Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/7XBq6k1LvM9jpMo3qXuk6KNqhHY.roa
File: 7XBq6k1LvM9jpMo3qXuk6KNqhHY.roa (raw, json)
Hash identifier: g0zy7iwtUxaxPczOpRluA/4EeHPjxNnYLYsQf07evXU=
Subject key identifier: ED:70:6A:EA:4D:4B:BC:CF:63:A4:CA:37:A9:7B:A4:E8:A3:6A:84:76
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 018CC64A7FCA15E9CB5718E4B6D034B179D3
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/7XBq6k1LvM9jpMo3qXuk6KNqhHY.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212001
IP address blocks: 185.87.170.0/24 maxlen: 24
185.87.168.0/24 maxlen: 24
185.87.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7f:ca:15:e9:cb:57:18:e4:b6:d0:34:b1:79:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed706aea4d4bbccf63a4ca37a97ba4e8a36a8476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:de:99:60:79:b1:dd:27:f3:8d:c9:a7:9b:
0b:5b:96:48:4c:91:a3:82:fd:9f:83:e2:c3:35:09:
31:e3:9a:92:8e:1e:71:af:c2:08:16:9e:cd:a9:95:
d1:fe:16:45:1c:c6:b0:42:2f:45:27:1e:c2:3c:e0:
68:37:64:d0:0f:e6:9a:0c:82:de:cc:75:e8:69:ed:
79:2e:17:3f:31:13:06:ab:5b:48:c1:bc:d4:7c:10:
22:42:9e:52:c4:77:e6:fe:9c:61:86:7b:df:19:aa:
52:a2:6c:3a:ff:cf:9b:ee:d2:f8:63:64:3e:4e:69:
8c:18:23:34:0f:95:ce:b7:85:dc:40:a2:09:87:a6:
14:6d:7c:3f:15:05:99:e8:f6:22:f8:55:68:27:3d:
f2:b2:0e:81:ae:d6:9a:ad:b2:e2:17:0a:fe:31:b0:
8f:49:3d:95:18:9f:eb:91:da:42:74:2e:d0:b5:be:
a5:4e:1c:42:a0:09:a7:b1:17:bd:c5:73:9c:ea:4b:
58:fe:ac:a6:90:29:d1:2f:a0:01:10:11:9b:4d:03:
d4:c8:4c:e5:7e:b5:0e:20:70:79:72:20:41:9a:ed:
ee:13:eb:cd:94:ad:a8:42:16:88:4c:22:8b:dc:29:
fd:ed:bf:e7:9d:8f:d3:6b:53:a6:60:1b:88:8f:b1:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:6A:EA:4D:4B:BC:CF:63:A4:CA:37:A9:7B:A4:E8:A3:6A:84:76
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/7XBq6k1LvM9jpMo3qXuk6KNqhHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.168.0-185.87.170.255
Signature Algorithm: sha256WithRSAEncryption
16:46:85:57:ec:2d:66:8f:e1:df:fa:a0:2b:7b:9c:ea:9e:30:
8c:9c:13:6c:35:ea:bf:cb:fc:a1:a3:33:09:04:df:ac:02:31:
53:97:b3:4a:49:be:0f:f4:e9:f8:31:c4:d8:9b:89:5e:5c:fd:
7f:4d:b1:79:ee:e6:70:48:79:80:d2:fb:c0:9a:8c:1f:1c:21:
ac:cb:85:12:c1:87:f9:ff:f6:af:f1:89:9c:c8:90:ef:4b:50:
5e:81:80:bc:40:da:53:0f:10:1b:35:45:10:c0:10:25:6a:f1:
61:ad:57:01:3b:0d:49:f3:fb:ac:94:bd:dd:12:b2:d6:2a:bb:
4e:66:1e:2c:38:d1:93:24:7e:2f:ce:0f:76:4e:da:cf:22:3a:
42:8c:d4:1b:bf:d2:2a:44:56:61:5f:67:04:ac:e6:93:9b:61:
d1:df:7b:ee:00:e9:f8:db:28:c2:57:2d:bb:02:17:d4:6e:e5:
c7:de:67:56:67:50:04:a3:9d:f8:42:23:44:66:dc:c9:cc:ba:
96:9a:0c:55:78:0e:1c:1d:fa:13:6f:c7:fe:ce:e0:f7:a5:6d:
71:d6:42:b0:a3:d3:61:25:9f:2f:cd:8d:7e:13:14:6b:73:3b:
7f:4d:ab:7d:28:a0:f4:c6:c5:6f:e3:d1:47:24:0e:e9:2b:10:
47:f4:a4:16
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzGSn/KFenLVxjkttA0sXnTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmI3ZmVhOGFkMzUxMTFjYTY4N2E5Y2QwMGE0OWY5YTRm
MDQ1OWIwHhcNMjQwMTAxMTgzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDcwNmFlYTRkNGJiY2NmNjNhNGNhMzdhOTdiYTRlOGEzNmE4NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRjemWB5sd0n843Jp5sLW5ZITJGj
gv2fg+LDNQkx45qSjh5xr8IIFp7NqZXR/hZFHMawQi9FJx7CPOBoN2TQD+aaDILe
zHXoae15Lhc/MRMGq1tIwbzUfBAiQp5SxHfm/pxhhnvfGapSomw6/8+b7tL4Y2Q+
TmmMGCM0D5XOt4XcQKIJh6YUbXw/FQWZ6PYi+FVoJz3ysg6BrtaarbLiFwr+MbCP
ST2VGJ/rkdpCdC7Qtb6lThxCoAmnsRe9xXOc6ktY/qymkCnRL6ABEBGbTQPUyEzl
frUOIHB5ciBBmu3uE+vNlK2oQhaITCKL3Cn97b/nnY/Ta1OmYBuIj7FeDQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFO1waupNS7zPY6TKN6l7pOijaoR2MB8GA1UdIwQY
MBaAFHBrf+qK01ERymh6nNAKSfmk8EWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4Mjct
MjYwYzM3N2EzMTRhLzEvN1hCcTZrMUx2TTlqcE1vM3FYdWs2S05xaEhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMjk3NGYtN2VmYS00NjExLTg4MjctMjYwYzM3N2EzMTRh
LzEvY0d0XzZvclRVUkhLYUhxYzBBcEotYVR3UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5V6gD
BAC5V6owDQYJKoZIhvcNAQELBQADggEBABZGhVfsLWaP4d/6oCt7nOqeMIycE2w1
6r/L/KGjMwkE36wCMVOXs0pJvg/06fgxxNibiV5c/X9NsXnu5nBIeYDS+8CajB8c
IazLhRLBh/n/9q/xiZzIkO9LUF6BgLxA2lMPEBs1RRDAECVq8WGtVwE7DUnz+6yU
vd0SstYqu05mHiw40ZMkfi/OD3ZO2s8iOkKM1Bu/0ipEVmFfZwSs5pObYdHfe+4A
6fjbKMJXLbsCF9Ru5cfeZ1ZnUASjnfhCI0Rm3MnMupaaDFV4Dhwd+hNvx/7O4Pel
bXHWQrCj02Elny/NjX4TFGtzO39Nq30ooPTGxW/j0UckDukrEEf0pBY=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:37:59 2024 by rpki-client on console-ams.rpki-client.org