Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/7fv-TVZIn1dg7cNRrzwayFk2vCQ.roa
File: 7fv-TVZIn1dg7cNRrzwayFk2vCQ.roa (raw, json)
Hash identifier: 9WV/aPaaWF4jeMxAxtuDKUmGShMLWqAq3nfLkanG30U=
Subject key identifier: ED:FB:FE:4D:56:48:9F:57:60:ED:C3:51:AF:3C:1A:C8:59:36:BC:24
Certificate issuer: /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial: 018CC86F941F98EA1AF423D41DE6D57EB5FC
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/7fv-TVZIn1dg7cNRrzwayFk2vCQ.roa
Signing time: Tue 02 Jan 2024 04:30:04 +0000
ROA not before: Tue 02 Jan 2024 04:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59766
IP address blocks: 185.51.168.0/22 maxlen: 22
89.148.128.0/18 maxlen: 18
62.69.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 22:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:94:1f:98:ea:1a:f4:23:d4:1d:e6:d5:7e:b5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Validity
Not Before: Jan 2 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edfbfe4d56489f5760edc351af3c1ac85936bc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:ee:7c:48:e0:a8:ba:2d:2a:bb:15:2d:f3:
17:9e:64:59:da:e0:e9:5d:02:f1:ad:9e:da:c6:ba:
4e:dd:d8:b4:f8:14:35:16:b9:d3:9c:dd:ae:61:95:
78:a5:ee:7f:a5:53:da:5f:2a:bc:7a:53:39:97:7e:
04:63:51:8d:60:fe:0a:bc:3b:9c:e6:28:cd:2d:90:
f3:ca:6b:95:e7:7c:61:a4:7c:86:21:77:b4:b9:07:
cc:88:1a:5b:c9:5a:b8:c0:90:9d:89:b7:11:0f:89:
cc:1a:2d:d7:ab:8f:d2:6d:3d:50:be:0c:af:ea:24:
78:75:a7:3a:98:40:e9:5a:a3:9e:3a:77:91:9d:e3:
a0:31:fc:9b:87:5e:b9:52:0a:eb:40:94:df:84:1a:
97:49:40:54:06:f4:48:db:6b:9e:02:06:57:4f:c8:
3e:e5:fd:db:17:5b:43:de:4f:b9:8a:99:1a:3a:5e:
e7:10:e3:1e:47:97:4d:e2:be:c0:fe:ff:23:44:21:
4c:0e:d6:e2:d4:ca:89:8e:ae:39:2f:84:bf:94:86:
1b:a2:22:86:5c:ef:96:b7:b4:7e:6c:01:97:0e:bf:
e8:b4:d1:a7:3f:1f:3f:2d:48:84:85:95:e0:d3:f5:
c2:c1:26:53:bd:8f:8d:c9:a9:71:e6:9e:39:83:a4:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:FE:4D:56:48:9F:57:60:ED:C3:51:AF:3C:1A:C8:59:36:BC:24
X509v3 Authority Key Identifier:
keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/7fv-TVZIn1dg7cNRrzwayFk2vCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.69.128.0/21
89.148.128.0/18
185.51.168.0/22
Signature Algorithm: sha256WithRSAEncryption
52:2a:98:b9:6c:24:d4:92:4a:7e:73:9e:e4:38:ab:cc:b9:45:
91:7e:03:2d:87:49:54:94:48:4d:84:82:cb:2c:47:91:20:d4:
77:5c:66:cb:df:54:85:93:61:ef:cf:9a:48:d2:f2:7c:2a:4d:
12:ad:73:71:93:3d:2d:19:6b:21:c8:93:b4:de:4a:6a:f6:d6:
81:5c:77:ac:63:ac:60:db:9c:93:3b:15:b0:1d:dd:9e:d0:41:
f8:d9:25:20:15:ca:c9:a7:84:b8:be:71:7f:8d:c3:12:f9:3a:
19:4d:7e:71:e7:e4:b1:88:23:3d:d1:6c:12:97:2b:4c:46:37:
6c:14:3e:c4:d4:15:bc:ff:43:fb:b4:5a:f3:76:7f:05:3c:c3:
cd:8c:d1:d9:78:3f:59:8b:e1:79:63:90:7d:5e:03:58:d2:b5:
c7:35:08:3d:52:12:a3:04:5d:8b:7c:45:98:a6:23:2c:52:34:
87:b7:3b:14:19:86:55:fc:5a:c5:45:4d:88:35:1d:ee:b9:47:
c0:be:e8:9a:2f:5e:db:f4:61:2f:11:fc:83:56:3b:a4:0f:66:
6e:44:30:ac:0c:8b:47:71:11:e3:77:53:7b:01:1b:97:d7:ce:
d0:c9:25:12:57:36:38:26:6a:b6:be:5d:71:ce:e6:2c:d4:f3:
dd:8c:ad:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:48:38 2024 by rpki-client on console-fra.rpki-client.org