Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/7X7oVE-R-y7vERxg7eLpVnZNS8k.roa
File: 7X7oVE-R-y7vERxg7eLpVnZNS8k.roa (raw, json)
Hash identifier: gBjloJcnaJtN5a9/tlfDKiRhdMriZhScgxf/Z0c0PH4=
Subject key identifier: ED:7E:E8:54:4F:91:FB:2E:EF:11:1C:60:ED:E2:E9:56:76:4D:4B:C9
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 01909E87BE45F6EE706966360038ECA536A6
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/7X7oVE-R-y7vERxg7eLpVnZNS8k.roa
Signing time: Wed 10 Jul 2024 21:23:34 +0000
ROA not before: Wed 10 Jul 2024 21:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50196
IP address blocks: 77.241.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:87:be:45:f6:ee:70:69:66:36:00:38:ec:a5:36:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jul 10 21:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed7ee8544f91fb2eef111c60ede2e956764d4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:04:f9:28:16:24:54:b9:23:1a:1c:84:d9:
1b:5a:f6:52:5d:5e:8f:e6:74:12:bb:a7:56:1b:9b:
ad:7b:84:5a:ca:b9:7e:a3:31:47:ab:2b:28:99:a6:
01:59:0c:33:8f:47:f2:40:c4:b8:93:fb:7b:fd:17:
d9:e3:b7:44:1f:70:a0:55:b8:da:3c:b1:0d:69:73:
3d:73:11:4f:a3:33:d4:e3:b6:15:ca:f2:a8:65:1a:
42:ec:0b:79:51:ec:29:e8:d2:b9:d9:c1:d9:6c:6b:
82:b4:7f:23:23:20:f1:f3:07:2e:df:cf:87:28:5f:
13:60:a8:85:69:46:de:a1:89:a9:00:f9:c8:f9:3b:
0d:7b:3e:47:de:51:67:0d:1d:f7:6d:ee:08:96:01:
ac:0f:65:d7:86:ac:47:76:e6:1a:b9:06:61:4f:c6:
d7:14:3f:40:ce:cd:8f:71:59:1c:8a:c8:61:2a:04:
9e:96:c5:d5:9f:f4:56:32:85:55:a8:a9:ef:86:c9:
db:23:b1:81:e1:9e:cd:1f:fb:50:59:18:5d:b1:d4:
ed:fc:fd:3a:37:2a:24:20:55:f0:7a:d4:28:17:18:
17:05:5f:51:4f:73:64:f7:00:a7:50:62:56:22:52:
86:62:e1:f0:ba:00:1e:a1:e6:ef:1e:3b:0f:fe:cc:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7E:E8:54:4F:91:FB:2E:EF:11:1C:60:ED:E2:E9:56:76:4D:4B:C9
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/7X7oVE-R-y7vERxg7eLpVnZNS8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.8.0/23
Signature Algorithm: sha256WithRSAEncryption
74:be:eb:2a:b3:b8:3e:1c:f6:a9:b4:d0:e1:75:2c:28:74:d0:
a8:96:42:1b:c3:4b:d8:1b:4f:24:77:09:57:86:ff:03:81:dd:
8e:2a:ce:31:01:57:71:ae:09:3a:28:42:6b:d1:2f:df:46:d1:
49:c2:61:a5:17:f8:ab:03:02:6a:e6:42:c2:76:b0:2d:00:ef:
b4:89:df:7f:72:01:07:59:d5:8b:eb:05:8b:72:6a:b9:17:25:
ee:16:02:28:70:71:37:43:9b:15:5a:fd:82:62:54:ef:89:44:
77:b6:05:9a:0d:15:98:53:88:59:3f:1f:8d:02:9c:99:e6:c6:
9f:47:42:c3:48:60:5a:17:18:d0:50:67:89:da:d0:8e:4c:b7:
f7:a2:cd:fa:e7:ad:eb:17:7e:0e:e4:0e:80:56:6d:30:28:e0:
2c:c6:df:bf:b4:fb:7b:ca:df:01:10:c1:21:b7:5e:7b:83:33:
0e:b7:24:42:47:ba:bb:ba:fd:9d:b4:76:c5:90:e0:4a:49:8f:
10:a6:19:91:8f:25:4c:a3:85:24:34:33:0a:8b:2e:a4:78:35:
a1:2e:0c:2e:76:7f:73:b0:e7:6d:58:c8:a8:77:1e:68:56:c8:
93:89:d7:b1:93:76:7b:84:0b:96:38:f4:ff:94:56:28:df:be:
0f:0b:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:35 2024 by rpki-client on console-fra.rpki-client.org