Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/0tcYIhhBDYHvJCh1OGkPLq5ZH5E.roa
File: 0tcYIhhBDYHvJCh1OGkPLq5ZH5E.roa (raw, json)
Hash identifier: 9K0evXxfi6W1Ennbh7d4PbdvVvDBmZQY+14EcsupiwU=
Subject key identifier: D2:D7:18:22:18:41:0D:81:EF:24:28:75:38:69:0F:2E:AE:59:1F:91
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0193267803CCCC6A1E2AA1A9DEE6E843BB0C
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/0tcYIhhBDYHvJCh1OGkPLq5ZH5E.roa
Signing time: Wed 13 Nov 2024 17:00:19 +0000
ROA not before: Wed 13 Nov 2024 17:00:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3360
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
212.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:78:03:cc:cc:6a:1e:2a:a1:a9:de:e6:e8:43:bb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Nov 13 17:00:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2d7182218410d81ef24287538690f2eae591f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:21:62:91:40:df:3c:30:f8:42:31:0b:7e:
be:2b:7b:65:9b:b6:50:ea:71:3b:42:83:2a:b1:cc:
91:c0:4c:c2:0b:fb:57:91:ee:ca:b5:3e:49:24:d5:
ec:90:34:9b:b4:74:e2:29:d7:39:30:e2:f2:c8:da:
0a:0c:6a:f2:3b:2a:cc:c6:1a:82:71:de:d0:18:dc:
ba:df:9d:9b:d0:6e:7a:36:15:5a:ab:1b:a9:1c:f1:
2e:df:9c:3b:78:e0:ab:01:96:25:29:c4:b5:fb:63:
56:ea:3a:22:35:dc:92:c5:9d:56:cb:24:4d:6a:c6:
da:0e:b1:15:ad:e4:e9:21:29:ea:9b:ab:92:72:5d:
3e:de:ff:ae:a1:6a:ba:a6:6d:f7:a5:4f:50:44:76:
43:92:34:67:74:83:49:e3:4d:c0:f0:b0:80:81:5e:
cf:f6:ba:c3:f6:ea:6f:bd:aa:43:46:a1:51:77:81:
d6:6f:68:8e:8d:07:69:bf:68:37:3c:2a:b7:44:c8:
e3:6e:03:bf:e8:fc:33:8f:8e:ed:5e:b1:54:e4:66:
b7:cb:27:db:73:fd:38:bd:da:98:e4:55:e6:ee:e5:
59:70:3e:f7:75:dc:a5:19:e5:98:51:be:d4:47:5a:
56:c0:10:09:f5:3a:1f:e5:55:31:29:c5:af:74:63:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D7:18:22:18:41:0D:81:EF:24:28:75:38:69:0F:2E:AE:59:1F:91
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/0tcYIhhBDYHvJCh1OGkPLq5ZH5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:22:95:34:fc:b3:3d:e0:e8:b4:d0:a6:70:20:c1:9b:bf:6c:
61:14:fa:1d:ab:0a:ea:17:54:5c:27:ec:23:d2:55:c2:06:f0:
f5:67:4b:1b:a5:fe:74:ed:d5:30:e5:7b:9c:a5:23:ce:7c:ba:
8b:df:d5:75:fb:8a:79:30:a1:22:10:b0:5d:ce:60:f8:b7:68:
39:ae:39:83:f1:49:cb:af:34:1d:a8:db:d6:8b:67:95:88:57:
d7:45:a3:88:fa:e3:38:52:91:d7:fb:4d:ac:00:05:19:5c:94:
e0:f1:86:ba:90:50:e7:03:9d:05:a9:fb:53:7c:b7:a9:92:71:
92:9b:51:7a:8a:79:05:cf:24:97:81:0c:07:f5:cd:6e:3a:ce:
b4:97:fa:ab:f7:32:ed:dd:2f:6f:0b:c7:8a:a6:83:04:9f:05:
a2:6c:3d:14:02:c9:c1:52:0b:6b:ab:2c:90:c9:f6:c6:44:db:
d1:39:07:45:99:31:a7:b9:b7:06:15:ca:f5:e2:92:8a:2a:d9:
37:50:d5:86:bf:e0:bc:8d:fb:f0:17:96:c2:f0:b8:82:d9:14:
71:8e:f3:d4:3f:3e:b5:61:89:fb:90:2d:11:31:91:cf:d3:85:
4e:bb:21:13:1a:24:ce:bd:87:f2:12:91:f3:5d:96:5d:74:8f:
4a:ba:df:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:05:10 2024 by rpki-client on console-fra.rpki-client.org