Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/7RAczYHE_8x5Ta5_X3F43CPBAyk.roa
File: 7RAczYHE_8x5Ta5_X3F43CPBAyk.roa (raw, json)
Hash identifier: HGCjkPuehfTv1FX0y0x1Y4EDiijD4RTP3U+UeNIU3D0=
Subject key identifier: ED:10:1C:CD:81:C4:FF:CC:79:4D:AE:7F:5F:71:78:DC:23:C1:03:29
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 018CC26D38DB31D4002381387EA9627ADD61
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/7RAczYHE_8x5Ta5_X3F43CPBAyk.roa
Signing time: Mon 01 Jan 2024 00:29:46 +0000
ROA not before: Mon 01 Jan 2024 00:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39568
IP address blocks: 185.230.206.0/24 maxlen: 24
185.230.205.0/24 maxlen: 24
185.230.204.0/24 maxlen: 24
185.230.204.0/22 maxlen: 22
185.230.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:38:db:31:d4:00:23:81:38:7e:a9:62:7a:dd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Jan 1 00:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed101ccd81c4ffcc794dae7f5f7178dc23c10329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:82:96:f3:8d:98:84:98:69:10:3f:32:5e:
2d:cd:9a:a8:0a:c5:b6:da:d7:ec:f5:c9:4c:81:a8:
32:47:86:7b:00:b6:e5:ef:04:47:52:1a:ff:77:12:
d5:5e:45:57:5e:eb:10:b5:d9:e4:d9:60:b9:a9:8b:
9f:ae:7a:89:11:96:3a:e2:be:98:10:71:c6:31:f9:
db:e3:4a:f9:c7:e2:30:4d:40:9a:96:7e:0e:2c:38:
ff:09:3e:e3:95:e6:0b:c3:cd:6f:cc:fe:b6:81:dc:
21:51:62:e2:bc:64:4a:42:39:ff:ee:c2:4e:4a:77:
e3:b6:b4:53:9b:ad:82:48:60:0e:e1:52:cf:80:7c:
0f:5f:97:25:95:00:19:0b:fd:92:44:ef:74:8e:14:
aa:86:68:1c:5b:51:be:34:7b:e9:d3:3d:08:37:dc:
4e:d1:d2:45:47:40:7c:df:c0:41:91:70:6b:35:e4:
9c:34:de:f1:cd:24:ff:5b:db:0e:56:f4:f7:06:1c:
3b:2e:d6:de:22:31:49:de:bb:2c:51:79:01:9b:c6:
15:31:25:3f:2d:b1:a7:9e:d5:b0:b6:10:82:41:25:
f7:06:62:8b:b6:f8:28:e9:66:30:d4:79:0b:79:ee:
45:e4:2b:93:00:22:af:f7:05:9c:41:6c:dd:d7:fc:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:10:1C:CD:81:C4:FF:CC:79:4D:AE:7F:5F:71:78:DC:23:C1:03:29
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/7RAczYHE_8x5Ta5_X3F43CPBAyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.204.0/22
Signature Algorithm: sha256WithRSAEncryption
59:14:cb:65:a4:2c:a0:02:76:08:a2:3e:85:42:21:77:2d:f1:
30:54:03:29:f0:f3:c6:b2:70:fe:fd:55:42:c7:31:06:65:d0:
fc:d1:9e:ce:56:16:54:09:79:1b:36:06:a6:6d:fd:e3:7e:35:
87:e9:eb:07:81:42:04:e9:cf:f0:2e:7b:07:14:1b:3f:38:d2:
52:4e:27:c4:57:e3:2e:b8:9e:82:e9:5f:84:fa:b9:18:cc:9f:
4b:0d:3e:27:61:0d:1c:44:ee:64:7d:03:20:66:35:5d:54:6d:
f8:fd:e0:f3:a2:68:53:7e:ea:6b:bf:ef:99:9c:4d:cf:81:69:
11:08:be:5c:8d:52:60:48:10:8d:52:d7:86:c2:0f:2b:96:1d:
5a:50:e8:7e:52:a5:a0:6f:b9:71:34:77:26:59:8c:e5:b1:67:
8c:ad:9c:a5:af:29:95:78:ec:26:35:8c:5a:e6:42:ca:35:f7:
fa:8c:24:9d:9b:b2:34:3f:d6:1f:11:91:4b:f9:df:1f:ef:e2:
7e:76:17:f9:42:27:c9:fd:a8:e8:8e:35:ed:ad:fa:a0:cb:50:
f0:cd:fd:35:24:a6:64:95:e9:78:1f:17:8b:04:18:2f:37:05:
3a:ee:fa:4c:0b:cc:80:bf:09:36:7a:f0:e7:1d:de:11:b3:26:
dd:7b:3b:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbTjbMdQAI4E4fqliet1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZmEzY2FkY2E0ZTEzMWEwZmJlMWI5ZTQwZGJhMzgzODMz
Y2Y0OGEwHhcNMjQwMTAxMDAyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDEwMWNjZDgxYzRmZmNjNzk0ZGFlN2Y1ZjcxNzhkYzIzYzEwMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxGClvONmISYaRA/Ml4tzZqoCsW2
2tfs9clMgagyR4Z7ALbl7wRHUhr/dxLVXkVXXusQtdnk2WC5qYufrnqJEZY64r6Y
EHHGMfnb40r5x+IwTUCaln4OLDj/CT7jleYLw81vzP62gdwhUWLivGRKQjn/7sJO
SnfjtrRTm62CSGAO4VLPgHwPX5cllQAZC/2SRO90jhSqhmgcW1G+NHvp0z0IN9xO
0dJFR0B838BBkXBrNeScNN7xzST/W9sOVvT3Bhw7LtbeIjFJ3rssUXkBm8YVMSU/
LbGnntWwthCCQSX3BmKLtvgo6WYw1HkLee5F5CuTACKv9wWcQWzd1/wLlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0QHM2BxP/MeU2uf19xeNwjwQMpMB8GA1UdIwQY
MBaAFMf6PK3KThMaD74bnkDbo4ODPPSKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYt
ZjFkNDU2ODY5Zjk3LzEvN1JBY3pZSEVfOHg1VGE1X1gzRjQzQ1BCQXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iNzI1OTItNTk2MS00YzVlLWEyMGYtZjFkNDU2ODY5Zjk3
LzEveF9vOHJjcE9FeG9Qdmh1ZVFOdWpnNE04OUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuebMMA0G
CSqGSIb3DQEBCwUAA4IBAQBZFMtlpCygAnYIoj6FQiF3LfEwVAMp8PPGsnD+/VVC
xzEGZdD80Z7OVhZUCXkbNgambf3jfjWH6esHgUIE6c/wLnsHFBs/ONJSTifEV+Mu
uJ6C6V+E+rkYzJ9LDT4nYQ0cRO5kfQMgZjVdVG34/eDzomhTfuprv++ZnE3PgWkR
CL5cjVJgSBCNUteGwg8rlh1aUOh+UqWgb7lxNHcmWYzlsWeMrZylrymVeOwmNYxa
5kLKNff6jCSdm7I0P9YfEZFL+d8f7+J+dhf5QifJ/ajojjXtrfqgy1Dwzf01JKZk
lel4HxeLBBgvNwU67vpMC8yAvwk2evDnHd4RsybdeztC
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:40 2024 by rpki-client on console-ams.rpki-client.org