Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/Z9BKQGoVuoJA2egV3yr5gFoP32U.roa
File: Z9BKQGoVuoJA2egV3yr5gFoP32U.roa (raw, json)
Hash identifier: p/kHHLrvosIp+RawaFnvamYVJ/qKBxEGAY4RSnFlAKg=
Subject key identifier: 67:D0:4A:40:6A:15:BA:82:40:D9:E8:15:DF:2A:F9:80:5A:0F:DF:65
Certificate issuer: /CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Certificate serial: 018CC94DF22C239557A5B4F1D8FB41F94323
Authority key identifier: FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/Z9BKQGoVuoJA2egV3yr5gFoP32U.roa
Signing time: Tue 02 Jan 2024 08:32:57 +0000
ROA not before: Tue 02 Jan 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206765
IP address blocks: 185.177.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:f2:2c:23:95:57:a5:b4:f1:d8:fb:41:f9:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc79488ab4e1ac0f4bd467d2b4d3621c6b18eea0
Validity
Not Before: Jan 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d04a406a15ba8240d9e815df2af9805a0fdf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:d7:61:fd:d1:60:52:a7:2a:ad:44:5f:66:
27:ff:02:92:20:9b:73:66:dd:bb:61:1c:b6:4d:44:
1f:16:98:07:b3:ad:88:be:d7:af:f8:57:d4:c3:79:
c4:24:ad:84:fb:ea:3d:d4:1b:af:dc:60:7d:6e:1a:
cd:c5:ac:88:c2:79:14:36:bf:fa:f1:12:e4:d0:cc:
36:95:cb:ce:d0:79:e3:f6:1b:11:98:74:b0:64:4c:
6d:2b:5a:56:64:4f:85:09:b7:15:62:df:be:05:bb:
17:45:bc:9b:88:bb:9c:68:d7:c9:30:b0:f5:b9:c1:
fe:75:cb:7e:0c:ca:c1:12:d7:e9:e6:9c:bf:12:ac:
9d:65:2f:bf:9b:3f:a5:82:53:f5:d7:ac:4c:17:96:
27:84:c2:0e:47:45:a0:57:19:39:88:ca:c1:0f:38:
b5:66:a2:95:45:dd:2f:9a:1c:94:95:6d:6f:6a:80:
01:7e:0d:d4:76:31:97:25:f8:73:c8:8a:85:51:a6:
8f:26:1b:f1:2b:e6:9b:e9:d6:2a:a3:94:00:2d:3f:
e2:1b:ff:5e:61:9a:b1:82:40:f2:5b:4d:0f:81:8a:
91:17:95:90:a1:39:98:9e:56:97:99:8e:f9:69:f2:
64:18:06:56:8a:c4:7c:f4:cc:9f:fb:ba:d4:30:09:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D0:4A:40:6A:15:BA:82:40:D9:E8:15:DF:2A:F9:80:5A:0F:DF:65
X509v3 Authority Key Identifier:
keyid:FC:79:48:8A:B4:E1:AC:0F:4B:D4:67:D2:B4:D3:62:1C:6B:18:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HlIirThrA9L1GfStNNiHGsY7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/Z9BKQGoVuoJA2egV3yr5gFoP32U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a90dbf-86d6-48ce-8a6c-86aa00e13746/1/_HlIirThrA9L1GfStNNiHGsY7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:51:b8:f2:39:54:54:8c:3c:10:61:8d:d1:ab:74:be:63:c4:
5d:b9:48:76:25:0a:61:52:25:1a:37:9c:ad:d7:cf:b5:22:12:
d3:d2:1a:d1:55:e5:72:37:87:25:d1:59:a6:5a:c7:de:5d:c7:
46:4e:e3:c9:48:c9:26:03:ec:38:c0:ad:60:bd:f0:2a:09:87:
df:a0:9a:03:3c:ce:db:81:6c:c3:e8:e2:a4:ce:f4:16:df:c5:
e7:d2:7c:e4:d4:23:14:46:47:21:19:c5:38:62:bf:b2:d2:e7:
12:80:82:a6:cb:f0:7b:7d:fe:2a:64:63:b1:6e:43:55:e4:52:
c5:4c:b9:75:f1:fe:0e:7c:4a:d9:7c:95:8f:a1:b4:69:44:0a:
32:c9:c4:d6:3f:b8:76:e0:3a:71:34:df:0d:bd:e3:5c:a8:23:
b0:55:31:cc:1f:c3:06:95:43:7a:f6:8d:8f:39:c1:07:3e:5f:
8f:15:c8:8a:03:53:ba:83:43:97:df:47:bb:23:d3:91:d4:ed:
39:3e:e1:1b:03:fd:9c:de:80:ad:f6:de:be:ae:8b:e4:69:15:
1d:b3:79:6c:2a:15:61:03:8b:de:78:4b:c5:c9:a3:b5:50:9e:
4a:da:18:bb:49:2a:4e:82:3e:1a:82:96:fd:00:b9:22:e4:eb:
5d:81:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:45:07 2024 by rpki-client on console-fra.rpki-client.org