Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7FVzExg5k288F3KMcJps14w0KJE.roa
File: 7FVzExg5k288F3KMcJps14w0KJE.roa (raw, json)
Hash identifier: BZJSa1VhXWNONuR9Z+Hx4l0TFL5JRbIJhm6z2IgmIJ8=
Subject key identifier: EC:55:73:13:18:39:93:6F:3C:17:72:8C:70:9A:6C:D7:8C:34:28:91
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B1BFDEADAE93099AFA0DA93AA9DA
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7FVzExg5k288F3KMcJps14w0KJE.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43072
IP address blocks: 185.112.243.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b1:bf:de:ad:ae:93:09:9a:fa:0d:a9:3a:a9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec5573131839936f3c17728c709a6cd78c342891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:e4:30:97:7e:62:fa:8b:5f:0b:7c:e5:21:
f4:56:ab:46:f2:84:2d:7a:e9:af:79:37:59:b5:51:
0c:bd:4f:c9:df:5f:1e:52:a1:20:00:1a:22:9b:44:
dd:01:39:78:13:97:44:bb:82:fd:90:a8:1e:e4:3e:
1c:e6:30:fb:b9:96:f0:ea:a5:ed:94:a7:e1:e0:2e:
65:23:83:52:13:80:8b:08:3f:a4:e2:cc:a8:c0:c4:
6c:6f:0e:a1:40:25:06:62:c2:b9:9d:f4:5c:2d:e8:
fd:f5:6b:e0:1a:51:00:64:f2:e9:bb:81:21:af:a8:
0a:61:1c:79:5b:10:ce:37:2c:c8:38:3e:cd:27:3d:
2d:28:9d:b3:b1:1d:a7:95:69:d1:34:38:60:e8:3c:
76:c3:a2:8d:9b:92:c8:05:d2:c2:2c:97:08:eb:22:
77:c8:36:01:40:6b:02:15:0d:4e:d0:7a:cb:c1:bc:
fd:00:54:61:af:55:11:1f:6a:49:d4:13:ae:28:94:
cd:c3:fa:2c:1c:fb:6e:6f:b4:c7:26:8e:4c:4e:e0:
d8:3f:e8:37:64:c4:d0:7d:d3:ee:b5:22:7d:30:4c:
b0:ec:f7:6f:33:70:cc:37:a6:37:00:94:6a:5f:25:
01:95:88:8d:ed:07:56:de:41:20:af:3b:66:06:3c:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:73:13:18:39:93:6F:3C:17:72:8C:70:9A:6C:D7:8C:34:28:91
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/7FVzExg5k288F3KMcJps14w0KJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.241.0/24
185.112.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:64:b8:8c:a7:b7:38:0a:b2:fd:97:a0:63:ba:80:a8:10:8e:
67:3a:d1:67:65:ca:5d:0a:c6:a8:86:7a:29:7f:2d:09:81:05:
df:9c:4c:28:ec:34:30:ee:66:73:e5:e0:ef:54:ad:32:44:46:
8d:e7:c8:a3:6a:a3:d2:c9:b0:ff:74:e8:d7:84:12:01:0c:cb:
a6:7c:cb:27:4b:de:56:3c:f9:5e:75:e0:f7:cf:92:17:a8:d9:
17:a6:31:19:20:71:66:75:0d:7b:e8:2c:71:b1:7e:c9:b9:b3:
88:1f:b0:b1:8f:bd:05:3c:f9:80:3b:8e:fc:aa:76:78:b0:fd:
c6:b2:d1:71:4f:a4:ea:8d:2b:a0:4d:42:7e:28:87:96:a2:29:
4f:90:3e:97:e9:3f:40:84:ef:7f:d3:2d:72:29:92:16:17:7f:
7c:33:2c:9a:c6:25:17:0e:ec:a4:19:83:5d:c8:b4:27:79:d0:
19:96:eb:24:ec:87:77:cf:9a:90:b3:5d:8f:22:9e:01:ea:26:
9a:1d:b4:f7:fc:d7:76:32:ea:d4:af:42:9c:b4:f0:1b:e0:84:
04:73:12:78:3d:df:06:ac:06:1c:65:c0:04:b1:ac:dc:c6:c1:
b8:b9:a1:3e:d4:b4:e5:16:70:46:53:e8:9d:2c:6b:76:85:54:
7a:0e:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 07:36:58 2024 by rpki-client on console-fra.rpki-client.org