Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/7xGsaDa0fW3ashgtM6KwmBtVwps.roa
File: 7xGsaDa0fW3ashgtM6KwmBtVwps.roa (raw, json)
Hash identifier: HsKiQo+Ma8fHBdJi6/p+EMZuXP9k8MeQGljXctX6J8o=
Subject key identifier: EF:11:AC:68:36:B4:7D:6D:DA:B2:18:2D:33:A2:B0:98:1B:55:C2:9B
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 018CC64B897147DB496994BDF499013DCB20
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/7xGsaDa0fW3ashgtM6KwmBtVwps.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61129
IP address blocks: 185.67.157.0/24 maxlen: 24
185.67.158.0/24 maxlen: 24
185.67.159.0/24 maxlen: 24
185.67.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:89:71:47:db:49:69:94:bd:f4:99:01:3d:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef11ac6836b47d6ddab2182d33a2b0981b55c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f5:90:86:57:7e:34:3c:5d:d2:0f:78:fa:87:
27:1b:28:cb:de:34:23:af:db:a0:63:19:11:90:04:
80:ab:01:55:26:08:53:b2:f2:0f:ce:ee:42:b4:b3:
92:d6:a4:3a:79:a0:b0:6d:82:df:c6:04:25:33:f3:
71:fb:be:35:70:ac:55:17:a3:ad:24:62:3f:fb:4b:
27:c8:17:b1:86:c7:9e:9b:5e:bc:e0:e6:af:c4:3c:
d5:7b:64:13:e8:f2:74:64:fb:51:6f:f4:64:01:7d:
2b:ff:ab:74:96:13:5c:4e:ef:ed:6e:23:5e:d1:6d:
1a:6c:8d:79:48:1f:f1:65:e2:c3:4b:90:6c:24:ee:
79:c1:74:9d:0c:30:26:4c:dd:ad:3d:19:96:a7:de:
78:82:9c:37:49:b3:1b:43:58:4c:00:10:14:fb:03:
37:8f:b5:cd:c5:a4:22:4f:37:21:04:38:30:d3:12:
7e:83:6e:17:bd:04:83:b3:01:19:7b:28:31:de:a0:
f3:f0:bc:30:af:3e:2b:85:2a:25:02:85:97:75:2f:
f3:59:32:a5:cd:07:0f:8f:3c:14:c2:61:f4:df:1b:
d3:70:3c:9b:d5:0a:d6:1c:cf:be:3f:69:d3:f5:65:
91:99:c3:c3:22:70:94:80:82:1b:d1:22:32:ae:92:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:AC:68:36:B4:7D:6D:DA:B2:18:2D:33:A2:B0:98:1B:55:C2:9B
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/7xGsaDa0fW3ashgtM6KwmBtVwps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.156.0/22
Signature Algorithm: sha256WithRSAEncryption
12:12:19:df:db:c3:6c:46:1d:38:b5:90:83:c7:b3:53:38:5b:
93:96:5d:55:45:f3:78:fe:7b:40:29:a0:4a:44:ce:0f:21:71:
d0:83:18:16:56:cd:c2:90:57:5f:0f:fe:8c:e6:d2:9f:67:45:
e8:ae:21:88:92:a2:d5:b2:36:86:f1:6b:ae:98:13:5a:9b:b9:
5c:7a:08:62:51:c6:0e:a3:89:2f:e3:03:46:3c:84:d3:ee:14:
09:f3:1a:bc:0b:fd:4a:f6:6f:67:8b:30:68:b0:80:fb:75:2c:
9b:7b:09:60:ed:d8:3f:2f:f7:73:c2:6e:d5:a1:25:0b:2b:96:
6c:40:ca:1a:31:69:32:65:24:77:ec:62:6c:61:bb:27:65:95:
f0:3d:57:7d:3f:a2:7d:fb:90:c5:78:d8:c2:6e:50:e4:9c:41:
18:b8:08:8d:6a:e3:52:dd:d3:47:d9:16:91:74:0d:b9:a9:71:
a0:5b:51:b1:c9:52:59:60:1b:ac:5b:c3:c5:2e:91:28:0d:82:
9b:a2:f3:71:54:33:fb:95:11:b8:c6:1b:9a:b3:8c:cd:e8:f1:
b6:0f:04:81:c4:9c:35:70:d6:5f:c6:2a:3e:f4:ba:e8:4f:62:
32:4d:21:c2:e3:a9:8b:86:c5:88:6e:03:c5:5f:45:09:39:c8:
8e:cf:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:10 2024 by rpki-client on console-fra.rpki-client.org