Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/7FBqgA5joJU0OgIxG3vbod6wdPU.roa
File: 7FBqgA5joJU0OgIxG3vbod6wdPU.roa (raw, json)
Hash identifier: xfgF6p5FCkdISZGTtjTl+0bXnu1eqKTFqKWDwpI4CtE=
Subject key identifier: EC:50:6A:80:0E:63:A0:95:34:3A:02:31:1B:7B:DB:A1:DE:B0:74:F5
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 018F14A414CF1D9116B68320ECE85C5FA02C
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/7FBqgA5joJU0OgIxG3vbod6wdPU.roa
Signing time: Thu 25 Apr 2024 09:44:08 +0000
ROA not before: Thu 25 Apr 2024 09:44:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 194.150.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:a4:14:cf:1d:91:16:b6:83:20:ec:e8:5c:5f:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Apr 25 09:44:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec506a800e63a095343a02311b7bdba1deb074f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:02:1a:52:8d:ff:16:ba:4c:35:f8:6f:a3:
6e:7a:43:a4:37:ff:67:3b:e7:e5:94:cb:91:52:5a:
9f:6d:ee:50:70:7d:03:24:61:c4:c2:fc:73:52:85:
dd:5f:92:c0:cd:a3:91:38:44:ba:ef:6a:60:75:d2:
d7:22:55:ff:c4:b0:34:ae:a3:ff:12:27:ca:68:89:
c9:77:2f:cd:38:51:58:86:f2:23:b0:18:e1:4b:fb:
96:56:a7:38:a0:bc:c6:db:ee:26:40:46:96:8f:b4:
9a:e0:27:d1:34:b9:c2:99:2f:f2:fe:42:cb:ab:e6:
42:70:4c:cb:66:7b:9a:53:b9:e4:af:40:94:6a:e4:
68:11:63:ac:b7:a5:2b:2a:79:4f:f8:99:70:a4:94:
4a:f0:77:f9:e9:e2:2a:a9:e4:62:2b:c1:31:35:0d:
14:6d:29:d9:90:80:19:28:54:7d:a1:2e:b0:0a:c2:
b6:68:c2:8d:91:02:50:e6:48:c2:54:cc:d4:ff:60:
95:4b:a5:c1:66:72:7f:ff:b9:d3:d0:6b:01:c8:be:
5a:c9:aa:51:f7:cc:70:61:b5:c3:7f:06:05:7a:26:
ba:96:f1:7b:11:5f:7e:7e:c5:29:a1:25:54:fa:d2:
05:ae:48:43:64:2f:bd:7b:9f:1e:cf:24:9d:7e:4b:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:6A:80:0E:63:A0:95:34:3A:02:31:1B:7B:DB:A1:DE:B0:74:F5
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/7FBqgA5joJU0OgIxG3vbod6wdPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.192.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b5:7f:ee:07:02:0f:cf:22:ff:0b:63:0d:35:fb:d2:32:a7:
5b:e7:f8:87:a4:af:03:13:22:58:fa:4e:e6:ca:85:f0:6d:8b:
0f:f5:72:6a:b5:10:17:d8:4c:fd:7b:b3:67:0c:47:2f:ee:8d:
5f:a2:da:e1:09:10:0c:fb:bc:6e:c1:60:c9:27:13:46:71:ae:
4c:52:67:bb:e0:22:14:f2:a4:40:76:85:13:c4:aa:4e:04:9d:
cd:ec:c3:bd:24:1a:e1:f8:2d:0d:39:59:c4:69:b7:89:ba:f6:
53:8c:9b:e0:74:ae:40:a5:31:01:eb:e1:78:9c:58:f0:7f:7b:
82:b2:c5:fa:b9:f8:26:77:36:ad:e7:a0:81:bc:01:42:2e:f3:
ea:50:fa:60:0c:3d:f3:b7:b7:a9:fb:36:8e:96:a5:31:2d:35:
03:d0:78:ff:4b:57:80:b0:ce:df:20:74:24:6f:36:7a:64:13:
11:56:66:d6:36:6d:a4:30:7d:21:4e:df:ce:a4:67:0c:60:b7:
53:b8:15:4c:14:35:8e:96:ed:5c:e4:5c:b5:54:dc:93:ba:e9:
c4:e9:43:36:b3:ec:01:62:6b:ec:15:e7:74:b2:55:a6:2c:2e:
ab:02:f5:54:e2:c2:07:9d:ac:b1:76:31:26:87:ad:80:7d:47:
4c:5a:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:12:04 2024 by rpki-client on console-fra.rpki-client.org