Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/7MoyIhaNY940_cx0GxHYDOcgmRk.roa
File: 7MoyIhaNY940_cx0GxHYDOcgmRk.roa (raw, json)
Hash identifier: K5hhIb5Y1lqnJhjydp7zsqLaiSxFY3aZeDYkgmbX1pE=
Subject key identifier: EC:CA:32:22:16:8D:63:DE:34:FD:CC:74:1B:11:D8:0C:E7:20:99:19
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 018E0E0E7D8CD0459891D9675A9F3A4180F5
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/7MoyIhaNY940_cx0GxHYDOcgmRk.roa
Signing time: Tue 05 Mar 2024 10:00:14 +0000
ROA not before: Tue 05 Mar 2024 10:00:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41872
IP address blocks: 185.244.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:0e:7d:8c:d0:45:98:91:d9:67:5a:9f:3a:41:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Mar 5 10:00:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecca3222168d63de34fdcc741b11d80ce7209919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:de:02:52:28:64:d6:9a:e3:c1:02:f5:a8:
22:fd:3d:e4:e0:11:96:84:93:bb:06:84:d1:52:6b:
68:cb:80:7e:d7:bf:bd:80:da:f7:94:1d:e8:c2:b2:
b6:47:f6:be:54:f4:47:7d:41:c7:35:11:b4:b6:bd:
b5:dc:2a:3c:87:47:f8:c9:f2:2c:cc:41:b2:bf:eb:
a9:51:fa:3a:66:fe:61:29:0b:fc:cf:36:db:1f:8f:
9e:90:98:50:c5:89:c0:54:9e:e7:41:44:f6:fd:36:
c3:e8:7d:7c:fb:b2:6d:c1:c3:5c:aa:81:00:89:72:
71:11:08:3b:ea:0d:10:ce:80:d6:65:3f:17:0d:2e:
cf:b2:3a:54:00:ec:2b:99:65:10:f0:fb:5f:e4:b8:
14:47:ea:8a:9f:43:a6:35:c4:e5:4b:b0:50:ec:bf:
36:a5:8e:c2:4b:3c:53:da:25:1c:24:6b:b0:4c:dc:
e4:da:c3:cc:ae:16:22:1e:9a:ba:05:85:d4:ea:38:
24:e1:a0:f2:28:eb:13:8e:24:7f:f1:24:c8:15:c2:
6f:04:19:7f:d0:0f:d3:5a:d1:a5:a9:15:37:47:53:
29:d3:99:b9:bd:d7:c4:ea:73:7e:93:42:c6:b4:39:
bf:b5:8c:bd:3d:a7:18:b3:11:51:5b:8f:01:45:11:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:32:22:16:8D:63:DE:34:FD:CC:74:1B:11:D8:0C:E7:20:99:19
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/7MoyIhaNY940_cx0GxHYDOcgmRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.255.0/24
Signature Algorithm: sha256WithRSAEncryption
50:d7:da:f1:1f:39:9b:40:4e:6d:e4:bb:f9:e3:79:13:59:54:
ce:61:49:70:cd:76:7d:b5:ed:5d:18:6f:03:52:6b:29:36:da:
03:97:9a:97:b6:cd:95:79:0f:3c:dd:41:8f:c7:33:c5:f8:5b:
b7:1e:d3:d8:a9:49:29:00:24:6c:9c:ec:37:91:68:b1:ee:2a:
7d:57:a1:5c:61:40:50:a5:cf:3e:f6:68:e5:68:63:01:20:98:
cf:ba:f1:4f:bb:87:4e:95:9b:85:4e:04:12:48:70:97:a9:c6:
17:57:4c:ae:f3:48:57:52:3c:8c:4c:94:22:e2:b0:04:60:56:
9f:db:73:ca:12:30:87:0d:f8:85:19:57:00:9b:02:37:67:18:
56:f0:d2:f4:48:b1:ee:61:35:ab:d4:7c:f1:13:70:4b:f3:ee:
7f:47:88:e2:f2:af:48:03:70:17:ec:da:c6:16:dd:58:e0:aa:
79:ba:28:e2:27:c5:ee:13:70:d1:04:2a:c9:28:69:48:a7:16:
92:fa:11:37:59:19:1f:b3:00:7d:65:ef:d5:18:2c:1d:8a:0d:
85:91:c1:91:da:12:00:7b:06:d6:cf:4a:fe:1f:e8:39:af:a4:
dc:5c:1e:9b:6f:7f:be:2f:d5:3f:7e:96:69:5e:d9:af:ca:e5:
f8:0f:3d:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4ODn2M0EWYkdlnWp86QYD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1YjVhYmIzNWZjYTMwNzBkNDgxMjJhMzM5ZWM1Y2JlZmYw
YmU5N2EwHhcNMjQwMzA1MTAwMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2NhMzIyMjE2OGQ2M2RlMzRmZGNjNzQxYjExZDgwY2U3MjA5OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTneAlIoZNaa48EC9agi/T3k4BGW
hJO7BoTRUmtoy4B+17+9gNr3lB3owrK2R/a+VPRHfUHHNRG0tr213Co8h0f4yfIs
zEGyv+upUfo6Zv5hKQv8zzbbH4+ekJhQxYnAVJ7nQUT2/TbD6H18+7JtwcNcqoEA
iXJxEQg76g0QzoDWZT8XDS7PsjpUAOwrmWUQ8Ptf5LgUR+qKn0OmNcTlS7BQ7L82
pY7CSzxT2iUcJGuwTNzk2sPMrhYiHpq6BYXU6jgk4aDyKOsTjiR/8STIFcJvBBl/
0A/TWtGlqRU3R1Mp05m5vdfE6nN+k0LGtDm/tYy9PacYsxFRW48BRRG0cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOzKMiIWjWPeNP3MdBsR2AznIJkZMB8GA1UdIwQY
MBaAFHW1q7NfyjBw1IEioznsXL7/C+l6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAt
MmM2YTJjNjkyMTJiLzEvN01veUloYU5ZOTQwX2N4MEd4SFlET2NnbVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ZDg0MmYtNjMyNC00MTIyLWI4NTAtMmM2YTJjNjkyMTJi
LzEvZGJXcnMxX0tNSERVZ1NLak9leGN2djhMNlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufT/MA0G
CSqGSIb3DQEBCwUAA4IBAQBQ19rxHzmbQE5t5Lv543kTWVTOYUlwzXZ9te1dGG8D
UmspNtoDl5qXts2VeQ883UGPxzPF+Fu3HtPYqUkpACRsnOw3kWix7ip9V6FcYUBQ
pc8+9mjlaGMBIJjPuvFPu4dOlZuFTgQSSHCXqcYXV0yu80hXUjyMTJQi4rAEYFaf
23PKEjCHDfiFGVcAmwI3ZxhW8NL0SLHuYTWr1HzxE3BL8+5/R4ji8q9IA3AX7NrG
Ft1Y4Kp5uijiJ8XuE3DRBCrJKGlIpxaS+hE3WRkfswB9Ze/VGCwdig2FkcGR2hIA
ewbWz0r+H+g5r6TcXB6bb3++L9U/fpZpXtmvyuX4Dz0h
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:47:27 2024 by rpki-client on console-ams.rpki-client.org