Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/_Z7KkiOjgWMKb1odMyV8CX6h8QA.roa
File: _Z7KkiOjgWMKb1odMyV8CX6h8QA.roa (raw, json)
Hash identifier: s1BzpC1skXfE1s1h182CzAZWv0Y4GgrdsVd6KXis69Q=
Subject key identifier: FD:9E:CA:92:23:A3:81:63:0A:6F:5A:1D:33:25:7C:09:7E:A1:F1:00
Certificate issuer: /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial: 018CC64A7EE7633EA75BDBFB81B8043C9397
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/_Z7KkiOjgWMKb1odMyV8CX6h8QA.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210676
IP address blocks: 185.87.170.0/24 maxlen: 24
185.87.168.0/24 maxlen: 24
185.87.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7e:e7:63:3e:a7:5b:db:fb:81:b8:04:3c:93:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd9eca9223a381630a6f5a1d33257c097ea1f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:f0:dc:1b:01:c8:6b:d1:ce:8f:9e:72:50:
11:e5:a1:30:50:0a:b4:f7:8b:ff:c5:02:a7:95:0c:
c8:d1:ad:7f:31:28:29:66:72:17:8f:a8:82:36:e4:
b8:de:23:34:d9:a4:11:f0:2d:39:13:82:72:f6:7c:
ab:13:62:9d:50:d8:9c:7e:5d:cc:cb:3d:ec:f6:1d:
7b:c1:a2:28:75:d5:79:23:de:86:93:81:fa:a8:0f:
1c:2f:52:67:07:3c:8d:77:0d:e4:c8:f4:73:51:dd:
5e:dc:30:9f:18:fb:53:83:29:08:8d:e8:56:69:ea:
b3:4d:77:fc:c8:04:d8:a0:cc:42:b6:df:eb:70:92:
45:46:7a:52:19:e7:00:75:39:68:d0:5d:5d:f6:25:
4c:d5:a3:c9:30:d8:ee:e1:dd:81:c1:bc:a3:4b:50:
46:24:a0:ca:cc:15:ab:1a:67:3e:bd:04:9e:74:d2:
3f:72:d2:d0:09:d5:72:65:b1:47:c4:9a:1b:59:14:
db:32:32:5a:3c:c4:4f:f7:74:52:9d:3b:83:40:28:
ce:74:e4:c4:45:b8:1e:30:86:28:b2:65:d6:e1:b0:
05:4e:01:0c:97:b2:2f:63:76:0a:a2:ec:a6:ba:3f:
5c:5d:2b:fd:7e:e0:01:78:0f:82:e3:ae:47:63:b9:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:CA:92:23:A3:81:63:0A:6F:5A:1D:33:25:7C:09:7E:A1:F1:00
X509v3 Authority Key Identifier:
keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/_Z7KkiOjgWMKb1odMyV8CX6h8QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.168.0-185.87.170.255
Signature Algorithm: sha256WithRSAEncryption
85:18:ab:84:9a:a1:6f:c3:11:fc:a6:e8:99:0a:e5:c9:bc:a5:
19:4c:54:03:28:40:2e:27:ed:8d:02:17:89:55:2f:52:56:ed:
91:51:77:49:28:b1:81:4c:b9:e9:37:af:34:5f:73:94:d9:26:
01:48:2d:ee:ab:75:d0:fc:84:6e:91:2f:9a:dd:65:d8:78:93:
14:ce:06:a9:98:aa:19:18:01:5b:19:49:d0:df:63:96:1b:51:
53:cc:44:3a:70:08:1b:0e:52:84:5f:77:8b:a0:d8:e2:ac:4b:
27:2e:42:f8:73:89:f2:1c:bc:e8:44:45:ec:a6:2a:7b:0e:2b:
1b:c0:3d:9f:0c:23:b0:b3:96:0b:8c:d1:ad:dc:ab:10:db:a3:
80:11:6c:27:61:cd:4e:df:50:ec:19:21:62:c5:cb:b1:42:8c:
7c:f3:32:10:36:04:0e:33:6d:36:84:87:90:c2:9e:37:01:4f:
7b:f9:48:9d:76:6d:a5:d2:74:3b:2b:4e:7b:10:be:4d:b0:02:
23:cd:24:f7:29:1e:ff:ed:c2:a3:d2:9d:e2:93:bb:62:05:be:
f2:46:a4:e1:ce:43:9f:e7:f9:0d:45:25:7e:c8:b0:69:87:5d:
0c:46:61:3f:4e:d5:e9:28:bb:25:11:34:f4:d6:0e:52:86:c9:
90:ef:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:37:59 2024 by rpki-client on console-ams.rpki-client.org