Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/d8EONJbheCzfeJzKr6KRFV-x3pk.roa
File: d8EONJbheCzfeJzKr6KRFV-x3pk.roa (raw, json)
Hash identifier: xTcfxvrxYo1RvVMsen3VA7+FqtWIVKyMq6naL4wqgVI=
Subject key identifier: 77:C1:0E:34:96:E1:78:2C:DF:78:9C:CA:AF:A2:91:15:5F:B1:DE:99
Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial: 0190F923175D8E093912D3ED86CFC69E5944
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/d8EONJbheCzfeJzKr6KRFV-x3pk.roa
Signing time: Sun 28 Jul 2024 11:39:04 +0000
ROA not before: Sun 28 Jul 2024 11:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 185.233.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f9:23:17:5d:8e:09:39:12:d3:ed:86:cf:c6:9e:59:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Validity
Not Before: Jul 28 11:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77c10e3496e1782cdf789ccaafa291155fb1de99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:c5:b4:44:5e:20:1e:3f:13:ce:9b:21:9c:
55:d1:65:16:80:76:1f:ee:aa:67:30:49:f4:f3:77:
35:94:fa:06:f2:da:d8:9a:1e:a4:19:3f:28:d6:30:
c1:31:b2:ef:0d:d3:96:fa:68:d2:3f:8a:fa:8d:cd:
89:a5:cc:60:7a:19:b8:04:22:66:ef:b1:28:a2:27:
8a:89:26:51:32:2c:c3:ca:95:0c:aa:2e:09:99:ac:
8c:ca:7f:fe:d8:9d:f9:f1:ad:3e:a8:d1:10:c4:14:
cb:0c:7d:6f:15:cb:aa:f3:c7:74:0e:65:47:b4:de:
1d:c0:2f:ba:c6:81:3c:72:7e:67:35:e1:f9:06:d0:
10:f1:ec:25:0d:2d:f8:89:c6:03:64:d4:16:f0:35:
34:ba:e2:a5:1e:eb:87:33:c2:e7:9e:9a:49:68:29:
3b:a3:60:fc:81:08:f7:15:36:48:de:12:44:87:40:
f2:11:ac:c7:75:f1:98:a7:31:70:d5:9a:f9:4d:4d:
58:5e:68:57:47:77:fd:aa:05:99:cb:ed:e8:53:69:
8b:dc:c3:1c:50:93:81:2b:2a:16:89:02:b2:be:90:
da:06:7f:76:3f:ff:7a:5b:4e:de:f4:fc:81:ea:fa:
1f:ab:86:f6:25:2c:6e:10:30:b7:f5:8e:0c:79:0c:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:0E:34:96:E1:78:2C:DF:78:9C:CA:AF:A2:91:15:5F:B1:DE:99
X509v3 Authority Key Identifier:
keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/d8EONJbheCzfeJzKr6KRFV-x3pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8d:d1:8e:83:67:88:28:49:86:67:d7:c2:05:89:f8:49:7f:
e4:69:47:a0:57:7b:ba:ac:14:8e:80:c9:af:9b:d8:20:12:b1:
13:7d:2f:24:2e:bc:e1:53:72:88:af:7e:94:0a:03:07:3d:3c:
d3:a7:4d:6d:82:a2:fe:25:f4:0d:d7:e1:dc:9e:89:eb:e4:0d:
53:c5:36:d0:7b:63:ac:c7:6d:e1:42:77:25:81:d6:b4:61:34:
90:5c:ff:c3:69:3f:dc:f6:3e:f6:0b:e1:10:5a:83:59:59:02:
35:78:b5:98:4c:9d:52:b7:8a:14:5c:55:32:0a:94:e2:cf:6f:
31:ce:c1:41:5a:9f:f5:02:36:50:5c:af:87:51:46:d5:4b:5c:
12:45:29:34:5d:30:96:51:58:d3:79:5a:ea:b2:07:d9:1a:d0:
07:8a:25:0a:85:be:04:de:6f:b8:62:58:5a:86:e3:c8:80:6d:
c0:cf:99:14:bc:27:06:af:ee:b3:f7:75:0e:cc:ee:76:df:f8:
c1:6c:61:99:2f:a9:91:c2:61:72:70:90:65:bf:61:6b:64:b1:
81:99:9e:23:17:2f:28:be:e6:5f:0c:3d:1c:af:7e:01:10:4c:
8c:26:98:08:ca:1d:a6:8b:26:41:f3:04:a5:e8:06:f2:2c:b9:
f0:ce:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:38:15 2024 by rpki-client on console-fra.rpki-client.org