Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/ee37kDyP0109GUEWOdcBQHrOBdU.roa
File: ee37kDyP0109GUEWOdcBQHrOBdU.roa (raw, json)
Hash identifier: +rt0B1PNbC/8wLN0LvlzqgcCbKE+vn3mXw6pzXvbZOg=
Subject key identifier: 79:ED:FB:90:3C:8F:D3:5D:3D:19:41:16:39:D7:01:40:7A:CE:05:D5
Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial: 018CC3B71A5D03274BC477136B079E5EDDE5
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/ee37kDyP0109GUEWOdcBQHrOBdU.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204903
IP address blocks: 185.236.106.0/24 maxlen: 24
185.236.107.0/24 maxlen: 24
185.236.105.0/24 maxlen: 24
185.236.104.0/24 maxlen: 24
185.236.104.0/22 maxlen: 22
2a12:7bc0:104::/48 maxlen: 48
2a12:7bc0:105::/48 maxlen: 48
2a12:7bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 15:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1a:5d:03:27:4b:c4:77:13:6b:07:9e:5e:dd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79edfb903c8fd35d3d19411639d701407ace05d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:16:f3:a2:97:85:6a:6d:9f:1a:db:51:db:
da:2e:a7:05:58:e3:0a:e5:b0:a6:d9:e2:a3:6b:5b:
98:15:44:4d:aa:f0:35:2a:54:8f:5a:09:db:9b:4b:
01:c7:55:41:d5:dd:56:38:ea:82:04:12:a6:43:2c:
14:7b:cb:79:08:6c:bc:01:da:6c:03:b1:0d:c7:79:
e4:5d:5f:9f:65:a3:ed:fc:40:98:fd:46:c2:5f:19:
12:c3:10:36:04:c5:8f:c9:f6:a2:fa:e9:86:35:da:
ae:b7:03:8c:6d:15:a0:dc:f0:88:38:9c:bf:a2:01:
ba:41:28:74:0a:b7:5d:fe:cd:08:64:21:8d:0c:7a:
07:9c:e8:85:4f:d5:5a:0b:5c:81:12:27:da:8b:f3:
0e:e9:02:09:8b:a0:91:8a:db:06:e3:ed:03:0e:ec:
a6:be:86:60:c0:a9:8f:6a:57:a6:2f:72:b5:33:22:
38:b4:70:f2:11:de:b6:cd:30:98:e9:6e:0a:ef:31:
bb:35:37:8e:35:54:66:09:90:0a:91:24:e8:79:3d:
2a:89:fa:d1:50:38:60:6d:42:dc:98:61:2f:3c:61:
b2:65:c2:d3:25:bf:c3:6f:cb:f8:04:e2:50:01:98:
76:37:62:b2:0a:90:8b:90:d8:30:6a:e9:6d:36:85:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:FB:90:3C:8F:D3:5D:3D:19:41:16:39:D7:01:40:7A:CE:05:D5
X509v3 Authority Key Identifier:
keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/ee37kDyP0109GUEWOdcBQHrOBdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.104.0/22
IPv6:
2a12:7bc0::/32
Signature Algorithm: sha256WithRSAEncryption
e1:7c:89:c4:f2:08:a1:12:c6:0a:08:4c:a2:71:29:9c:c6:bd:
29:9e:ae:eb:14:3c:60:8c:dc:c7:34:97:7c:70:7b:6f:69:41:
07:ef:1b:a6:91:b1:05:1a:30:ff:5c:07:da:08:7d:36:41:8f:
ad:c2:6e:60:4e:e6:40:8d:a0:d2:94:c1:cc:ce:7c:85:73:5c:
18:b5:85:6a:ac:52:9d:71:54:8b:78:ed:57:2b:47:dc:82:b8:
07:5f:d8:a4:78:8c:b4:a2:02:32:42:f3:c6:1a:34:1b:21:36:
4c:65:3a:40:12:77:05:5d:85:ff:5a:a5:dc:1b:0e:3b:d2:72:
d8:19:f2:bf:30:22:18:63:14:b0:c9:ed:d9:22:f5:4a:ec:d0:
3e:d6:40:8a:0b:a8:47:60:35:90:88:74:0a:ea:ac:e1:cf:e7:
24:09:6f:40:75:40:26:b6:cd:ba:31:17:21:32:a9:3d:24:ee:
62:de:67:76:b2:03:09:c5:fb:82:d9:f8:5e:cf:44:aa:13:2f:
d3:ce:0d:75:80:f1:29:49:3e:e1:31:16:a9:c7:c0:ac:20:bf:
16:08:3e:fc:57:cc:31:6d:1b:dc:29:a0:3f:27:98:08:89:39:
a1:ad:8c:ae:9f:76:c4:5c:4e:a4:a3:04:b6:8c:54:78:1d:f3:
c1:57:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 22:15:44 2024 by rpki-client on console-ams.rpki-client.org