSqGSIb3DQEBCwUAA4IBAQBbI0LMxtY/1J0+LfVHp4SbHKGnvtDoXe3y54fMm4bC
V5z34U3cmjuTKgocdk8Lk+z7iNEBCMEcY/3mN8duLuSbfhiGXXb/PfHWFk0kyGNm
HW1LxRdamaIQPzG0Sco7fHwLpqgcUlXhLXX7snDgAbW8jSbq+WDqaXPZdJaciqzM
N446peGqvv6kCMrJu5yPXi8hqEKR99Anj/fvXrMxDuNkF5hd7MXb7EsvMSU8/6ux
i5FJDZ9SgjQ7rDUedDyoC3NTmmxnRa8LUdFyF9l3kQ/rUcW8d/IhXmHTQMncR4nS
LAnRd1iOgg2gv1BDWQFt/aMaJ6Jkq903bksOiZEFvaTG
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:53:27 2024 by rpki-client on console-ams.rpki-client.org