Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7zvdTxP0l6XzXfvR3erik-ftyjo.roa
File: 7zvdTxP0l6XzXfvR3erik-ftyjo.roa (raw, json)
Hash identifier: lfWaymVs5OlLtkx+4m07ix6Ai/aBSHzgozYaVUqR5qM=
Subject key identifier: EF:3B:DD:4F:13:F4:97:A5:F3:5D:FB:D1:DD:EA:E2:93:E7:ED:CA:3A
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018CC8016A938E3DEF386D31980B0045427E
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7zvdTxP0l6XzXfvR3erik-ftyjo.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6a:93:8e:3d:ef:38:6d:31:98:0b:00:45:42:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef3bdd4f13f497a5f35dfbd1ddeae293e7edca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:df:9a:f4:89:a7:bd:39:4c:c2:fb:e7:1a:
71:f6:df:78:25:ef:68:80:75:64:7f:93:9c:e6:68:
38:ee:94:73:45:ee:b5:1e:27:58:54:d8:7e:2d:d3:
e1:45:f1:15:68:fe:34:6a:14:e3:bf:57:2a:d6:fb:
9e:bd:96:92:4d:a3:77:d3:f6:e8:84:56:76:61:30:
e7:78:90:68:a5:d6:aa:27:aa:9f:89:06:09:8a:8a:
8b:02:85:7f:78:47:93:39:88:40:22:31:19:2e:23:
4b:a8:b4:18:3d:a9:56:bf:ad:2e:b8:e1:d4:79:d3:
4e:dd:c3:76:f2:f8:91:2f:16:31:36:25:b5:71:ef:
3c:58:c0:e9:01:05:f5:b7:53:2b:74:96:b8:3f:52:
4c:29:9d:1d:c9:5e:00:eb:47:fd:8c:e8:44:1e:d6:
0a:ca:aa:cf:fb:7c:10:12:ab:49:7a:06:c1:71:8d:
17:e9:1a:35:ff:26:00:15:e8:6e:77:b1:19:d0:0e:
dc:1e:b8:07:5d:7e:69:26:b9:f4:04:19:60:20:7f:
81:71:7d:16:c5:8c:ee:60:6a:39:f6:b5:6e:1b:6f:
cc:50:4d:0c:34:1c:1b:82:f0:6f:3f:ab:3a:56:97:
5d:be:18:52:8f:e8:5e:c0:60:f5:75:b3:ad:3c:44:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:DD:4F:13:F4:97:A5:F3:5D:FB:D1:DD:EA:E2:93:E7:ED:CA:3A
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/7zvdTxP0l6XzXfvR3erik-ftyjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ce:d3:11:1d:83:a1:2d:56:70:68:c5:3b:d1:40:89:dc:e2:
a9:84:56:eb:46:ff:c2:d8:92:c7:de:be:85:36:32:42:dd:29:
55:53:22:3e:e6:f8:ec:98:5b:e0:f8:a6:69:45:7e:41:ae:8b:
74:f6:68:49:cf:a7:2e:f7:ed:2a:88:13:07:ff:5c:c0:7a:f4:
84:e0:1c:f4:99:a9:0d:49:67:72:ab:6a:92:12:51:5f:aa:62:
67:fd:6f:ad:4c:2e:f7:88:21:09:d6:8d:97:15:fe:96:5a:6e:
bc:5b:4e:eb:c8:cf:16:94:57:02:9f:e5:80:10:8e:c7:1c:2c:
06:72:37:20:15:97:1f:9a:d2:58:f3:3c:9f:9d:dc:56:af:e9:
7f:c5:f5:41:8e:59:15:a9:32:23:af:6e:86:64:8e:bd:85:35:
15:82:53:ff:05:aa:71:c0:c6:89:d2:32:41:1b:b2:3b:e1:88:
7f:ac:7f:0c:1e:56:3e:5d:06:bb:9e:64:64:d5:7a:1f:bd:d9:
45:e4:c2:ce:b2:2f:f4:db:ee:17:ce:e8:b2:53:28:ee:0d:88:
29:49:62:d9:94:f5:80:81:e6:d3:c1:af:57:24:7f:90:67:84:
44:5c:a1:c3:9c:98:57:d7:25:3a:12:bc:e2:27:6c:f4:8a:e7:
4f:7a:90:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAWqTjj3vOG0xmAsARUJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm
MzcxYWIwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjNiZGQ0ZjEzZjQ5N2E1ZjM1ZGZiZDFkZGVhZTI5M2U3ZWRjYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXfmvSJp705TML75xpx9t94Je9o
gHVkf5Oc5mg47pRzRe61HidYVNh+LdPhRfEVaP40ahTjv1cq1vuevZaSTaN30/bo
hFZ2YTDneJBopdaqJ6qfiQYJioqLAoV/eEeTOYhAIjEZLiNLqLQYPalWv60uuOHU
edNO3cN28viRLxYxNiW1ce88WMDpAQX1t1MrdJa4P1JMKZ0dyV4A60f9jOhEHtYK
yqrP+3wQEqtJegbBcY0X6Ro1/yYAFehud7EZ0A7cHrgHXX5pJrn0BBlgIH+BcX0W
xYzuYGo59rVuG2/MUE0MNBwbgvBvP6s6VpddvhhSj+hewGD1dbOtPETvyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO873U8T9Jel81370d3q4pPn7co6MB8GA1UdIwQY
MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt
YjkyMTFlMWZjMWFjLzEvN3p2ZFR4UDBsNlh6WGZ2UjNlcmlrLWZ0eWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj
LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGmMA0G
CSqGSIb3DQEBCwUAA4IBAQBAztMRHYOhLVZwaMU70UCJ3OKphFbrRv/C2JLH3r6F
NjJC3SlVUyI+5vjsmFvg+KZpRX5Brot09mhJz6cu9+0qiBMH/1zAevSE4Bz0makN
SWdyq2qSElFfqmJn/W+tTC73iCEJ1o2XFf6WWm68W07ryM8WlFcCn+WAEI7HHCwG
cjcgFZcfmtJY8zyfndxWr+l/xfVBjlkVqTIjr26GZI69hTUVglP/BapxwMaJ0jJB
G7I74Yh/rH8MHlY+XQa7nmRk1XofvdlF5MLOsi/02+4XzuiyUyjuDYgpSWLZlPWA
gebTwa9XJH+QZ4REXKHDnJhX1yU6ErziJ2z0iudPepCo
-----END CERTIFICATE-----
Generated at Sat May 4 18:03:51 2024 by rpki-client on console-ams.rpki-client.org