Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa
File: fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa (raw, json)
Hash identifier: MZykPxCIQSWJ1GWxUBgNCque3AgkO/A+tfohP+K4SZQ=
Subject key identifier: 7D:92:2F:54:DD:35:1B:0E:D6:58:5F:F8:14:A4:31:E0:A2:31:E7:EF
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 018CC3B718F565686D98E7A1DF8590EA217F
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa
Signing time: Mon 01 Jan 2024 06:30:05 +0000
ROA not before: Mon 01 Jan 2024 06:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206281
IP address blocks: 185.220.172.0/24 maxlen: 24
185.220.175.0/24 maxlen: 24
185.220.173.0/24 maxlen: 24
185.220.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:18:f5:65:68:6d:98:e7:a1:df:85:90:ea:21:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Jan 1 06:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d922f54dd351b0ed6585ff814a431e0a231e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:36:8d:25:7c:1d:06:b0:9a:a6:ea:e7:8f:
e1:b4:9a:80:23:f7:5a:84:16:18:03:37:8f:fd:a1:
13:0e:26:df:b8:43:a1:d9:a6:f1:3b:71:b6:21:eb:
f4:fc:e3:e8:69:5a:fd:11:9e:fe:e8:2a:45:b7:7d:
9e:09:93:ae:e4:9c:de:68:da:7e:28:33:aa:b6:39:
50:ff:49:2a:f4:44:80:e1:2b:a1:3d:d2:6e:79:73:
c0:37:ce:61:8b:c9:9f:3e:c2:1e:f0:00:27:01:a8:
62:5a:62:c6:52:82:55:ee:c2:49:f6:9c:3b:ab:51:
31:c7:83:ed:cd:06:7d:80:03:7a:93:60:d2:77:f7:
00:c4:27:e1:43:3d:22:3f:72:43:be:c6:22:92:9a:
db:0e:66:c9:86:7d:37:9b:70:c6:01:2b:7e:98:16:
69:e7:81:01:ae:0c:07:18:70:d0:6d:13:66:eb:81:
15:ef:f3:3a:18:41:50:0b:c8:25:15:f7:e5:ba:85:
b0:bc:e5:5f:ad:c7:dd:83:f7:3d:4e:cc:10:5b:60:
97:5d:0b:d8:33:ff:05:30:eb:ba:ad:6e:3f:22:cf:
c9:a1:76:9d:44:a4:e0:71:5d:96:78:d3:29:38:80:
9c:49:b6:2c:78:d7:7b:62:35:ce:6d:5f:c3:75:61:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:92:2F:54:DD:35:1B:0E:D6:58:5F:F8:14:A4:31:E0:A2:31:E7:EF
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/fZIvVN01Gw7WWF_4FKQx4KIx5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.172.0/22
Signature Algorithm: sha256WithRSAEncryption
64:1e:b9:6d:3a:37:41:c3:f8:3d:54:88:fb:60:11:d6:98:ed:
6e:c4:1e:5a:c0:04:7b:1e:3c:78:db:7d:99:14:a2:7a:fa:90:
7d:d2:6f:36:54:43:4f:d4:7e:c1:a3:4a:88:b7:a2:e4:fd:bf:
04:dd:38:8a:32:d6:be:36:4a:8e:24:f5:e5:37:9a:15:20:cf:
ba:ba:8f:a1:3d:f9:33:16:10:38:df:49:de:76:ad:08:51:e9:
d2:ba:e7:ae:39:8c:c1:8a:23:d1:b5:a3:c9:fa:62:44:e9:5d:
78:3c:f6:82:76:4d:6b:fb:d1:5c:a2:92:19:88:7d:cb:9f:5e:
ac:0d:a4:ba:2e:86:fb:e6:9a:b4:47:78:0f:3f:94:a5:69:a7:
3f:44:3f:d7:08:c4:bb:5f:5e:98:ae:3e:71:49:60:e0:4f:86:
c1:95:2f:66:29:d8:8c:6b:df:0b:30:1c:a0:9d:12:66:c6:45:
f7:fa:b8:5d:86:58:62:de:97:98:50:12:79:53:e7:67:87:8d:
55:9c:8a:f7:9c:39:6f:9d:d5:bf:c1:2f:29:85:dc:a1:62:40:
01:3a:39:c8:f0:2b:11:68:ca:21:5e:f7:00:e3:60:36:75:97:
69:f3:e2:ed:1f:05:ac:63:35:29:f8:af:45:94:f2:a9:3c:b2:
22:3c:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:10:32 2024 by rpki-client on console-ams.rpki-client.org