Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7gFne-1PqUcABtA1v1Pb2dm69Wg.roa
File: 7gFne-1PqUcABtA1v1Pb2dm69Wg.roa (raw, json)
Hash identifier: aqfZ4/kRxjZJBnnIGcEnCycjg+IhGiINXChoDLU5oD4=
Subject key identifier: EE:01:67:7B:ED:4F:A9:47:00:06:D0:35:BF:53:DB:D9:D9:BA:F5:68
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB29D12148D765AC157B1C98148FB
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7gFne-1PqUcABtA1v1Pb2dm69Wg.roa
Signing time: Mon 01 Jan 2024 16:30:24 +0000
ROA not before: Mon 01 Jan 2024 16:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57910
IP address blocks: 212.95.210.0/24 maxlen: 24
62.81.173.0/24 maxlen: 24
213.201.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b2:9d:12:14:8d:76:5a:c1:57:b1:c9:81:48:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee01677bed4fa9470006d035bf53dbd9d9baf568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:c0:a7:ed:87:1b:06:3c:c6:db:f1:23:a9:
9e:05:4a:ac:fc:33:ff:53:eb:b7:d9:18:cd:4e:e6:
ae:1e:6c:30:29:c3:1d:64:be:3d:2c:85:22:72:3d:
a9:5b:fe:66:75:3b:d2:fa:bd:71:4a:74:8d:69:55:
e8:db:04:43:70:60:d9:62:2d:2e:10:4c:29:ed:0a:
c0:8b:44:d3:d0:8c:a9:82:a9:68:6e:74:1f:6d:d7:
72:b7:f8:c5:ba:e7:c6:7b:61:d8:f1:d7:71:dd:0d:
91:71:a1:2e:c9:15:76:41:db:19:79:06:c0:b7:70:
0e:89:52:04:ba:66:76:65:a5:eb:ec:ec:65:73:1b:
3a:e2:ac:74:80:63:12:fa:94:f1:2c:35:5d:4d:7a:
62:cc:15:a0:43:6c:e0:3e:8a:b6:47:ef:8b:c6:14:
53:51:73:c8:cb:72:2f:e9:41:06:06:d7:f9:3c:7c:
b0:80:c7:c8:91:bc:61:46:7e:a0:23:55:1a:a3:36:
70:ab:d4:3b:5b:fb:ab:6d:91:7b:ce:2d:45:92:d1:
85:a8:f9:3a:aa:7d:5e:ce:c4:56:7c:cd:36:2a:aa:
9e:85:1c:cf:7a:3a:90:0d:63:22:fe:12:b8:7d:39:
51:53:24:33:38:a7:ca:b2:22:92:64:75:d9:77:80:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:67:7B:ED:4F:A9:47:00:06:D0:35:BF:53:DB:D9:D9:BA:F5:68
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7gFne-1PqUcABtA1v1Pb2dm69Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.81.173.0/24
212.95.210.0/24
213.201.70.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b3:93:3b:1d:14:9b:28:f6:c7:09:17:09:27:34:87:b0:39:
ad:6c:57:17:fb:0a:34:09:c2:a8:ed:a6:3e:56:e0:96:71:f2:
5b:45:99:4c:68:34:4e:58:0f:97:0c:32:c6:04:c5:d0:a1:55:
36:b5:cd:60:2d:0f:d9:82:66:83:8a:d5:17:23:ff:bf:57:52:
03:1a:e1:8a:a0:aa:60:98:7a:95:a3:2c:db:02:ed:ff:6c:68:
2c:fd:88:ae:86:71:1b:11:88:c8:ee:dd:30:ee:3e:a8:58:74:
a9:d3:0c:74:3b:d9:2c:9e:a0:d8:d9:28:b3:1c:0d:92:29:f0:
d1:02:c4:dc:c7:28:62:ec:26:6a:29:b1:4c:4d:0a:66:17:91:
3c:ca:b4:25:c8:3c:0e:82:18:3d:69:76:f9:aa:b1:18:2c:3c:
6c:69:90:fe:73:2f:d3:fe:af:41:b4:ef:78:08:c7:00:3c:39:
fd:be:d6:27:91:d6:05:de:14:77:ae:ec:0e:1f:05:7d:f1:37:
e0:b0:3d:18:3f:61:c1:71:62:98:3a:9d:38:c5:5a:9d:97:67:
c7:c5:d7:fd:a9:1c:bd:cc:d9:c4:87:0f:6b:71:57:39:ed:d3:
b4:81:c7:9e:eb:c1:0b:53:05:8c:d6:fa:a0:89:6f:af:ec:b5:
e1:8c:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:59:09 2024 by rpki-client on console-fra.rpki-client.org