Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/f4B0Now-8WKomxSSfK2n5CuxiKo.roa
File: f4B0Now-8WKomxSSfK2n5CuxiKo.roa (raw, json)
Hash identifier: 6uZS8bHTSW+CcF8rSxr2dfM7D6YBvzRh8BQBPmjThXg=
Subject key identifier: 7F:80:74:36:8C:3E:F1:62:A8:9B:14:92:7C:AD:A7:E4:2B:B1:88:AA
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 018CC493340AA0C83229DDC4667FE49B14BD
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/f4B0Now-8WKomxSSfK2n5CuxiKo.roa
Signing time: Mon 01 Jan 2024 10:30:30 +0000
ROA not before: Mon 01 Jan 2024 10:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196954
IP address blocks: 185.63.124.0/22 maxlen: 22
130.255.120.0/21 maxlen: 21
2a04:9740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:34:0a:a0:c8:32:29:dd:c4:66:7f:e4:9b:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Jan 1 10:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f8074368c3ef162a89b14927cada7e42bb188aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:c9:71:51:53:a8:b7:12:31:c3:bc:0a:d5:
81:f6:a2:09:98:30:e2:7e:59:a2:ba:63:d1:b4:25:
08:3b:8c:e9:7b:c2:ef:0a:c6:92:c2:25:df:c8:45:
b4:c9:93:ff:e0:db:70:f1:64:45:76:a5:76:c8:1b:
80:04:0a:60:dd:c9:d2:f0:4b:26:78:bc:b3:80:1a:
ee:23:8e:67:f7:ff:9c:15:e4:74:9e:5d:4c:42:a1:
29:0d:09:d0:0a:fd:b8:78:08:07:ea:27:f1:2c:4e:
5f:37:9c:23:68:68:47:72:e9:57:32:69:18:1d:2b:
24:78:cc:8d:18:d2:b2:09:e2:9d:da:73:e7:0d:d3:
b1:49:ca:0b:40:de:c2:cb:3f:b5:de:52:4e:d4:3b:
8d:37:73:20:22:ab:29:6f:7d:2b:f8:e9:2d:a8:21:
fb:c1:08:dc:81:d0:b1:f5:d0:61:85:b2:b9:00:10:
f1:b2:67:18:1b:06:7f:12:38:07:f1:c5:95:4f:b1:
c0:06:34:9e:dc:14:98:48:2f:b2:f5:d2:54:57:57:
44:5e:d2:4f:27:10:17:53:3b:86:f4:40:90:bc:73:
10:86:f3:69:00:19:fa:e6:7e:6b:31:65:2e:ec:31:
4c:51:9b:6a:c3:d4:bb:3c:64:09:fa:aa:30:35:ab:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:80:74:36:8C:3E:F1:62:A8:9B:14:92:7C:AD:A7:E4:2B:B1:88:AA
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/f4B0Now-8WKomxSSfK2n5CuxiKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.120.0/21
185.63.124.0/22
IPv6:
2a04:9740::/29
Signature Algorithm: sha256WithRSAEncryption
3c:52:0d:68:61:2b:54:37:7f:29:21:67:62:63:78:4c:9e:2f:
5b:39:d6:2a:57:d3:da:9e:fd:01:2f:b9:f9:a1:60:fb:c1:ca:
5f:67:9e:df:7d:2f:9a:94:e7:be:49:cc:9e:7b:46:aa:8e:86:
05:f6:78:2b:6a:f8:f3:1d:ba:40:d2:9f:38:86:0d:36:19:fb:
6e:81:22:47:1b:dd:ce:d9:33:fe:ba:ad:54:f1:df:c4:84:4f:
6d:ce:a7:f7:00:27:ae:41:a3:57:c0:ba:c8:1f:9d:9e:af:0d:
d5:8e:9f:41:bc:4c:fb:f5:c8:49:3b:a0:69:c5:55:07:ff:4b:
91:0b:df:af:27:05:a9:0d:05:fa:c3:db:03:3a:59:77:ad:39:
7d:40:5f:de:27:5a:67:6d:69:90:57:b1:a9:1e:34:35:58:6c:
50:0a:3d:b9:60:ee:a5:fc:6c:a2:10:5d:4e:e8:fd:47:52:ec:
29:15:7c:72:23:17:6a:c1:7c:d0:d4:55:d4:b5:61:8e:c2:d3:
db:bf:d5:11:ee:c0:68:77:cf:22:cf:2f:4c:3c:a3:48:3e:5c:
cc:8f:3e:e7:d4:82:cd:89:f2:f0:57:fa:bd:90:f6:8f:b7:bf:
ef:9b:39:6f:5d:64:67:a5:38:1d:7d:c6:41:f7:8e:3a:56:f1:
10:24:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:28:56 2024 by rpki-client on console-ams.rpki-client.org