Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/x7W0IeWOFHTmFdkxE10o8br2p5s.roa
File: x7W0IeWOFHTmFdkxE10o8br2p5s.roa (raw, json)
Hash identifier: bof2xPtvHuexvRcZjHwU+TOJRtPvLtvfn8SQzN+O5as=
Subject key identifier: C7:B5:B4:21:E5:8E:14:74:E6:15:D9:31:13:5D:28:F1:BA:F6:A7:9B
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 018CC26D3F855ABAFAB6831EDFE0EAE87F74
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/x7W0IeWOFHTmFdkxE10o8br2p5s.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.237.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3f:85:5a:ba:fa:b6:83:1e:df:e0:ea:e8:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7b5b421e58e1474e615d931135d28f1baf6a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:71:2e:cd:29:62:10:ff:a5:c7:d0:8a:61:
3d:e6:39:77:41:4f:ab:28:1f:9a:e8:62:cc:5d:35:
8c:fb:ab:6a:1f:4c:90:d2:d1:72:e5:82:f5:8f:5f:
b8:9b:ec:0c:35:d5:e3:fd:6c:1c:5c:d8:11:a7:1b:
3f:eb:f3:bd:dc:73:ba:73:ab:2e:c9:c0:40:d9:b4:
5f:cd:29:b9:38:60:54:a6:3a:61:fe:29:1c:df:e8:
22:a2:e8:a4:57:1b:87:fa:5e:e8:c2:31:db:b4:a3:
2d:a9:82:14:36:c5:9f:4c:be:80:93:0b:55:61:16:
4b:1b:34:c2:f7:c2:99:dd:44:86:3d:5b:38:a5:8a:
82:e6:8b:f1:c5:2e:56:f9:ea:31:dc:b9:e0:ad:0c:
97:21:a1:be:a1:5f:69:96:ab:19:96:f1:35:3d:52:
e9:e4:05:13:5b:10:51:ee:99:82:d1:d8:18:a7:3c:
b0:74:cb:5d:1c:c8:27:81:0d:ec:6b:df:84:68:3a:
2b:e0:bd:88:3c:44:01:54:ce:b4:b8:8f:da:03:9e:
90:c6:bc:05:7e:b1:b6:a3:45:52:3d:e6:5e:e2:d6:
6b:8e:a2:15:4e:52:83:76:fb:67:fc:97:e4:d2:64:
95:ca:fd:df:91:40:18:96:68:74:a6:0c:7b:fe:9a:
30:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:B4:21:E5:8E:14:74:E6:15:D9:31:13:5D:28:F1:BA:F6:A7:9B
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/x7W0IeWOFHTmFdkxE10o8br2p5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.200.0/22
Signature Algorithm: sha256WithRSAEncryption
65:57:05:29:d7:6d:b9:ab:85:85:48:5a:33:7c:a1:03:c7:95:
56:f3:e3:4f:62:bc:7b:b1:b4:6c:f2:dd:e0:cd:00:ac:bc:6b:
7f:86:b8:54:e2:27:8f:50:57:f8:8d:8a:e4:bd:64:d8:77:09:
13:cb:a0:37:01:0f:7d:b4:47:af:18:15:bc:3d:a7:68:4b:be:
8d:c8:47:bf:55:40:7d:3d:68:98:3e:a1:ff:3a:8f:fa:2f:61:
79:01:fa:e1:c9:84:c3:f2:94:11:ba:88:77:ef:f4:eb:40:36:
2c:c8:ac:ea:f8:f0:16:22:e5:3c:76:a1:de:17:fd:2b:d2:de:
37:4c:d1:68:ce:8f:76:3f:7b:a8:b2:41:dd:70:e2:e3:72:78:
bd:fc:ef:e8:99:2a:68:29:90:e6:46:42:ea:27:e4:68:70:b3:
16:1e:61:d1:fe:fb:62:0b:02:d0:b9:87:c4:4f:2c:ac:69:2f:
77:a0:9f:dc:c3:c0:25:52:a4:00:11:cb:04:9a:59:6b:8c:3d:
86:5a:fb:12:da:bd:bd:35:8d:29:17:e4:0a:fa:96:eb:14:7a:
18:99:42:a2:d4:e8:7e:7c:db:05:5c:ad:bc:84:07:70:72:76:
d4:20:c4:cb:6e:a2:bc:8b:75:5b:76:d1:77:5e:8c:47:38:e3:
fa:35:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:03 2024 by rpki-client on console-fra.rpki-client.org