Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/7riOseuRkLYX1CKMYANPctAPHKE.roa
File: 7riOseuRkLYX1CKMYANPctAPHKE.roa (raw, json)
Hash identifier: jHpTqYxer2fRMLW/KhVjtvtWPMTFGFLnDVuO/PmSIIs=
Subject key identifier: EE:B8:8E:B1:EB:91:90:B6:17:D4:22:8C:60:03:4F:72:D0:0F:1C:A1
Certificate issuer: /CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Certificate serial: 0192BB374F7EC6226B7F58E475B831D041F2
Authority key identifier: 15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/7riOseuRkLYX1CKMYANPctAPHKE.roa
Signing time: Wed 23 Oct 2024 21:10:17 +0000
ROA not before: Wed 23 Oct 2024 21:10:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203147
IP address blocks: 185.150.216.0/23 maxlen: 23
185.150.218.0/24 maxlen: 24
185.150.219.0/24 maxlen: 24
2a07:7c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bb:37:4f:7e:c6:22:6b:7f:58:e4:75:b8:31:d0:41:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d1ff6bec9fbcb89e950a3a01ef2d686f0e7a31
Validity
Not Before: Oct 23 21:10:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeb88eb1eb9190b617d4228c60034f72d00f1ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:72:17:18:56:01:d2:5a:2c:6a:c3:45:1e:
1d:a2:96:c2:0d:8e:2a:c4:b1:9f:68:11:d5:06:ba:
62:ac:23:4a:4d:0f:f4:cf:e6:3a:09:2d:11:5b:83:
f1:aa:d4:ee:62:fb:27:47:2d:b8:e2:f6:05:50:64:
29:21:23:a1:f2:35:5e:8c:11:7a:50:1b:7b:47:7f:
0c:6d:bc:b0:d4:b7:bf:e8:ce:19:37:e3:b7:46:f5:
6e:16:a8:84:8e:7d:6f:99:05:2b:84:50:4d:9a:e7:
a8:fb:4f:1a:ef:37:ab:55:80:89:b5:a9:6c:d1:b7:
74:49:40:ae:92:64:37:2a:20:5b:5a:f3:5a:b9:81:
98:bb:33:f1:ba:94:f3:e2:8d:61:a1:96:7b:ae:e4:
65:35:34:99:a7:ae:6b:12:fc:10:1c:fb:8e:de:76:
bf:78:88:dd:07:2c:ab:ce:fd:81:b4:fe:96:79:f9:
7c:c1:87:77:6b:d6:07:b2:a8:8e:82:da:2c:37:a5:
cc:92:72:d8:8f:9a:9d:c7:de:bd:45:3b:06:54:63:
ef:e3:0b:10:54:f4:23:2b:dc:ca:48:89:3f:0d:93:
a1:1b:a5:84:7e:2c:dc:26:d4:e3:8f:40:86:b6:78:
0b:06:4a:c2:4f:ed:d0:10:90:b1:54:e5:fd:02:68:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:8E:B1:EB:91:90:B6:17:D4:22:8C:60:03:4F:72:D0:0F:1C:A1
X509v3 Authority Key Identifier:
keyid:15:D1:FF:6B:EC:9F:BC:B8:9E:95:0A:3A:01:EF:2D:68:6F:0E:7A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdH_a-yfvLielQo6Ae8taG8OejE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/7riOseuRkLYX1CKMYANPctAPHKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/FdH_a-yfvLielQo6Ae8taG8OejE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
IPv6:
2a07:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
73:13:8d:f7:89:d3:36:3e:ab:ac:5f:ee:90:dc:46:96:71:4f:
af:4f:64:4f:5f:e1:4a:a4:ba:63:a0:27:d2:dd:57:4d:e5:cb:
7c:f2:19:23:72:b1:d6:8e:3c:ed:97:3c:81:bf:a0:33:05:b1:
54:b9:c0:a0:0f:66:36:f1:54:d7:32:df:e0:1d:68:50:23:d2:
9a:05:37:10:eb:95:eb:ab:3e:4e:9f:e8:4d:9e:0d:cc:ee:5f:
12:5f:83:18:88:2b:ea:ac:ea:5a:b9:f2:57:54:a2:17:f6:5d:
bb:d0:bb:95:4c:84:03:cc:20:9f:84:47:17:26:a2:9c:2c:77:
44:5f:d5:97:86:a1:a5:98:bc:93:67:06:b0:1a:20:ae:7e:d1:
1b:d4:ac:d2:e6:e5:f1:d8:2e:e0:5b:8c:34:76:f2:41:e1:96:
d8:4b:d1:bd:34:42:92:c0:f0:9d:c0:57:9e:6d:2c:ae:c7:72:
03:7c:0d:2a:2f:af:63:3b:57:79:55:54:78:51:c0:aa:95:92:
09:91:9f:4f:8b:b0:09:77:4f:98:71:ed:c2:2d:a6:bd:b2:8f:
70:89:b6:49:5b:88:01:1b:5a:09:9b:f4:f7:70:dd:a4:e4:03:
99:42:56:3d:71:a0:e1:f4:38:79:7b:9d:be:00:8b:a8:d8:91:
7c:05:36:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:08:34 2024 by rpki-client on console-ams.rpki-client.org