Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/uizIqpJj7dVcWSRyrAXFYzesCf0.roa
File: uizIqpJj7dVcWSRyrAXFYzesCf0.roa (raw, json)
Hash identifier: k6nmHt9SVMS6OZFo95epC5XsJkIsgMOhgpjXYNp17ow=
Subject key identifier: BA:2C:C8:AA:92:63:ED:D5:5C:59:24:72:AC:05:C5:63:37:AC:09:FD
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 01902CD376984FB68F74CB1FCE23FEDCC779
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/uizIqpJj7dVcWSRyrAXFYzesCf0.roa
Signing time: Tue 18 Jun 2024 19:29:34 +0000
ROA not before: Tue 18 Jun 2024 19:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49489
IP address blocks: 89.190.144.0/22 maxlen: 22
185.36.220.0/22 maxlen: 22
193.169.82.0/23 maxlen: 23
2a00:efe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:d3:76:98:4f:b6:8f:74:cb:1f:ce:23:fe:dc:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Jun 18 19:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba2cc8aa9263edd55c592472ac05c56337ac09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:98:3f:4d:c1:69:5d:37:a3:92:fd:9b:74:
c9:b6:aa:a6:a2:b8:e5:7b:f8:36:d2:70:1b:ec:fe:
3c:04:80:09:ac:da:01:13:9b:cd:33:1c:1c:37:e2:
aa:09:ce:2c:26:94:f2:46:6b:aa:2f:65:83:89:a1:
e4:ae:d9:ef:ac:79:a1:a7:1b:5d:3c:53:03:bc:a3:
b9:5f:ab:b9:60:2e:e6:55:0c:cc:cd:8e:f1:d5:0d:
c1:a5:1d:5e:46:8a:07:87:39:b5:79:e9:8d:04:82:
86:4d:ed:ac:0e:b8:f7:4c:7e:6e:10:c5:0e:8b:2b:
bc:4b:fe:6c:98:3c:e6:b0:22:0a:e4:a3:e0:02:fd:
3a:7b:a4:ed:c1:12:59:7e:8c:1f:8b:90:8d:18:d1:
67:37:ab:5a:84:06:6a:af:cf:7e:b0:0d:0e:f5:66:
5e:dd:2d:ee:f8:a4:44:38:d7:c1:ed:98:07:e2:fe:
e4:86:0a:f9:ab:97:a1:3b:64:45:e0:2f:87:f3:71:
6b:3d:d5:37:38:fb:2d:39:eb:5b:fb:58:1e:5a:3b:
fa:71:33:95:99:dd:d0:a9:9d:33:5d:49:a0:b4:5f:
cd:20:2c:af:5c:61:db:92:dd:80:f8:bf:fe:8c:79:
d4:cf:43:38:cd:09:c3:52:a7:85:85:37:61:01:c8:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:C8:AA:92:63:ED:D5:5C:59:24:72:AC:05:C5:63:37:AC:09:FD
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/uizIqpJj7dVcWSRyrAXFYzesCf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.144.0/22
185.36.220.0/22
193.169.82.0/23
IPv6:
2a00:efe0::/32
Signature Algorithm: sha256WithRSAEncryption
62:6d:d4:8b:24:79:38:b3:7f:c3:8b:62:74:42:0a:5a:03:30:
79:f1:25:f0:6c:00:d5:7e:a4:1b:72:b3:cf:a8:40:7b:02:4c:
8d:16:e5:db:eb:2c:f7:c9:76:b6:c6:c4:f8:66:0d:e5:5e:70:
05:6e:ec:e5:2c:e6:bf:54:e9:c8:ef:fe:c9:c3:97:83:40:bc:
ef:a8:b2:d2:ad:dd:e0:39:a3:19:dd:a9:0a:c0:7a:c2:1d:50:
a8:39:14:14:6d:e8:92:fe:b7:c5:01:e5:a4:a8:f6:63:de:f5:
83:f8:a8:0b:87:b2:74:86:93:a7:94:21:87:00:41:e2:08:c7:
04:e0:2a:0e:77:89:de:b8:a3:e8:d4:a9:3c:7b:7c:35:0e:d6:
1d:e1:f7:9f:54:6b:34:25:7e:39:b0:d5:70:6e:50:93:b9:1a:
a6:a5:af:5f:3b:cc:c0:ee:91:56:27:ba:2d:c7:31:a0:21:a0:
9b:d0:94:44:08:1d:56:38:63:c8:00:3f:c7:49:91:97:40:fd:
6f:31:6a:88:6a:1b:9a:0a:cb:34:95:c6:a9:17:1b:b7:c1:b0:
81:f8:c8:ea:19:aa:b9:c4:dc:7a:44:ce:92:eb:63:ca:42:4c:
6e:1e:ed:9d:0e:32:e0:6c:5e:fe:c6:7c:aa:3c:cd:ae:c9:95:
ba:7c:5b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:59 2024 by rpki-client on console-fra.rpki-client.org