Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/7_wG1qywB41busNPNyk58KBjTn0.roa
File: 7_wG1qywB41busNPNyk58KBjTn0.roa (raw, json)
Hash identifier: CmAestMIVAI/htSVKCV+fMLI0A+sTiBwEXeUtUi2pSs=
Subject key identifier: EF:FC:06:D6:AC:B0:07:8D:5B:BA:C3:4F:37:29:39:F0:A0:63:4E:7D
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 018CF9076532C51B82F369B3A0F142C36729
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/7_wG1qywB41busNPNyk58KBjTn0.roa
Signing time: Thu 11 Jan 2024 14:57:40 +0000
ROA not before: Thu 11 Jan 2024 14:57:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59625
IP address blocks: 185.240.17.0/24 maxlen: 24
185.240.16.0/24 maxlen: 24
185.240.18.0/24 maxlen: 24
185.240.19.0/24 maxlen: 24
204.154.202.0/24 maxlen: 24
204.154.200.0/24 maxlen: 24
204.154.201.0/24 maxlen: 24
204.154.205.0/24 maxlen: 24
204.154.206.0/24 maxlen: 24
204.154.203.0/24 maxlen: 24
204.154.204.0/24 maxlen: 24
204.154.207.0/24 maxlen: 24
185.84.69.0/24 maxlen: 24
185.84.68.0/24 maxlen: 24
185.84.70.0/24 maxlen: 24
185.84.71.0/24 maxlen: 24
185.244.178.0/24 maxlen: 24
185.244.179.0/24 maxlen: 24
185.244.176.0/24 maxlen: 24
2a03:7020:1::/48 maxlen: 48
2a03:7020:201::/48 maxlen: 48
2a03:7020:10::/48 maxlen: 48
2a03:7020:8::/48 maxlen: 48
2a03:7020:1300::/40 maxlen: 40
2a03:7020:800::/40 maxlen: 40
2a03:7020::/40 maxlen: 40
2a03:7020:1200::/40 maxlen: 40
2a03:7020::/48 maxlen: 48
2a03:7020:200::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:07:65:32:c5:1b:82:f3:69:b3:a0:f1:42:c3:67:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jan 11 14:57:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=effc06d6acb0078d5bbac34f372939f0a0634e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:18:38:f8:ac:c7:44:8a:b9:12:a4:3b:00:
33:4e:d3:37:b9:53:8f:fd:0e:e3:36:1f:f9:16:79:
55:f1:c1:f3:a7:7f:88:b6:5b:0a:08:77:f8:6b:56:
87:a7:80:ac:8e:bf:70:7b:1b:1b:76:50:6a:26:8e:
8d:2d:5c:80:9e:43:ba:b4:da:50:8c:61:9a:e1:d9:
18:1b:8e:aa:5b:4e:0e:0e:bc:79:e1:4d:7b:52:61:
ab:ca:0e:11:ad:28:f1:49:6f:29:20:4a:85:25:e4:
a4:8c:bb:fa:6d:c8:2d:43:50:aa:c8:f7:68:db:9e:
2a:57:42:d4:54:64:b2:32:ba:c0:52:c8:73:f7:3e:
14:5a:b4:a8:fe:30:9f:98:c5:73:5e:33:e6:b7:55:
d4:ec:5a:25:b7:45:ea:34:45:92:29:4c:3d:19:b0:
16:80:16:6d:98:21:ba:37:0e:d4:4c:42:50:ce:0c:
12:22:e8:97:ae:78:6f:f4:05:93:00:69:c5:95:af:
d2:b4:02:4e:5b:e5:a2:68:6d:76:98:7b:21:e1:4e:
48:81:d0:41:cd:da:ea:90:77:09:dc:52:0b:58:f5:
ea:fa:f0:0d:c7:b8:51:4e:d1:54:27:16:1e:f6:b8:
c5:72:3e:b7:99:54:69:50:50:25:bc:c8:2f:da:83:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FC:06:D6:AC:B0:07:8D:5B:BA:C3:4F:37:29:39:F0:A0:63:4E:7D
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/7_wG1qywB41busNPNyk58KBjTn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.68.0/22
185.240.16.0/22
185.244.176.0/24
185.244.178.0/23
204.154.200.0/21
IPv6:
2a03:7020::/40
2a03:7020:200::/47
2a03:7020:800::/40
2a03:7020:1200::/39
Signature Algorithm: sha256WithRSAEncryption
b5:eb:8c:a9:bb:81:df:d9:a5:05:b6:6d:dc:b9:8d:74:e8:88:
00:4e:8a:c4:37:35:f8:d4:2d:7f:ac:dc:be:86:2f:0b:c6:1d:
6e:8e:6c:62:5a:98:9c:b9:71:47:5e:8b:af:7b:5f:0c:e8:d8:
56:da:f1:21:12:3a:7a:be:21:a6:70:4e:6e:2d:13:f2:af:0e:
83:aa:5f:00:d4:30:8b:9c:41:02:a8:c9:85:3b:b1:f4:b7:b8:
62:b6:12:2a:18:ee:b5:b1:f4:f9:5d:f9:6f:35:e4:44:29:51:
00:54:22:ca:d9:b4:ea:bb:da:70:7b:cd:12:b5:e3:75:1e:0a:
6f:51:f0:1d:27:17:51:e9:29:60:b0:8f:dd:5d:ac:23:e9:59:
12:41:ea:77:f5:fc:6a:d3:95:5c:7c:ce:9f:a1:7a:b4:41:c2:
8f:5b:f1:61:52:b7:eb:10:5f:c6:22:ad:44:1b:d7:7e:2b:b5:
4e:a8:bd:c1:09:36:1f:5a:f6:49:ed:e3:1f:e0:a2:fb:28:c0:
5c:e6:59:84:3b:a2:c5:7b:85:0d:90:c3:f0:d3:43:55:2f:87:
cd:85:4b:ba:83:77:85:b1:06:9b:49:22:8d:a3:22:91:a2:a5:
e4:88:50:26:d9:13:e4:ba:ca:8a:e7:55:8a:fa:b4:2e:11:8b:
13:04:ba:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 13:33:17 2024 by rpki-client on console-ams.rpki-client.org