Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iQeycmxYCX2HCCCfTj7v6G-aYAg.roa
File: iQeycmxYCX2HCCCfTj7v6G-aYAg.roa (raw, json)
Hash identifier: 9rO/pseXt3ZPpxvD+6K+1eyAsjg9ExOQoiac+CyU7ws=
Subject key identifier: 89:07:B2:72:6C:58:09:7D:87:08:20:9F:4E:3E:EF:E8:6F:9A:60:08
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191B4A9F4C1CED9AFF5501B39801108A755
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iQeycmxYCX2HCCCfTj7v6G-aYAg.roa
Signing time: Mon 02 Sep 2024 21:35:22 +0000
ROA not before: Mon 02 Sep 2024 21:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 176.223.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b4:a9:f4:c1:ce:d9:af:f5:50:1b:39:80:11:08:a7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 2 21:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8907b2726c58097d8708209f4e3eefe86f9a6008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:09:77:28:28:b0:af:b1:78:3d:77:eb:eb:
9c:b4:32:7e:e5:24:54:6b:34:1d:17:0c:0c:4d:20:
28:41:a0:56:9d:01:e0:9b:08:f4:91:12:36:5d:74:
c2:17:bb:5a:76:c5:78:d9:c5:c7:eb:62:24:e7:ef:
f1:17:cb:95:5e:87:60:bc:c3:ce:9f:85:88:70:de:
68:5a:ea:12:e5:bb:05:ef:f4:d1:8c:c3:26:54:e6:
e6:5b:66:d0:b8:fc:f1:35:ff:70:ae:9a:d0:c3:44:
d3:ea:3b:c8:5c:9f:16:15:5b:a7:24:8b:00:44:65:
72:ce:10:39:c6:2f:34:b7:90:74:5c:5b:cd:8d:5c:
d4:76:ec:d1:3c:5a:88:5b:ab:50:cd:83:42:78:40:
80:c6:ad:a1:2e:a9:f7:c6:c4:f3:80:a1:b0:a1:df:
3f:5c:83:0f:f9:df:ae:53:54:79:76:51:68:ec:15:
a3:5e:69:6a:c1:71:8f:f4:a6:9f:87:e2:38:82:82:
27:2d:8b:cd:d4:94:bc:61:20:be:59:50:c8:29:36:
b6:2f:e1:11:fd:1b:be:19:83:85:59:27:3f:b8:03:
b0:19:6f:4b:a1:b7:82:16:27:95:1c:b2:fb:80:d0:
4b:b1:13:69:52:d2:45:ca:7b:f9:3d:47:47:ac:91:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:B2:72:6C:58:09:7D:87:08:20:9F:4E:3E:EF:E8:6F:9A:60:08
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iQeycmxYCX2HCCCfTj7v6G-aYAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.66.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a5:2d:93:2b:a8:8b:7f:fc:01:ec:22:7c:f4:b2:58:4a:c6:
49:71:ec:ac:cd:26:7f:56:e7:69:1a:b7:93:b8:67:34:38:af:
8e:ca:47:fc:81:8c:2a:db:cc:ef:c3:26:17:10:64:72:2f:8f:
0f:fa:31:13:7d:4c:ef:54:32:f3:d8:1e:9b:42:98:d6:eb:3a:
75:cd:a8:2e:b6:e8:9e:09:eb:bc:61:c5:09:a1:19:78:6c:71:
07:12:ee:eb:cd:bb:2c:e6:34:39:cd:09:12:b5:23:34:1c:6f:
00:f2:23:61:56:33:d3:03:c4:10:4a:ed:bd:4f:f6:b4:6c:2f:
9b:8c:e3:23:63:2c:1c:fe:7d:94:bf:4a:a5:4e:04:d3:f6:49:
09:6e:88:82:df:54:e9:82:b6:0a:2e:3e:c6:da:9a:62:79:4c:
37:cc:a0:69:fb:dd:32:8a:9b:f2:b9:33:50:19:34:34:88:c9:
27:57:3b:05:a6:db:38:3a:1c:ef:8e:b5:c9:41:cc:d0:0b:9f:
5a:a1:6a:2d:da:81:ef:7e:f3:ac:f8:12:e7:fc:2a:f6:e9:d3:
1d:93:61:d5:62:0f:3e:f0:4a:f8:94:fa:20:e6:35:64:b5:d5:
7e:96:bf:06:89:e9:42:6d:2d:f0:31:2b:d4:2b:6e:fa:9d:db:
9d:9c:12:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG0qfTBztmv9VAbOYARCKdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwOTAyMjEzNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTA3YjI3MjZjNTgwOTdkODcwODIwOWY0ZTNlZWZlODZmOWE2MDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwEJdygosK+xeD136+uctDJ+5SRU
azQdFwwMTSAoQaBWnQHgmwj0kRI2XXTCF7tadsV42cXH62Ik5+/xF8uVXodgvMPO
n4WIcN5oWuoS5bsF7/TRjMMmVObmW2bQuPzxNf9wrprQw0TT6jvIXJ8WFVunJIsA
RGVyzhA5xi80t5B0XFvNjVzUduzRPFqIW6tQzYNCeECAxq2hLqn3xsTzgKGwod8/
XIMP+d+uU1R5dlFo7BWjXmlqwXGP9Kafh+I4goInLYvN1JS8YSC+WVDIKTa2L+ER
/Ru+GYOFWSc/uAOwGW9LobeCFieVHLL7gNBLsRNpUtJFynv5PUdHrJHbNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkHsnJsWAl9hwggn04+7+hvmmAIMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaVFleWNteFlDWDJIQ0NDZlRqN3Y2Ry1hWUFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsN9CMA0G
CSqGSIb3DQEBCwUAA4IBAQCQpS2TK6iLf/wB7CJ89LJYSsZJceyszSZ/VudpGreT
uGc0OK+Oykf8gYwq28zvwyYXEGRyL48P+jETfUzvVDLz2B6bQpjW6zp1zagutuie
Ceu8YcUJoRl4bHEHEu7rzbss5jQ5zQkStSM0HG8A8iNhVjPTA8QQSu29T/a0bC+b
jOMjYywc/n2Uv0qlTgTT9kkJboiC31TpgrYKLj7G2ppieUw3zKBp+90yipvyuTNQ
GTQ0iMknVzsFpts4OhzvjrXJQczQC59aoWot2oHvfvOs+BLn/Cr26dMdk2HVYg8+
8Er4lPog5jVktdV+lr8GielCbS3wMSvUK276ndudnBLK
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:14:36 2024 by rpki-client on console-fra.rpki-client.org