Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/7GHI4QuVrAkRYG1t18ix54B05QU.roa
File: 7GHI4QuVrAkRYG1t18ix54B05QU.roa (raw, json)
Hash identifier: 5IK+bpb3qI93xt5wRqboWXMk6O+FnqaxD8zFDhl3mOs=
Subject key identifier: EC:61:C8:E1:0B:95:AC:09:11:60:6D:6D:D7:C8:B1:E7:80:74:E5:05
Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial: 018CC64B309C4F92E7DE13A3F7316BABDAD3
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/7GHI4QuVrAkRYG1t18ix54B05QU.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206348
IP address blocks: 89.47.8.0/23 maxlen: 24
2a12:bb40::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:30:9c:4f:92:e7:de:13:a3:f7:31:6b:ab:da:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec61c8e10b95ac0911606d6dd7c8b1e78074e505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:14:b6:3a:16:cf:b6:96:2b:4b:a4:86:c5:
d8:ef:b7:c1:57:58:c7:63:10:a8:65:ab:3e:17:7f:
55:99:21:c4:13:47:56:0f:e1:d1:fd:a0:29:b9:61:
4c:d0:75:1d:c8:c0:cb:a3:f7:ca:27:4b:8c:a0:5b:
ef:8d:a8:a8:2f:a1:bd:e0:cf:a2:0a:7a:c3:5e:d0:
d5:61:d9:da:76:6c:f6:3f:52:cc:e4:57:95:ee:a3:
ad:1f:8d:1a:0c:a8:6c:f1:f9:e0:20:2a:e5:ee:30:
88:fe:83:48:cd:1e:12:7a:b1:42:24:41:68:f5:c4:
05:fb:73:53:01:b8:7d:90:3b:a6:82:8c:48:2c:36:
0c:2a:3b:4d:05:60:46:ca:cf:9a:cf:b6:e0:19:3c:
94:7e:7d:92:73:df:5f:ae:1e:9b:3f:c9:0c:69:8e:
d9:72:09:7c:e2:68:e8:35:ff:7a:16:42:ef:02:5f:
c5:93:5e:a6:2b:b6:44:f1:e9:16:e5:a8:89:d0:e3:
02:67:a6:d9:31:de:c9:7d:1b:ee:27:27:26:f0:0c:
af:b2:0f:8e:ad:97:8b:95:f4:f8:b5:e6:79:cb:5a:
34:ca:01:fa:5a:bc:42:b9:56:ce:ab:cb:d5:89:25:
a0:ef:fa:a4:06:09:b6:61:1d:46:3b:b9:7b:df:df:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:C8:E1:0B:95:AC:09:11:60:6D:6D:D7:C8:B1:E7:80:74:E5:05
X509v3 Authority Key Identifier:
keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/7GHI4QuVrAkRYG1t18ix54B05QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.8.0/23
IPv6:
2a12:bb40::/29
Signature Algorithm: sha256WithRSAEncryption
8a:c9:55:9f:90:4f:a9:5f:14:82:6f:90:9b:e7:29:d5:33:4c:
24:f1:e6:06:06:ce:73:47:08:31:2a:e1:93:99:30:c0:d7:ac:
aa:4d:eb:1f:9e:78:4d:6d:46:cf:9b:91:d3:c2:44:ed:b8:9b:
cf:a7:60:68:8f:14:8b:97:0b:23:50:bc:7e:b8:2a:d8:a4:26:
f6:e0:85:9f:cb:32:6c:a9:44:ab:d0:fa:b7:ce:5c:97:1f:bd:
5b:7b:bb:24:49:2f:cb:5c:ae:22:d4:4a:2b:8b:0c:11:1f:c1:
7e:b2:f0:e9:0e:39:2d:78:3b:10:ac:38:0c:4f:ee:0d:99:cd:
5b:c0:46:8c:94:be:2e:69:d0:e8:a7:61:20:c7:ae:79:c8:3b:
a5:6a:d5:9d:00:94:13:6a:b1:71:88:c0:7c:e3:4d:7f:c2:46:
69:f8:51:0c:4d:03:52:dc:79:26:16:f7:92:1e:0c:97:1e:7c:
ec:86:ad:4c:d9:da:8c:68:0e:98:48:78:07:2b:e4:8a:b5:e2:
3a:d2:b6:c6:f5:2e:ba:14:32:fd:d3:74:79:41:d9:0c:b8:a9:
5e:3c:58:9b:9c:95:7a:b8:43:28:fa:eb:85:81:15:56:b0:1e:
03:43:ed:82:3b:bc:d5:ab:67:00:72:c3:94:25:1e:47:5c:43:
69:21:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:26:46 2024 by rpki-client on console-fra.rpki-client.org