Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/eHjtfhgNIuPdmjPYRyi9kfqmH30.roa
File: eHjtfhgNIuPdmjPYRyi9kfqmH30.roa (raw, json)
Hash identifier: 67JkjSiPtD5QxR0qDar9/q1pBNnz+dKN1k1lWW80wjg=
Subject key identifier: 78:78:ED:7E:18:0D:22:E3:DD:9A:33:D8:47:28:BD:91:FA:A6:1F:7D
Certificate issuer: /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial: 018CC72713B2E35F23F7C444755D2829D7FE
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/eHjtfhgNIuPdmjPYRyi9kfqmH30.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 185.66.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:13:b2:e3:5f:23:f7:c4:44:75:5d:28:29:d7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7878ed7e180d22e3dd9a33d84728bd91faa61f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:e5:54:27:2c:bc:73:dc:fa:b4:42:69:f8:
6b:fb:11:6b:0d:05:80:71:6c:1c:d7:32:09:34:e5:
6e:09:a9:a9:04:03:0f:d4:d7:95:90:94:93:a5:8b:
c6:3c:79:25:e2:11:a7:00:f4:57:a6:e4:fa:b9:ba:
ee:51:4f:66:9c:ec:6e:e9:db:8a:ce:b3:d4:2c:f6:
26:7f:3f:c1:90:52:c6:cb:9e:d7:6c:94:55:8e:61:
19:52:06:37:b6:19:18:14:f3:dc:35:c2:d2:c4:18:
c9:60:0d:86:96:13:91:f8:a3:8e:0f:53:6f:77:fe:
ee:74:3b:a3:9a:a9:3a:0f:75:ef:ed:45:84:d7:32:
09:a0:da:6e:d4:fd:89:00:a9:73:6d:88:8a:48:30:
db:09:68:40:75:bc:b8:83:19:0d:84:a6:69:ca:f2:
f3:02:28:26:05:92:94:a2:96:35:8b:09:a8:77:c4:
e5:6a:c3:7d:4d:f2:94:28:4e:43:bf:f0:dd:01:16:
c0:e8:35:5f:8a:59:e8:0f:f2:28:a9:75:b0:37:16:
17:c8:45:7f:1e:e1:d1:71:b9:0e:bc:b0:b9:d3:06:
91:e3:3b:de:37:cf:1c:dc:c1:c6:ec:7f:54:26:f0:
6d:03:5a:7a:bb:b9:87:7e:dc:1e:cc:4d:e8:62:2f:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:ED:7E:18:0D:22:E3:DD:9A:33:D8:47:28:BD:91:FA:A6:1F:7D
X509v3 Authority Key Identifier:
keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/eHjtfhgNIuPdmjPYRyi9kfqmH30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.226.0/24
Signature Algorithm: sha256WithRSAEncryption
15:70:3b:b4:75:4e:62:72:1a:b3:91:7e:02:82:75:4a:c2:c7:
67:cf:96:dc:17:61:3f:b4:bf:80:a5:6c:0c:a0:0a:06:23:7d:
5a:2d:a4:6d:7a:35:a5:10:da:7f:86:8e:60:d5:6d:dc:f2:a5:
7a:a0:e5:69:52:5c:24:2a:e9:ac:77:6b:8f:b7:db:e5:4a:ce:
3d:12:47:26:9a:47:26:1e:21:00:88:c0:4a:1a:f3:b3:79:a8:
ee:44:2f:e7:36:c7:6a:73:65:e8:5e:73:04:19:87:83:46:0d:
6e:cf:3d:0a:d7:b5:4b:d8:5a:ef:a7:c8:43:c2:bf:d2:e7:50:
a8:b0:6b:fc:f1:79:78:43:d2:8b:ab:72:4d:93:71:2a:df:27:
9a:54:63:02:8e:12:c0:ef:39:6d:11:eb:1a:72:fb:94:dd:a6:
8f:c2:fc:f7:25:d1:b2:1b:0f:44:3b:d4:e3:48:67:a9:8f:41:
42:0b:0c:35:b7:67:7d:79:8e:e5:8c:b4:56:f2:70:00:b2:10:
40:a3:7c:3a:46:90:e6:51:a4:04:a6:20:80:64:68:bb:54:09:
94:e0:a5:90:67:b1:63:dc:16:0f:2c:d1:f0:71:1c:c7:77:ac:
ee:70:c2:b1:e9:a3:ca:1e:0d:5b:94:da:03:c0:8b:68:18:8f:
e8:b5:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:49:56 2024 by rpki-client on console-fra.rpki-client.org