Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Q9afaF_f7DEIoVFyR_Etja3rWrY.roa
File: Q9afaF_f7DEIoVFyR_Etja3rWrY.roa (raw, json)
Hash identifier: xI63as0J2f18moZpoGR8oIuqJSNei+zQkIA3Y4EXuvo=
Subject key identifier: 43:D6:9F:68:5F:DF:EC:31:08:A1:51:72:47:F1:2D:8D:AD:EB:5A:B6
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018CC87105B1ACDF71CFDD6E00AB549BFCBB
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Q9afaF_f7DEIoVFyR_Etja3rWrY.roa
Signing time: Tue 02 Jan 2024 04:31:39 +0000
ROA not before: Tue 02 Jan 2024 04:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61156
IP address blocks: 185.17.84.0/22 maxlen: 22
185.17.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 13:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:05:b1:ac:df:71:cf:dd:6e:00:ab:54:9b:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Jan 2 04:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43d69f685fdfec3108a1517247f12d8dadeb5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:1f:42:38:fd:21:cc:1d:55:aa:f3:d2:0e:
5a:09:58:e7:d4:e5:57:02:e6:6d:97:a6:dc:2f:f0:
fd:38:31:70:50:e3:da:6d:96:e3:8a:ae:22:da:cd:
c6:d6:77:5a:76:3e:ae:08:c7:91:a0:51:6a:53:fd:
c1:75:e7:d5:e3:ce:5e:0f:6e:e8:b6:24:69:3d:64:
bc:22:a4:eb:e6:dd:cd:f9:5e:fa:69:c8:b4:39:c0:
d8:bc:03:8b:12:1a:ce:fa:c9:4f:ae:a9:4f:ac:2d:
45:10:41:07:b0:18:5e:6c:b2:02:31:9d:9f:df:0b:
69:f4:02:39:48:f5:2d:00:16:72:da:43:cf:7e:35:
7d:e3:d2:be:b2:44:29:8d:62:29:7a:44:81:b1:29:
a3:3f:81:34:75:c0:95:37:d1:d5:9f:e3:d0:4b:ef:
5b:4a:22:b5:09:04:1c:98:cc:17:03:99:d3:c9:ed:
03:ba:96:2f:da:06:95:89:92:0d:4e:4c:c2:b8:52:
47:22:ac:a2:26:ca:65:88:28:5a:14:1d:b5:bf:be:
97:15:75:f3:bb:7f:4d:3b:3a:03:38:83:07:f5:0b:
cc:0f:5e:f8:b5:cb:b9:c4:49:e3:e1:5e:e7:9f:eb:
d1:0e:11:cc:fb:d4:17:81:4c:76:2f:9e:3b:69:5b:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:9F:68:5F:DF:EC:31:08:A1:51:72:47:F1:2D:8D:AD:EB:5A:B6
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/Q9afaF_f7DEIoVFyR_Etja3rWrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.84.0/22
Signature Algorithm: sha256WithRSAEncryption
18:db:db:d3:e2:c2:86:48:af:ff:c0:93:c6:5f:75:6e:9e:21:
91:6b:bd:68:8b:78:80:18:2a:4d:4e:17:d1:b5:be:72:3f:48:
79:17:22:b5:33:76:f2:43:28:a2:65:5e:2e:e8:c2:b8:f9:6d:
a8:52:49:fd:eb:4a:54:6b:d2:00:2c:cd:17:40:10:2a:3f:0c:
ff:1d:a0:a9:70:c2:8b:06:97:9c:e0:a8:c2:3d:dc:3b:9b:96:
0f:cb:31:d6:f2:12:8b:4f:4e:f0:93:d5:0b:11:67:33:7e:e7:
50:85:fd:34:3f:16:11:2c:06:10:ce:d9:3d:ae:a1:41:71:ec:
12:7f:de:22:ba:1f:94:a1:21:b6:57:29:28:e4:cb:c4:20:e1:
fe:7a:e9:ac:94:e8:e9:10:7d:13:6f:4b:32:ba:1f:08:b2:c0:
0c:32:24:32:a3:68:09:f3:f1:98:c0:a7:5f:39:18:e8:6e:8f:
d5:82:86:5e:9b:f5:ae:bf:b3:43:48:f8:74:e2:8c:fa:ea:71:
f6:da:cb:7c:e6:9d:31:e3:a5:75:ad:39:95:8d:9b:42:58:5d:
cd:15:31:77:1a:22:9d:3e:75:f6:62:91:35:db:c7:03:88:9f:
95:16:d9:31:a1:5e:a7:67:00:8a:28:3a:fa:74:b8:c8:8d:7a:
34:a1:fc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:13:00 2024 by rpki-client on console-fra.rpki-client.org