Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa
File: 7FMqwcb5bqDEN3zW92TIr-SDYnM.roa (raw, json)
Hash identifier: 6Br1sjEK3iC93EAFJq0QpQ6rEThJNQq489wXrqhFHkM=
Subject key identifier: EC:53:2A:C1:C6:F9:6E:A0:C4:37:7C:D6:F7:64:C8:AF:E4:83:62:73
Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial: 018CC94DD590920FE9023D0B843B6F7BF42A
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa
Signing time: Tue 02 Jan 2024 08:32:50 +0000
ROA not before: Tue 02 Jan 2024 08:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209803
IP address blocks: 193.32.156.0/22 maxlen: 22
2a09:880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d5:90:92:0f:e9:02:3d:0b:84:3b:6f:7b:f4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Validity
Not Before: Jan 2 08:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec532ac1c6f96ea0c4377cd6f764c8afe4836273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:c3:74:85:01:42:69:bf:db:d8:78:a2:53:
8b:4e:13:45:38:8b:07:29:80:b2:52:54:ec:a3:b6:
13:28:b9:31:05:2f:d4:79:43:b3:57:c2:52:f4:97:
25:e1:fe:d8:d6:cd:a8:3c:1a:55:6b:70:59:a1:b0:
c8:d8:e5:ef:5e:60:62:ff:c2:50:1c:ae:5c:85:ad:
13:a0:df:c5:18:3f:43:cd:bf:05:72:6e:44:8e:d4:
61:c7:ba:19:71:ae:09:a0:a6:23:a1:96:aa:ce:43:
c8:e4:d7:a3:67:81:e4:20:17:75:cc:47:01:38:9f:
d3:f8:cb:83:40:3a:26:0c:ad:25:e4:26:a4:4d:7a:
8e:12:4f:67:84:40:73:d1:cf:16:23:5d:41:e1:8d:
96:36:ae:6f:d0:68:7a:dd:8f:57:d3:33:45:df:e4:
a1:00:60:75:3e:45:98:9d:33:66:5a:83:60:0e:74:
d6:0e:d1:66:bb:fc:45:a4:a8:c8:c7:3c:53:62:bc:
1e:e1:7b:8f:88:1a:45:1c:6a:b7:65:61:a9:d3:a0:
f3:dd:45:66:0e:7b:2d:b8:66:0c:8e:ea:6e:69:6e:
11:c1:29:c8:5c:51:44:7a:6e:3c:28:cf:0d:fb:d5:
4a:8e:e1:e7:62:cf:06:8c:6f:13:28:55:50:ad:28:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:2A:C1:C6:F9:6E:A0:C4:37:7C:D6:F7:64:C8:AF:E4:83:62:73
X509v3 Authority Key Identifier:
keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.156.0/22
IPv6:
2a09:880::/29
Signature Algorithm: sha256WithRSAEncryption
25:b3:ae:f7:96:99:57:e9:d8:97:6c:ff:c2:ef:0e:ed:aa:71:
15:c1:86:d0:4f:01:17:93:69:64:ab:cd:73:38:8b:2b:74:f3:
23:d0:5d:d2:2e:67:27:93:7a:e1:10:e5:67:14:eb:0c:1f:da:
2e:c4:0c:ee:9c:fb:45:01:4f:27:91:54:b3:02:aa:f4:30:06:
8d:ae:58:98:66:1d:89:ef:93:42:ca:c5:d8:f0:ef:97:24:ad:
df:f3:96:ea:27:59:96:1e:e7:50:d4:9c:6a:fc:52:e4:69:38:
e2:6e:71:0f:5a:77:5e:b1:a0:24:fe:51:b4:b7:41:bc:e6:e6:
dc:cf:c8:1c:d7:09:0f:43:76:3c:5d:94:70:23:2d:ce:da:26:
9d:19:4e:c6:34:dc:a1:33:1d:c7:e6:0c:3a:96:29:c5:1e:01:
0f:fd:6b:91:b3:11:46:fe:77:f8:7a:d9:47:ea:6f:02:6d:98:
92:a1:5b:de:b3:7b:a4:aa:c7:0d:96:c6:eb:54:7d:2b:9b:94:
f4:2d:34:f9:e2:67:88:f7:ee:1e:73:7e:e1:35:ff:7a:fe:ee:
75:30:9d:e5:8a:6c:96:80:bc:81:aa:22:97:dc:25:57:31:d6:
f3:9f:ab:d7:ab:82:83:8d:7a:e1:71:93:35:32:e2:7b:15:6e:
c8:17:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 14:58:01 2024 by rpki-client on console-fra.rpki-client.org