Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/fHfXXHXBRb77tiHd6dUJ9rwFdm8.roa
File: fHfXXHXBRb77tiHd6dUJ9rwFdm8.roa (raw, json)
Hash identifier: l/LbWmLELEy05dtkt7BOIqJqUVSaGNyhcb0mQALyRu8=
Subject key identifier: 7C:77:D7:5C:75:C1:45:BE:FB:B6:21:DD:E9:D5:09:F6:BC:05:76:6F
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 018CC348D98F2FDCEB05507C4AB1121130EE
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/fHfXXHXBRb77tiHd6dUJ9rwFdm8.roa
Signing time: Mon 01 Jan 2024 04:29:40 +0000
ROA not before: Mon 01 Jan 2024 04:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34309
IP address blocks: 85.22.173.0/24 maxlen: 24
212.29.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:d9:8f:2f:dc:eb:05:50:7c:4a:b1:12:11:30:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Jan 1 04:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c77d75c75c145befbb621dde9d509f6bc05766f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:67:9a:95:1a:8f:fc:4e:e0:20:bf:75:83:
93:c2:f5:94:4d:82:cc:3e:2f:c7:a1:c6:7a:e7:56:
41:8c:81:5d:02:ab:d5:3c:44:e3:7f:0d:b7:cf:b1:
f1:97:16:ba:60:ac:cd:f1:10:4f:07:b6:2c:d7:c1:
c9:fd:76:2b:70:5d:12:17:e3:76:77:00:69:21:a0:
35:ad:75:63:48:c1:42:e7:b8:a8:58:16:70:a3:f5:
0a:e8:a4:e9:ad:a1:94:c3:0b:96:2b:1a:21:90:6e:
86:21:81:fc:d2:70:4a:9a:b0:92:db:a2:01:0a:df:
8d:3b:24:61:19:45:0e:52:d8:3a:98:54:92:f0:a6:
c1:ed:05:73:18:09:c2:8b:23:cd:b2:3a:50:82:0f:
18:16:f1:60:34:7e:6b:11:6c:04:89:a1:6a:72:13:
7e:d2:3a:a1:cf:db:9a:c7:16:15:75:82:1a:ad:25:
ec:78:ea:20:2c:0f:9d:e6:89:c3:70:65:83:a8:9d:
b4:b4:08:3c:13:46:94:61:45:25:f0:d3:7a:11:c9:
87:b6:cc:33:38:40:c4:53:a3:cf:d8:ea:d4:80:5f:
47:6b:a3:bd:00:33:2e:cc:53:b0:9e:61:ef:2e:4a:
e3:28:53:99:ba:44:d8:1a:42:d1:56:c7:55:9a:92:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:77:D7:5C:75:C1:45:BE:FB:B6:21:DD:E9:D5:09:F6:BC:05:76:6F
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/fHfXXHXBRb77tiHd6dUJ9rwFdm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.22.173.0/24
212.29.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b5:19:0b:0e:89:d3:56:67:5c:7b:7c:fe:4a:38:37:57:89:
8a:02:98:f4:85:6a:53:d1:68:b1:52:59:cd:ca:08:ef:b0:27:
b5:8f:02:79:3d:1e:fb:da:07:25:54:9f:ec:db:92:b6:a5:6a:
ed:16:e5:77:9b:b5:43:e9:44:97:27:67:8c:bc:2c:f9:e5:11:
46:4c:e4:53:17:c5:bc:d9:51:bd:86:ce:e5:01:c1:2b:4c:4d:
c7:0e:8e:7e:47:21:37:5b:eb:b8:47:58:c8:d2:1f:9c:7e:3d:
86:63:9d:84:42:b1:64:16:93:e2:a6:d9:8f:d5:c8:7b:f4:78:
4d:2f:c6:91:62:24:9b:ee:41:3e:96:f0:11:9c:76:de:67:41:
ce:eb:0c:18:f9:96:ad:d5:13:89:d3:0a:91:cd:02:10:b9:47:
5d:ed:90:97:68:44:15:ff:64:d5:8a:b4:dc:fd:15:e7:fe:38:
b6:65:65:9f:5e:61:45:20:38:db:62:63:1f:7c:82:70:72:c2:
7a:18:e5:12:d9:3d:49:5c:84:fa:4f:a4:08:08:30:fa:41:44:
49:1f:dd:43:50:3a:35:ec:09:27:37:4a:ac:f3:48:d3:a7:09:
c7:f0:ed:fb:33:73:8d:84:7d:f6:82:91:b2:7b:a8:73:76:44:
0d:ca:75:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:59 2024 by rpki-client on console-fra.rpki-client.org