Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/BrtDA57HH6qOmR5qEAfcHjDXZy0.roa
File: BrtDA57HH6qOmR5qEAfcHjDXZy0.roa (raw, json)
Hash identifier: f7JGv6kEa80q2JCvvIxJT8ix958Kj6l7EKWXVYUXiUA=
Subject key identifier: 06:BB:43:03:9E:C7:1F:AA:8E:99:1E:6A:10:07:DC:1E:30:D7:67:2D
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 0190D93C32E11A549C05F1C0C6600E2A8688
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/BrtDA57HH6qOmR5qEAfcHjDXZy0.roa
Signing time: Mon 22 Jul 2024 06:58:39 +0000
ROA not before: Mon 22 Jul 2024 06:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205559
IP address blocks: 185.206.32.0/23 maxlen: 23
185.206.32.0/24 maxlen: 24
185.206.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:3c:32:e1:1a:54:9c:05:f1:c0:c6:60:0e:2a:86:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Jul 22 06:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06bb43039ec71faa8e991e6a1007dc1e30d7672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:6e:8c:71:6d:d9:2b:3e:2d:dc:0c:19:34:
c5:6f:bb:8f:51:bb:4f:de:05:ea:86:cd:cd:fb:bf:
6c:90:fa:3c:be:5f:5a:4b:db:c5:88:52:21:63:74:
4f:60:1c:f8:11:4a:f5:fb:ce:c7:40:2a:b5:71:11:
24:d1:68:0d:f4:93:7e:c8:f1:c2:2a:ce:29:01:8f:
7e:ca:4a:28:77:1f:b5:1a:7f:f4:e0:13:5b:b3:df:
73:94:8a:71:f7:a1:57:c7:b0:00:5f:1c:e0:d3:8f:
39:ba:71:7d:cf:7a:b1:81:b2:d9:f6:c6:7e:34:6d:
3b:37:45:ec:26:bb:bb:e1:e1:77:4d:a8:58:1d:b7:
1c:33:67:19:89:8a:95:e7:8a:fd:f4:38:10:82:76:
d3:86:4d:e1:d7:7b:c9:d4:16:e8:84:a2:6b:6f:53:
82:b3:0b:4c:b5:4f:c4:d7:02:1b:79:4c:cd:fd:51:
52:af:c9:82:9f:7a:8e:31:c8:f8:da:29:e1:d3:54:
41:f6:ab:e0:ff:de:53:02:e2:ec:3d:44:2b:21:29:
5b:d7:b7:ec:92:df:63:35:5e:53:31:fa:2e:87:76:
0c:96:37:37:0f:e3:a6:34:68:60:d9:27:c5:1c:d6:
7a:0f:09:69:3a:b4:87:82:a5:7a:84:87:24:a5:d8:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BB:43:03:9E:C7:1F:AA:8E:99:1E:6A:10:07:DC:1E:30:D7:67:2D
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/BrtDA57HH6qOmR5qEAfcHjDXZy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.32.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a0:31:3c:a6:63:96:f2:a2:88:2e:2f:af:bc:02:b6:e3:43:
a6:0e:16:2a:a9:3b:c9:bf:a3:43:f8:81:e6:92:17:d9:e7:f8:
a2:f0:f9:fe:d2:ba:68:dd:e2:42:c1:3f:dc:f8:f6:54:4b:1d:
d3:88:b5:f8:8b:30:8c:27:e7:86:3a:dc:0e:0f:e1:bb:aa:0d:
87:24:20:44:3d:4c:81:73:b9:00:5b:89:b4:bf:9d:81:c9:ee:
69:a5:66:e7:05:a8:ab:31:08:0e:c4:59:2e:b8:2a:f8:52:06:
90:52:e7:ed:60:65:fb:e8:f0:43:47:d3:cd:0d:22:09:c5:b8:
2b:de:cb:bd:48:33:65:a5:f1:77:85:fc:44:55:fc:45:62:5b:
92:de:89:bf:80:2f:9a:06:a5:91:26:07:ef:2d:20:0d:32:21:
a3:af:86:fa:56:ea:4d:05:8c:26:02:ca:a0:51:50:f8:dc:64:
8c:a8:2d:98:8d:01:7f:06:07:03:45:b6:ca:ee:a2:5d:d6:56:
4e:76:55:41:bb:51:77:20:e0:7e:c4:32:94:32:31:5a:f7:f0:
0a:12:2b:b4:95:ed:fd:5a:7a:47:ab:7e:ca:4c:f6:8b:a1:2a:
5f:ce:bc:87:33:48:de:5a:8a:9d:9b:55:29:64:76:53:ec:9b:
8f:77:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:53 2024 by rpki-client on console-ams.rpki-client.org