Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/7bQyCINYjMV6N4VaoHucYY2Lwz4.roa
File: 7bQyCINYjMV6N4VaoHucYY2Lwz4.roa (raw, json)
Hash identifier: CJRTFUZxiJwonztNUoNxTI+zaXB+LjaETfftcRL1LF4=
Subject key identifier: ED:B4:32:08:83:58:8C:C5:7A:37:85:5A:A0:7B:9C:61:8D:8B:C3:3E
Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial: 018CC5DBF6CCE3873E5B1103FC3C87D4BC38
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/7bQyCINYjMV6N4VaoHucYY2Lwz4.roa
Signing time: Mon 01 Jan 2024 16:29:36 +0000
ROA not before: Mon 01 Jan 2024 16:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49114
IP address blocks: 185.220.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:f6:cc:e3:87:3e:5b:11:03:fc:3c:87:d4:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
Validity
Not Before: Jan 1 16:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb4320883588cc57a37855aa07b9c618d8bc33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:93:84:97:11:f2:62:70:37:25:07:f4:ab:a0:
be:30:5f:85:e6:b7:61:27:18:b7:3a:bf:96:bd:ed:
93:14:51:b6:fe:53:37:e5:ce:c8:66:4b:b4:77:96:
cc:08:aa:64:ff:63:20:d0:1b:da:2f:40:12:97:f6:
bd:ef:77:40:26:1a:3f:37:45:4a:ca:59:9c:1e:7d:
e1:2b:e8:e3:99:8a:5c:71:31:8b:d1:f0:fe:7c:7f:
8c:04:d4:04:49:f2:f5:fa:d5:a0:88:00:32:0c:e1:
c4:1e:22:50:b5:5c:6e:46:ae:14:cd:71:16:0a:30:
d8:5b:1b:be:49:47:5e:ac:c7:68:ed:fc:eb:61:45:
2d:b2:ed:f6:df:a5:29:bb:33:18:e7:29:92:b7:2c:
c2:7d:e8:bf:c7:b4:73:85:16:b1:04:b4:af:08:eb:
31:a1:9d:17:47:2b:f2:15:74:f7:d8:e2:7c:9a:a7:
9d:23:20:e8:5f:45:44:6d:13:5b:13:f3:5c:d8:0b:
16:4f:d8:50:f1:19:2e:57:8a:79:3b:d5:f3:38:2e:
70:9b:60:ca:ee:73:8f:2b:82:e5:64:3e:cc:3e:55:
38:2a:4a:52:0d:10:9b:fa:b1:c1:ee:15:99:7f:3a:
b1:81:60:77:c3:2c:12:5e:19:a4:93:3e:7a:a2:84:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:32:08:83:58:8C:C5:7A:37:85:5A:A0:7B:9C:61:8D:8B:C3:3E
X509v3 Authority Key Identifier:
keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/7bQyCINYjMV6N4VaoHucYY2Lwz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1c:32:8b:1e:b7:3c:6f:02:89:dd:7d:2a:47:96:a1:cb:73:
60:2a:6f:6f:1c:7b:7d:c3:8e:6a:9b:d1:35:71:d2:8a:8a:de:
a0:a6:91:de:96:83:99:cb:93:25:b7:a9:86:7e:36:6e:29:2f:
03:a8:48:bf:65:d9:25:61:93:6a:d9:04:ce:14:d8:73:81:66:
a0:1a:f8:0c:92:97:5a:36:65:70:a3:e1:90:b1:4b:8c:04:f2:
ac:c9:f8:14:e4:7b:87:ba:85:9e:b5:13:5f:ee:09:54:66:4e:
a9:ee:37:3f:fe:f4:63:3a:b4:3c:56:c7:b8:75:25:c3:91:2c:
98:4d:5d:de:e6:f6:02:d0:05:89:42:d9:91:97:aa:d6:d3:e7:
33:16:1d:aa:d8:57:37:1f:80:74:1d:78:bf:41:a4:0e:e5:06:
6f:8c:6e:d9:82:ba:c0:95:57:05:34:5a:ad:7b:99:f6:0c:b9:
fe:c6:c2:29:d2:13:be:99:cf:5c:23:3b:f6:6b:84:66:95:c6:
a2:bc:82:d8:2c:fa:c2:a8:5f:83:5b:15:69:f4:9d:be:64:89:
db:40:fd:9c:f8:f7:ec:f6:90:a9:45:b6:36:1a:df:21:fc:35:
bf:5a:24:89:4c:6e:f9:15:59:70:53:9d:50:5b:c0:46:a8:68:
83:f2:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:50:53 2024 by rpki-client on console-fra.rpki-client.org