Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/7hB7cKIYEYsZnEF75zFinyloJ-A.roa
File: 7hB7cKIYEYsZnEF75zFinyloJ-A.roa (raw, json)
Hash identifier: ZxqJrYLvvz9EZv72kmw8TLoOq/FaXUYHJhMDMfGsydE=
Subject key identifier: EE:10:7B:70:A2:18:11:8B:19:9C:41:7B:E7:31:62:9F:29:68:27:E0
Certificate issuer: /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial: 018CC64A18B63D0901C3A615C8E0C9B7F1CD
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/7hB7cKIYEYsZnEF75zFinyloJ-A.roa
Signing time: Mon 01 Jan 2024 18:29:53 +0000
ROA not before: Mon 01 Jan 2024 18:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199080
IP address blocks: 91.198.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:18:b6:3d:09:01:c3:a6:15:c8:e0:c9:b7:f1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Validity
Not Before: Jan 1 18:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee107b70a218118b199c417be731629f296827e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:95:38:63:69:e3:6f:c4:81:e8:ec:0c:0f:
0a:ae:6d:3d:7b:f7:55:64:bd:2b:08:3e:cc:49:8a:
cc:08:29:cd:43:d7:fc:ef:8b:e3:c0:37:be:db:20:
e1:4c:71:2d:bd:87:76:85:97:5c:e3:4b:79:48:54:
2b:e5:ea:09:64:73:a2:12:c3:38:85:5e:89:fb:34:
cc:5a:4f:46:78:d3:7c:b5:fa:c2:20:60:6f:77:21:
ed:60:40:3f:b4:80:af:9b:ba:2d:28:a8:60:d1:6d:
58:ad:81:71:78:3a:a1:1a:44:01:e9:05:cd:2c:0e:
40:ba:c8:3f:79:78:f1:30:64:22:43:d6:56:30:c0:
70:87:0c:a5:71:88:d8:c7:fb:6e:df:38:db:02:dd:
11:7e:a5:c3:c7:03:c1:41:56:92:ee:90:39:a8:4a:
d9:72:ae:96:ac:47:19:7c:2a:b0:7d:08:1f:5a:32:
9a:d1:ef:79:ac:09:1e:c7:15:19:54:29:01:29:b4:
07:01:96:99:14:ea:23:08:3e:2f:82:2b:09:ca:a7:
d4:85:c8:93:4d:98:5d:61:72:07:17:a8:4c:11:28:
01:2a:be:0d:bc:98:e5:83:14:cf:7c:61:39:16:a5:
68:19:12:6b:21:49:2e:59:b0:95:63:49:a3:c6:a1:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:10:7B:70:A2:18:11:8B:19:9C:41:7B:E7:31:62:9F:29:68:27:E0
X509v3 Authority Key Identifier:
keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/7hB7cKIYEYsZnEF75zFinyloJ-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f5:84:3c:c9:b0:38:3a:06:9f:74:03:51:7c:c4:fa:19:cf:
69:b6:2e:03:b1:4c:e3:77:28:75:29:48:47:07:0d:ee:e2:ea:
5c:d3:c3:c2:a5:fc:b2:43:c5:ce:af:75:2e:cc:70:4f:71:db:
0c:05:31:b0:c1:b1:1d:19:b5:24:fe:8d:49:74:c6:f1:c9:c0:
fe:4e:40:d4:52:fb:96:fd:d7:82:c9:6b:ca:e9:c3:7e:7c:af:
ad:cd:6a:de:fb:46:a3:d0:04:93:fb:01:a5:e9:79:28:92:37:
45:0f:c4:6e:e8:0e:a8:8c:38:4b:64:30:b5:fc:8f:e5:e2:97:
ef:fb:71:ec:23:96:2b:49:65:01:47:8a:d1:d3:ce:56:14:92:
8a:9f:d4:d7:0f:d6:44:d7:24:98:9d:83:60:a9:0b:8b:a1:61:
1e:e0:c0:46:33:2b:a8:30:fb:62:6e:12:7b:c8:b3:46:03:71:
9f:89:d8:fc:bb:d0:72:c0:7c:e6:b5:0c:64:31:d6:08:94:61:
6f:01:f4:f4:c4:fb:c4:b1:98:94:8c:93:cd:75:41:cf:95:87:
e3:0f:7b:af:18:93:37:4b:76:fb:4e:64:fd:8c:65:37:db:fe:
6b:ab:95:e0:82:86:00:a4:61:71:a2:34:a1:cc:2b:87:53:20:
58:b6:94:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:29 2024 by rpki-client on console-fra.rpki-client.org