Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/efykMo1TVgIhw1Z24aJfWYWVva8.roa
File: efykMo1TVgIhw1Z24aJfWYWVva8.roa (raw, json)
Hash identifier: /aMMmcOPFI7Uw+bIWV+vnQ24BJ4sE40jGnGsOVOAw8A=
Subject key identifier: 79:FC:A4:32:8D:53:56:02:21:C3:56:76:E1:A2:5F:59:85:95:BD:AF
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018CCA29D261EBE160A7D5612685D02B17E8
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/efykMo1TVgIhw1Z24aJfWYWVva8.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 185.73.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d2:61:eb:e1:60:a7:d5:61:26:85:d0:2b:17:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79fca4328d53560221c35676e1a25f598595bdaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:71:bf:20:0d:2a:1b:95:a5:bc:6d:f3:c7:8c:
4d:dd:e9:bc:3e:e2:c0:26:ab:1c:f4:08:e0:c0:28:
91:9f:61:44:89:a5:d2:93:ea:b5:33:6c:69:e3:80:
f4:bc:de:28:9c:75:99:a4:d5:36:02:86:e1:88:6a:
1d:36:ba:ab:3d:c1:9e:5c:13:e4:79:1a:4d:38:33:
9c:a8:dc:e4:59:1a:fc:69:1b:fd:65:11:67:25:e5:
b4:95:a1:2e:45:2c:8a:96:09:87:2c:ae:51:95:5d:
20:54:f1:0c:2d:2d:32:c8:9d:3e:63:54:cc:89:49:
78:df:4f:b9:56:cf:3f:a4:57:f4:98:d2:c6:fd:ee:
1d:72:d7:14:f4:13:aa:62:63:4e:19:aa:50:c7:ce:
94:74:59:7e:22:ea:72:2b:28:71:1f:46:bf:3f:46:
f8:01:52:59:c2:cc:5c:f2:8a:bb:1a:ff:13:ca:c6:
6d:a3:7d:ae:40:f9:90:2c:c0:c7:bd:c9:a7:cb:9b:
35:77:5d:38:e9:a5:12:1d:bd:38:70:1f:c5:49:e5:
9e:90:53:e2:79:07:2e:3e:42:d4:84:c8:bb:84:cb:
38:93:a9:9d:d4:a6:ef:82:79:fa:89:19:c3:cb:8a:
b1:18:a0:1c:61:c7:a5:04:ca:3c:a7:5a:02:33:64:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:A4:32:8D:53:56:02:21:C3:56:76:E1:A2:5F:59:85:95:BD:AF
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/efykMo1TVgIhw1Z24aJfWYWVva8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.218.0/24
Signature Algorithm: sha256WithRSAEncryption
36:93:82:59:71:0b:ef:eb:8f:d4:9c:53:4d:98:29:57:63:7e:
b2:c6:1e:89:97:4a:14:ed:53:21:ba:2c:45:2e:8e:8c:e7:a1:
b1:0b:d9:51:04:a8:de:e9:76:3f:fa:19:a7:de:2b:68:30:13:
7d:c5:a7:fb:f5:bd:4e:f1:df:19:42:2f:0b:91:64:08:ee:65:
98:97:27:b8:93:31:77:79:58:c2:db:51:4a:1f:2e:d3:07:43:
2a:b7:20:4f:4c:0e:e5:d9:98:f7:c1:67:a3:9f:00:9a:a1:98:
e6:37:b7:b9:19:27:8f:e3:2a:29:52:b9:51:b6:df:4f:82:43:
c0:ef:49:bf:1e:58:c3:d5:ea:69:47:9c:2d:61:df:6c:ea:88:
69:d6:9f:f1:47:f2:3d:d9:f0:fe:6e:23:36:0f:1a:16:bd:3e:
4e:21:3d:e8:f8:c0:87:0c:92:d1:dd:74:82:07:bd:e6:75:17:
45:6d:4e:f6:ff:0a:94:7e:47:59:ca:6d:35:2e:b9:62:d6:ad:
22:34:a3:ab:4f:0d:c6:70:c0:c2:03:83:0c:53:3c:b1:fd:4f:
eb:49:80:7b:03:ed:6a:f1:45:0b:ea:c6:66:b9:5e:87:86:17:
be:8d:ba:98:27:4c:70:1a:b1:25:f4:9e:84:af:c6:80:e1:20:
c1:d4:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:20:30 2024 by rpki-client on console-ams.rpki-client.org