Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9i7ZGuL3D78BGpwUjL3Tzuknt70.roa
File: 9i7ZGuL3D78BGpwUjL3Tzuknt70.roa (raw, json)
Hash identifier: xxo6aFSG1iC76OuOTDcuglJ3kApRznhnGaIbZkcee5I=
Subject key identifier: F6:2E:D9:1A:E2:F7:0F:BF:01:1A:9C:14:8C:BD:D3:CE:E9:27:B7:BD
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 018F8C79822CCFF4615E417F6F7C755C89A5
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9i7ZGuL3D78BGpwUjL3Tzuknt70.roa
Signing time: Sat 18 May 2024 16:12:04 +0000
ROA not before: Sat 18 May 2024 16:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56913
IP address blocks: 185.233.164.0/24 maxlen: 24
185.233.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:79:82:2c:cf:f4:61:5e:41:7f:6f:7c:75:5c:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: May 18 16:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f62ed91ae2f70fbf011a9c148cbdd3cee927b7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:dc:0d:de:e3:ef:a8:7f:c6:da:de:09:ff:
40:3b:0f:3d:51:97:66:39:13:66:d1:f8:86:d6:c2:
d6:cb:d2:9f:06:d5:10:fe:3e:7b:6b:d0:00:02:79:
7c:85:b9:ce:9f:94:99:6e:aa:71:84:da:5c:14:52:
98:b4:c3:db:4b:af:2a:24:17:81:44:d5:b5:89:dd:
1f:8c:2b:b6:64:a0:2d:2b:ea:cc:f9:93:90:be:be:
ff:13:22:f1:71:e4:e5:10:f8:cd:cd:dd:b0:be:28:
40:5e:62:a5:0b:3f:2f:bf:ec:15:cf:c4:54:d7:88:
47:53:1b:ff:73:62:db:fe:71:ae:3e:8c:4f:12:cb:
ff:6d:8f:91:2e:06:15:8e:ac:06:bd:f2:b7:02:5e:
4f:27:d5:87:c9:65:21:13:5c:6b:84:93:bb:dc:b0:
4b:44:e4:06:2f:95:45:4e:98:da:50:b4:0d:b3:dd:
6b:a9:af:de:ec:08:e9:18:a6:b2:7f:98:ca:1b:2c:
d4:00:fb:c6:e1:da:ac:58:b3:0d:be:5d:9a:0f:a3:
17:dc:62:03:67:71:71:bf:57:47:2e:b0:5a:92:e1:
ec:51:f1:4a:01:b2:c2:bb:3f:ca:40:fa:a7:e2:2b:
f5:6b:05:9f:87:18:30:13:81:9d:f0:49:01:d7:76:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:D9:1A:E2:F7:0F:BF:01:1A:9C:14:8C:BD:D3:CE:E9:27:B7:BD
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/9i7ZGuL3D78BGpwUjL3Tzuknt70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.164.0/24
185.233.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:55:d2:90:23:b0:7e:62:57:76:39:3a:df:e8:c2:f7:0f:d8:
b3:70:38:e0:2a:d5:24:09:ab:06:24:1b:47:3e:e1:0e:3f:28:
01:32:59:0b:68:62:50:60:46:dd:62:e2:c8:65:bd:14:0d:bb:
01:79:fa:0c:1a:35:7b:dc:c2:b9:3e:03:7e:96:7f:d4:fd:36:
54:9f:e7:9d:51:22:34:fd:9e:3a:d3:c3:6b:2d:a9:24:ac:30:
44:cf:9f:d0:42:0d:80:42:3b:85:95:16:e2:ee:ef:11:9a:63:
65:7f:e1:17:1c:f7:2f:32:f1:cc:b2:15:4b:4f:75:3f:c4:91:
f9:be:7b:3e:3b:b6:67:f3:44:42:5f:b8:99:81:b9:97:9e:c1:
81:4c:e0:0b:71:e3:a8:48:e8:55:18:f4:b8:e3:eb:b6:17:f6:
a3:e3:bd:4c:a7:b4:a5:de:dc:10:c2:e4:e2:99:70:64:5b:bd:
25:48:dd:a1:cd:50:74:b7:33:ec:b3:4e:e1:cd:eb:e9:1e:bd:
9e:1c:5e:01:34:65:d0:53:0b:06:ca:82:ea:68:23:7a:d3:03:
6e:24:81:6d:40:cb:6e:ba:4a:65:a9:2d:d9:1a:aa:06:8b:e8:
da:fd:8f:4d:22:cf:e4:74:03:3b:5a:95:1a:9a:b4:88:bb:88:
03:52:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:01 2024 by rpki-client on console-fra.rpki-client.org