Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/ercIdVlJkxIKH02ojT5ZiihhpTs.roa
File: ercIdVlJkxIKH02ojT5ZiihhpTs.roa (raw, json)
Hash identifier: nsG7MsUXGZZFjHZPahiuShhI5hH9Nivx8Qktb0xnyIQ=
Subject key identifier: 7A:B7:08:75:59:49:93:12:0A:1F:4D:A8:8D:3E:59:8A:28:61:A5:3B
Certificate issuer: /CN=9258825767fbc083732a96e1812ccc5bfe150185
Certificate serial: 018CC5DD0EDD94E82E6CC29AA4615868A242
Authority key identifier: 92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/ercIdVlJkxIKH02ojT5ZiihhpTs.roa
Signing time: Mon 01 Jan 2024 16:30:47 +0000
ROA not before: Mon 01 Jan 2024 16:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48803
IP address blocks: 185.67.56.0/22 maxlen: 22
217.73.96.0/20 maxlen: 20
2a00:c740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:0e:dd:94:e8:2e:6c:c2:9a:a4:61:58:68:a2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9258825767fbc083732a96e1812ccc5bfe150185
Validity
Not Before: Jan 1 16:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab70875594993120a1f4da88d3e598a2861a53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:22:9d:da:2a:f0:00:0a:05:a3:02:1e:8e:
92:b1:24:de:ad:0f:b9:07:ab:4a:5f:7c:d0:8b:97:
03:28:23:e0:ef:f5:83:9f:ff:a8:9f:e2:a7:0f:93:
4c:67:8b:be:66:ce:91:dd:0b:69:d7:52:da:b5:9f:
e4:4d:5c:eb:c8:b6:19:4e:87:ec:de:57:fb:63:97:
8e:96:fa:4c:6f:8e:35:45:74:77:25:b2:01:a0:42:
12:59:cc:9f:53:c8:eb:d6:31:d8:6d:71:7b:73:93:
f1:19:19:cf:34:b0:f4:d3:9c:58:c4:fd:70:2a:95:
b9:e2:b4:c3:50:ab:3d:e8:90:cb:e4:e8:5f:33:9c:
2d:51:aa:b8:e5:f0:ba:c2:bd:89:8b:0d:ad:69:ac:
49:33:89:cf:90:af:7d:7c:e7:f6:da:08:0e:34:2c:
3d:dd:93:88:72:ee:f9:be:b0:be:9b:de:18:2d:28:
bd:60:c6:6f:85:8d:02:12:0c:d9:bb:21:94:22:61:
cd:a6:e4:3a:9d:d4:f8:c8:5d:22:1c:23:67:99:d8:
62:05:ce:11:f5:49:cf:3f:a2:c6:66:0f:a6:fd:6d:
bb:17:88:72:c1:d1:de:b7:c2:57:28:91:f1:3c:a7:
ea:54:1e:dc:0e:bb:ec:45:98:76:4b:03:23:a2:5a:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:08:75:59:49:93:12:0A:1F:4D:A8:8D:3E:59:8A:28:61:A5:3B
X509v3 Authority Key Identifier:
keyid:92:58:82:57:67:FB:C0:83:73:2A:96:E1:81:2C:CC:5B:FE:15:01:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kliCV2f7wINzKpbhgSzMW_4VAYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/ercIdVlJkxIKH02ojT5ZiihhpTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7b6677-d2c4-4191-9fee-bd19b0836151/1/kliCV2f7wINzKpbhgSzMW_4VAYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.56.0/22
217.73.96.0/20
IPv6:
2a00:c740::/32
Signature Algorithm: sha256WithRSAEncryption
