Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/7QZzTpmK8j6kYf_BOcRFYMJnN_Q.roa
File: 7QZzTpmK8j6kYf_BOcRFYMJnN_Q.roa (raw, json)
Hash identifier: X+EJ++7jSAvSrQm/w2N2Rr4ICUe0q4AsohTHfII4z20=
Subject key identifier: ED:06:73:4E:99:8A:F2:3E:A4:61:FF:C1:39:C4:45:60:C2:67:37:F4
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 018F06AFB1780C77DEFFC68032398F00C3FB
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/7QZzTpmK8j6kYf_BOcRFYMJnN_Q.roa
Signing time: Mon 22 Apr 2024 16:42:08 +0000
ROA not before: Mon 22 Apr 2024 16:42:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.131.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:af:b1:78:0c:77:de:ff:c6:80:32:39:8f:00:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Apr 22 16:42:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed06734e998af23ea461ffc139c44560c26737f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:47:a8:c1:9b:b6:a8:98:93:47:1a:44:5b:
af:10:aa:4e:8c:54:e9:63:01:4a:e3:1a:13:7d:43:
2b:ed:65:e1:c3:99:cb:64:83:aa:29:62:5c:97:df:
1d:d8:a7:96:b9:82:75:01:a7:e0:0a:08:ce:c8:39:
40:95:40:64:05:4a:a2:60:40:87:d0:cf:a1:f8:c6:
f2:70:69:ba:ca:fa:fd:a7:53:98:a4:51:78:3e:29:
7c:5b:09:4a:0a:02:9a:49:7d:26:1f:b9:26:18:25:
f3:87:5b:41:c8:e8:29:e2:05:a6:43:8f:19:19:12:
93:eb:fb:49:ee:50:40:dd:12:31:ec:8b:65:99:bf:
bf:6c:f2:15:29:5b:5f:5f:90:19:5a:2d:7c:77:e0:
48:a9:48:98:26:0e:e7:ec:06:7b:00:f4:21:8d:94:
9e:83:77:52:22:c9:15:eb:03:c6:90:9a:3e:5c:45:
b0:57:0f:02:8b:f6:ea:25:b1:2d:44:7c:29:51:91:
52:f9:89:04:19:db:72:54:33:db:bd:46:07:60:29:
a9:8a:4f:fe:d2:16:f1:61:73:ff:db:d1:4a:05:e7:
60:b8:3f:7a:1a:e8:42:45:5d:4e:a7:3f:c2:11:f1:
85:e3:21:47:1d:d1:31:0c:01:d9:7a:37:12:f5:8f:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:73:4E:99:8A:F2:3E:A4:61:FF:C1:39:C4:45:60:C2:67:37:F4
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/7QZzTpmK8j6kYf_BOcRFYMJnN_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.230.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cb:33:94:13:7d:dc:4b:7b:9d:73:65:7a:71:a5:91:23:73:
d9:86:2f:2a:bf:08:ab:bf:2a:92:19:f8:65:12:06:69:fb:ba:
7e:f8:f0:8c:ce:ad:43:c6:7e:8e:9f:6d:0f:a9:15:5d:3b:db:
6b:66:5c:f4:32:11:2b:d3:bf:0c:0a:b0:96:38:07:0a:17:15:
b2:43:6b:f9:83:87:60:e0:3e:a5:f2:5e:60:56:59:0b:c6:cc:
85:c0:a7:12:7a:5c:87:ab:60:03:3f:ac:f6:69:ca:e7:1b:7d:
da:e7:0b:1c:22:9e:71:07:f7:99:11:eb:15:d8:fe:ff:87:96:
b5:d8:38:42:a5:ba:44:aa:7f:ff:e1:35:4b:20:54:ef:40:f4:
2c:f0:cf:fe:29:7f:ac:8b:ca:79:87:2a:09:e5:41:d0:ec:78:
53:5a:7b:5c:3e:ca:6b:08:fa:95:f4:e5:ff:eb:bf:a8:f2:d4:
05:5e:ab:c2:9c:99:03:ef:fb:95:57:14:04:43:18:69:8a:1f:
7b:24:d2:9b:86:99:34:65:ea:3c:0f:31:ab:de:0f:88:29:38:
b5:d3:9b:fb:f5:0c:6c:95:66:09:ee:87:cf:36:42:5b:a1:4b:
ad:d0:28:e2:27:4d:98:ee:5a:88:db:f9:7f:a0:9c:8a:1c:4f:
e5:e9:f5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:27:11 2024 by rpki-client on console-ams.rpki-client.org