Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/e9v7EK8xjZqZWKi-sqs5eYNI9A4.roa
File: e9v7EK8xjZqZWKi-sqs5eYNI9A4.roa (raw, json)
Hash identifier: K7nHGOE4lQ51gJwwbWp3/XCW/Bf1C6OUs4z/KtKDUOw=
Subject key identifier: 7B:DB:FB:10:AF:31:8D:9A:99:58:A8:BE:B2:AB:39:79:83:48:F4:0E
Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial: 018CC72578A56E2F4B906E94E05D9ABDE720
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/e9v7EK8xjZqZWKi-sqs5eYNI9A4.roa
Signing time: Mon 01 Jan 2024 22:29:30 +0000
ROA not before: Mon 01 Jan 2024 22:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44716
IP address blocks: 87.225.128.0/17 maxlen: 17
212.42.224.0/19 maxlen: 24
212.42.244.0/24 maxlen: 24
212.21.64.0/19 maxlen: 24
2001:bf0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:78:a5:6e:2f:4b:90:6e:94:e0:5d:9a:bd:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Validity
Not Before: Jan 1 22:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bdbfb10af318d9a9958a8beb2ab39798348f40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:b7:3a:0e:3d:cd:18:42:b0:2d:08:09:35:
19:35:ae:8e:68:bb:4f:97:82:f3:5e:0a:33:05:9b:
79:98:15:55:32:36:56:3a:a0:b7:c9:41:6e:4d:9d:
35:f5:d4:7b:f1:75:63:16:49:f1:e7:5b:fd:ab:7d:
3c:f5:7d:3e:f8:90:e1:09:7b:cf:24:bc:e4:a4:7a:
7f:59:33:b6:26:7f:64:9b:3a:8a:24:30:28:ee:6b:
e0:0c:ae:dd:4b:3f:25:f2:fa:db:6d:76:55:14:96:
b4:19:bc:3f:d2:70:c1:6e:e7:54:52:21:f8:e0:83:
64:95:cc:30:69:f5:28:cb:b4:44:dd:55:25:d6:12:
05:ac:18:b5:73:ef:06:28:af:eb:db:e3:99:b1:32:
dc:c7:47:f3:75:2e:31:c0:71:93:15:4b:df:f0:55:
14:68:2a:07:55:da:b0:07:56:2b:c9:1b:c8:78:40:
60:cd:5d:b5:a0:64:7b:4e:cb:df:73:e5:c8:d0:0f:
9f:29:b9:f9:bd:02:9c:0b:73:8e:88:6c:05:6c:f3:
58:c3:94:c9:81:1d:c2:48:a3:82:62:17:f3:0e:ba:
12:32:6a:e3:54:ba:5c:50:70:65:0b:cc:5c:d5:11:
a7:c3:c5:61:95:60:24:35:4d:b1:f3:5c:b9:66:24:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:FB:10:AF:31:8D:9A:99:58:A8:BE:B2:AB:39:79:83:48:F4:0E
X509v3 Authority Key Identifier:
keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/e9v7EK8xjZqZWKi-sqs5eYNI9A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.225.128.0/17
212.21.64.0/19
212.42.224.0/19
IPv6:
2001:bf0::/29
Signature Algorithm: sha256WithRSAEncryption
55:ec:a5:db:32:8f:03:26:29:70:96:cf:91:8e:73:f8:cf:63:
c2:ce:c0:1f:96:18:ba:91:7a:e7:83:b5:58:fb:2e:88:35:67:
11:c8:dc:38:15:d4:92:71:f8:a5:d8:63:75:49:db:36:34:17:
fc:93:6a:73:cd:9d:57:df:40:52:db:38:a1:52:18:4d:85:11:
7b:c7:e2:19:b6:b1:19:16:fa:1d:10:2a:36:65:17:c0:e1:d5:
f1:73:92:8e:ec:a2:7d:3e:3e:0a:6c:cd:f7:11:07:8f:b9:38:
b4:2f:77:8f:2c:59:d6:da:72:42:b6:f5:d4:f7:0b:f2:d4:2f:
e2:b9:05:e7:3e:b5:76:37:5d:76:01:b9:ba:4f:a2:f2:9c:a5:
ab:08:8c:36:cd:6f:61:e9:bb:17:a8:01:50:d7:fa:a3:40:b8:
0b:84:c6:8e:d8:f3:33:93:22:b9:82:28:1f:f0:02:69:8a:cc:
3b:b7:20:41:2d:ed:bc:33:f8:c4:f8:5f:e3:45:cf:8e:ff:28:
05:00:2a:58:bc:2c:61:24:5e:9c:21:1b:61:ba:d4:a6:9d:61:
8b:57:5a:65:78:3a:c3:b9:bb:2b:90:05:65:21:2f:7d:af:92:
9a:36:02:8a:28:93:c8:7a:e9:e9:9c:72:17:c1:ae:e9:72:44:
15:24:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:37:53 2024 by rpki-client on console-fra.rpki-client.org