Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/z7jQCtO2LDGlgwOd3lPT2kKDwlg.roa
File: z7jQCtO2LDGlgwOd3lPT2kKDwlg.roa (raw, json)
Hash identifier: t+6nOrBHvEzSHJbVvM6y3PdQn1QmdJ4uPmkXRek13nA=
Subject key identifier: CF:B8:D0:0A:D3:B6:2C:31:A5:83:03:9D:DE:53:D3:DA:42:83:C2:58
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019035223C4CF330007009D6D297BDDC31A3
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/z7jQCtO2LDGlgwOd3lPT2kKDwlg.roa
Signing time: Thu 20 Jun 2024 10:12:34 +0000
ROA not before: Thu 20 Jun 2024 10:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16032
IP address blocks: 194.46.126.0/23 maxlen: 23
194.46.128.0/22 maxlen: 22
194.46.136.0/21 maxlen: 21
194.46.144.0/22 maxlen: 22
194.46.148.0/22 maxlen: 22
194.46.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:35:22:3c:4c:f3:30:00:70:09:d6:d2:97:bd:dc:31:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Jun 20 10:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfb8d00ad3b62c31a583039dde53d3da4283c258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cd:9b:51:a4:bb:d7:21:07:d4:18:c0:be:36:
13:1c:53:90:be:f2:64:e9:5c:13:18:e0:47:63:4f:
3f:cc:5e:5a:c9:b8:b7:c6:64:bc:ce:25:1b:f4:f6:
4d:f3:a4:82:5a:2c:97:87:ff:53:bc:3e:a7:68:da:
5a:5c:64:11:a8:af:e0:c3:b8:d5:99:e5:c6:47:6c:
ce:cf:37:4e:9f:e5:60:d6:53:d8:d6:99:fa:07:78:
b8:69:51:f2:de:70:e1:2f:ca:89:ed:2e:5f:51:84:
7d:79:de:89:6e:1e:af:52:c3:eb:df:c8:26:82:90:
d1:e3:f1:07:aa:4c:10:0c:70:e1:29:2d:3a:4d:89:
6f:08:e2:73:38:d7:dc:dd:e0:ca:72:1d:9d:32:3d:
7d:cd:60:66:2a:18:27:80:12:e7:fd:bd:db:4d:ea:
d9:ce:9d:75:ca:b2:64:e3:c3:f6:bd:f3:82:0a:22:
a9:82:e3:d2:23:b8:53:da:79:b2:04:68:10:60:11:
17:27:43:10:72:06:0f:96:d4:ff:64:be:12:a8:db:
c9:ae:86:a0:0f:4f:52:17:fb:29:4e:3a:99:75:d9:
58:7d:1b:08:59:a0:99:63:21:b3:02:a8:23:b9:cd:
a3:fe:90:92:b0:bd:87:82:da:b1:8b:87:f2:a8:d8:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B8:D0:0A:D3:B6:2C:31:A5:83:03:9D:DE:53:D3:DA:42:83:C2:58
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/z7jQCtO2LDGlgwOd3lPT2kKDwlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.46.126.0-194.46.131.255
194.46.136.0-194.46.151.255
194.46.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:1d:dd:e1:22:f1:ce:0b:41:21:44:42:1e:e2:52:e0:18:5e:
03:a3:34:dc:01:ec:b7:dc:a4:96:45:e0:c2:14:b9:ad:6d:59:
fc:a8:bc:5a:83:f4:ac:79:8c:04:09:2f:29:54:ac:0e:3d:e7:
be:8e:dc:f7:0d:04:57:e3:de:a4:a1:99:79:1e:2d:37:2c:b1:
3e:0b:01:fa:d9:90:36:4c:ee:4d:27:01:06:20:5e:92:cc:1e:
4e:39:96:44:a6:43:f8:b8:b8:69:c5:67:d3:f9:d3:92:e4:d5:
6b:60:2d:e7:e1:b8:54:1a:e7:21:e7:06:f5:f1:75:4e:2b:e4:
25:71:c4:cc:fc:33:4a:39:88:18:82:a2:72:15:0b:16:3b:10:
51:f8:c3:e2:6f:3c:3b:66:67:63:0f:2a:fc:15:93:78:43:77:
54:45:10:90:91:37:fc:6c:49:b9:4c:31:62:81:66:95:e0:6b:
6b:55:f2:66:32:ec:3d:60:c8:2e:04:78:1a:df:71:22:11:68:
f4:06:3f:48:6a:e2:b2:fb:1a:de:77:02:3b:3d:49:9e:d0:f5:
94:20:a1:93:2a:49:44:1a:62:19:cf:21:7a:b0:17:47:a3:02:
95:af:99:7a:c1:d4:0b:1b:18:59:71:bb:14:da:36:50:55:d0:
65:e5:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:19:11 2024 by rpki-client on console-fra.rpki-client.org