8d:04:2b:74:80:7f:18:d5:17:48:a7:02:70:49:57:7c:4e:bb:
e3:12:b5:af:88:54:82:c2:da:24:d8:d0:bf:95:03:c5:df:01:
c7:71:9f:a3:31:d7:b0:96:b9:dc:d2:09:bd:5b:ec:5f:54:19:
52:ec:6e:5c:69:8c:4e:08:1e:eb:c4:74:6e:40:df:87:7c:9b:
17:c7:57:a7:01:8b:df:c4:aa:eb:67:d9:2d:30:77:01:60:f5:
98:e6:87:85:e1:fe:0e:19:5e:2a:20:98:cc:45:8d:91:ba:7d:
66:de:6f:40:5d:4b:92:8b:81:8b:89:6f:f2:b5:57:5b:3d:43:
64:ad:1d:e1:fe:7c:e4:73:c0:f4:12:d2:50:4c:0f:b8:f7:0c:
cf:d6:9a:98:ec:6e:9f:f6:c3:c5:1c:46:ad:5b:e2:44:4c:50:
e3:d8:11:40:b7:ac:0b:48:1f:95:38:74:90:7c:14:40:79:03:
40:ce:b5:49:69:4c:7e:9f:d7:3b:f7:ee:0c:05:f0:5c:d9:29:
a3:1b:8c:55:ee:ea:99:3d:02:1a:42:24:b4:36:74:26:eb:93:
02:24:59:fb:ef:c4:eb:49:da:c0:fe:a2:e4:6c:be:d5:66:72:
9b:d5:48:67:6c:38:5e:e7:f8:82:b8:80:1f:32:5c:9e:3c:c7:
b9:f6:56:e3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzF3Q7dlOgubMKapGFYaKJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTg4MjU3NjdmYmMwODM3MzJhOTZlMTgxMmNjYzViZmUx
NTAxODUwHhcNMjQwMTAxMTYzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI3MDg3NTU5NDk5MzEyMGExZjRkYTg4ZDNlNTk4YTI4NjFhNTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh94indoq8AAKBaMCHo6SsSTerQ+5
B6tKX3zQi5cDKCPg7/WDn/+on+KnD5NMZ4u+Zs6R3Qtp11LatZ/kTVzryLYZTofs
3lf7Y5eOlvpMb441RXR3JbIBoEISWcyfU8jr1jHYbXF7c5PxGRnPNLD005xYxP1w
KpW54rTDUKs96JDL5OhfM5wtUaq45fC6wr2Jiw2taaxJM4nPkK99fOf22ggONCw9
3ZOIcu75vrC+m94YLSi9YMZvhY0CEgzZuyGUImHNpuQ6ndT4yF0iHCNnmdhiBc4R
9UnPP6LGZg+m/W27F4hywdHet8JXKJHxPKfqVB7cDrvsRZh2SwMjoloRGwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHq3CHVZSZMSCh9NqI0+WYooYaU7MB8GA1UdIwQY
MBaAFJJYgldn+8CDcyqW4YEszFv+FQGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xpQ1YyZjd3SU56S3BiaGdTek1XXzRWQVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83YjY2NzctZDJjNC00MTkxLTlmZWUt
YmQxOWIwODM2MTUxLzEvZXJjSWRWbEpreElLSDAyb2pUNVppaWhocFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS83YjY2NzctZDJjNC00MTkxLTlmZWUtYmQxOWIwODM2MTUx
LzEva2xpQ1YyZjd3SU56S3BiaGdTek1XXzRWQVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuUM4AwQE
2UlgMA0EAgACMAcDBQAqAMdAMA0GCSqGSIb3DQEBCwUAA4IBAQCNBCt0gH8Y1RdI
pwJwSVd8TrvjErWviFSCwtok2NC/lQPF3wHHcZ+jMdewlrnc0gm9W+xfVBlS7G5c
aYxOCB7rxHRuQN+HfJsXx1enAYvfxKrrZ9ktMHcBYPWY5oeF4f4OGV4qIJjMRY2R
un1m3m9AXUuSi4GLiW/ytVdbPUNkrR3h/nzkc8D0EtJQTA+49wzP1pqY7G6f9sPF
HEatW+JETFDj2BFAt6wLSB+VOHSQfBRAeQNAzrVJaUx+n9c79+4MBfBc2SmjG4xV
7uqZPQIaQiS0NnQm65MCJFn778TrSdrA/qLkbL7VZnKb1UhnbDhe5/iCuIAfMlye
PMe59lbj
-----END CERTIFICATE-----
Generated at Sun Jun 30 12:43:04 2024 by rpki-client on console-fra.rpki-client.org