Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/7EPLnnTJJ3ygXwPzbeOdX1Norhw.roa
File: 7EPLnnTJJ3ygXwPzbeOdX1Norhw.roa (raw, json)
Hash identifier: 6YDz7cj/nB1nJA0luEgMGzICxqcwxazR2gURDp+C/48=
Subject key identifier: EC:43:CB:9E:74:C9:27:7C:A0:5F:03:F3:6D:E3:9D:5F:53:68:AE:1C
Certificate issuer: /CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Certificate serial: 018CC7951D67A5A67272FC4C0E52C7192B0F
Authority key identifier: 7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/7EPLnnTJJ3ygXwPzbeOdX1Norhw.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205668
IP address blocks: 185.44.128.0/22 maxlen: 24
185.200.101.0/24 maxlen: 24
185.200.102.0/24 maxlen: 24
185.200.103.0/24 maxlen: 24
185.200.100.0/24 maxlen: 24
185.129.71.0/24 maxlen: 24
185.129.68.0/22 maxlen: 24
185.129.68.0/24 maxlen: 24
185.129.69.0/24 maxlen: 24
185.129.70.0/24 maxlen: 24
45.148.168.0/22 maxlen: 24
2a0a:aa40::/32 maxlen: 32
2a01:74e0::/32 maxlen: 32
2a0a:aa42::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1d:67:a5:a6:72:72:fc:4c:0e:52:c7:19:2b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ae80cde5cd769c8f144e6c266113bfaedec3e
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec43cb9e74c9277ca05f03f36de39d5f5368ae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:cb:41:16:4c:62:fe:38:30:0f:7c:d2:04:
14:2b:69:ed:10:fb:06:b4:b8:de:24:a1:59:31:80:
8f:f4:d5:c2:43:63:7e:e5:cf:ed:cf:4b:17:c3:7d:
1b:f8:52:9c:6e:e0:12:f6:df:57:20:0b:bc:ac:30:
50:18:b8:16:85:e4:d8:88:fc:c3:69:1c:a5:bc:c7:
05:73:05:4b:42:ce:e8:85:9b:44:12:bc:f2:be:08:
ca:4a:d1:ed:41:f9:f5:58:7d:9c:c2:27:64:3c:f9:
d1:59:6c:59:45:71:17:f8:ff:56:02:e7:6e:9b:ad:
42:a5:03:5d:2b:54:e9:da:a6:f5:47:22:83:29:65:
52:e2:df:d2:cb:db:09:7d:89:ff:10:83:5e:f5:7a:
8b:c9:81:f5:ad:9b:dd:18:2b:5f:9f:dc:63:96:6f:
94:40:92:90:75:a9:14:07:91:7e:aa:e2:87:40:41:
3b:0a:b7:b7:56:a9:c3:01:bf:34:19:ed:23:96:ff:
d3:17:c6:15:ad:c9:86:06:66:e9:61:20:66:9a:45:
6f:46:5d:b2:fc:96:cb:99:30:12:0e:8d:36:e4:6e:
8b:7f:0c:bd:68:cd:7b:5b:67:43:91:23:42:ac:9d:
1c:b6:e3:2e:d2:df:84:b2:85:6a:bc:bf:c2:e5:03:
7d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:CB:9E:74:C9:27:7C:A0:5F:03:F3:6D:E3:9D:5F:53:68:AE:1C
X509v3 Authority Key Identifier:
keyid:7D:2A:E8:0C:DE:5C:D7:69:C8:F1:44:E6:C2:66:11:3B:FA:ED:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSroDN5c12nI8UTmwmYRO_rt7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/7EPLnnTJJ3ygXwPzbeOdX1Norhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a2ea51-87a6-4814-9b82-278cbb0b4e73/1/fSroDN5c12nI8UTmwmYRO_rt7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.168.0/22
185.44.128.0/22
185.129.68.0/22
185.200.100.0/22
IPv6:
2a01:74e0::/32
2a0a:aa40::/32
2a0a:aa42::/32
Signature Algorithm: sha256WithRSAEncryption
86:08:6f:97:69:7b:05:fe:13:55:5c:1c:71:14:08:2b:bf:b9:
62:8f:f4:c1:a4:7e:ba:2a:5a:f7:2e:1e:32:a9:48:d6:76:99:
f6:1f:2e:91:99:eb:4b:c0:d5:9d:bf:ef:26:5f:26:81:e8:7b:
e4:43:49:d0:e5:e5:78:a4:96:de:02:2a:30:de:80:04:5e:22:
a7:3f:d2:f4:c2:43:cf:5e:7c:7c:48:00:0f:94:a5:eb:96:e6:
5b:16:74:d3:fd:40:6f:95:8b:b0:e6:df:7c:6e:d9:5a:2f:e3:
49:e0:14:cc:c0:cd:f6:f5:87:54:a4:c0:ca:d2:65:b9:3a:ea:
d1:a7:94:f6:20:b4:d5:f9:db:d0:8b:91:38:fe:8f:99:e7:d9:
7a:19:1f:f3:a4:04:23:32:04:ef:bf:01:c7:46:f0:12:6d:05:
56:2d:db:e1:21:f8:b5:08:45:11:71:c2:a9:4a:af:08:d6:f3:
32:76:d1:c2:07:a5:5e:47:3a:26:20:f4:b6:a7:5c:31:a5:02:
e7:ea:be:1f:5c:46:e9:79:bf:72:36:57:d2:c2:25:d2:a9:e5:
32:4a:2b:5f:01:07:ca:0a:33:48:0c:46:3f:96:0c:fb:72:ac:
01:77:34:a5:35:62:3e:fe:1a:cc:f7:f3:ef:60:56:3b:02:3d:
de:f5:4f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:36:57 2024 by rpki-client on console-ams.rpki-client.org