Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7dghTLAC4AZ0fQdc5KFAUTSEMQU.roa
File: 7dghTLAC4AZ0fQdc5KFAUTSEMQU.roa (raw, json)
Hash identifier: q5Fva8RrtAqrnPUq7NYqXtRX3Ea1c7qjNqlPkXeK1iE=
Subject key identifier: ED:D8:21:4C:B0:02:E0:06:74:7D:07:5C:E4:A1:40:51:34:84:31:05
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0190EF06E4E9548F8902538D3507250E2452
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7dghTLAC4AZ0fQdc5KFAUTSEMQU.roa
Signing time: Fri 26 Jul 2024 12:32:04 +0000
ROA not before: Fri 26 Jul 2024 12:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.197.135.0/24 maxlen: 24
2a06:e881:650f::/48 maxlen: 48
2a06:e881:7340::/42 maxlen: 48
2a06:e881:73ef::/48 maxlen: 48
2a06:e881:73ff::/48 maxlen: 48
2a06:e881:9200::/45 maxlen: 48
2a06:e881:9208::/45 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
2a06:e881:9700::/44 maxlen: 44
2a06:e881:9700::/48 maxlen: 48
2a06:e881:9701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:06:e4:e9:54:8f:89:02:53:8d:35:07:25:0e:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jul 26 12:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edd8214cb002e006747d075ce4a1405134843105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:d2:25:b8:ff:3b:ef:07:42:0a:65:93:59:
2a:68:53:e0:6d:7f:ab:11:b2:c8:b5:b2:40:dd:09:
ac:0c:a6:7b:b0:2e:fa:23:7f:30:6e:fe:3d:52:47:
85:8d:ff:ed:77:73:8a:61:71:9c:2f:b5:92:8a:26:
1a:14:cc:7d:a3:50:13:99:c5:42:bc:9f:5e:74:2e:
67:20:05:9c:2b:a8:48:1c:d9:e4:ae:53:bb:c1:c1:
bd:01:e2:86:db:11:62:8c:0c:5e:1f:8b:3d:fe:bc:
f9:1f:86:3d:1e:32:53:ef:e8:30:f7:16:08:e3:08:
74:60:ef:e3:b8:9a:59:1d:e3:44:4a:30:db:c7:76:
f4:98:57:a8:80:63:bf:4c:61:81:f4:6b:77:39:e7:
81:e3:d6:63:a4:25:c6:7d:31:8e:6d:b9:d8:e9:ba:
cb:6a:3b:5c:51:39:c4:30:c8:33:59:bd:a7:21:96:
e3:21:a5:9f:95:be:1d:f9:82:5d:a1:04:7b:62:0f:
85:92:f9:9a:ca:48:f8:0e:02:97:ed:5c:2f:d2:3b:
bb:56:b8:c2:cc:f0:59:3f:17:31:0b:3d:8b:c1:82:
4b:cb:18:7a:04:b9:ab:66:bc:2f:47:a7:35:44:f5:
0e:9b:73:a5:e2:9d:67:63:18:8f:03:6c:b9:65:9b:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D8:21:4C:B0:02:E0:06:74:7D:07:5C:E4:A1:40:51:34:84:31:05
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/7dghTLAC4AZ0fQdc5KFAUTSEMQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.135.0/24
IPv6:
2a06:e881:650f::/48
2a06:e881:7340::/42
2a06:e881:73ef::/48
2a06:e881:73ff::/48
2a06:e881:9200::/44
2a06:e881:9600::/48
2a06:e881:9700::/44
Signature Algorithm: sha256WithRSAEncryption
8d:9d:81:8f:a5:df:8e:f5:e6:76:ac:20:1a:a7:e3:f2:57:f6:
88:ca:cd:2a:24:f3:41:77:6f:3f:d0:f3:93:61:d1:d6:84:6f:
0c:1d:9d:02:a5:bb:22:12:7e:0b:da:f4:5d:b6:4f:eb:b1:06:
76:be:75:29:f7:2d:2a:58:e8:2d:9c:9b:f8:de:48:0c:5a:e7:
d8:f9:3b:31:b0:a5:67:2f:cc:11:21:74:f9:5c:f3:b1:c0:d6:
15:7e:d9:35:a6:49:19:2d:81:b0:3a:fd:20:65:ee:43:2e:55:
5c:9c:10:3e:20:12:2b:f7:17:db:ec:b0:f6:89:0e:49:49:37:
17:68:bf:ca:1c:fc:49:51:f9:45:71:f2:93:b5:40:56:d6:51:
04:0e:f0:c6:1d:7a:fe:b0:c5:de:61:c8:8b:96:1e:5f:77:5d:
93:d1:80:ca:92:3b:c1:9c:09:f0:ad:e7:85:25:46:e7:2a:dc:
25:84:35:10:ad:6c:a2:7f:94:fd:43:18:fe:d3:a0:fa:65:7a:
22:94:5e:f5:bf:2b:a9:91:08:2a:5c:b5:4c:65:c0:52:7e:84:
5d:e8:a0:ce:c1:ff:97:e6:c6:68:08:4a:3b:02:f4:e6:ba:57:
55:1a:60:8a:36:b1:05:96:b2:f0:59:fd:a5:62:37:53:c3:c0:
a8:7b:36:ba
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAZDvBuTpVI+JAlONNQclDiRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwNzI2MTIzMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGQ4MjE0Y2IwMDJlMDA2NzQ3ZDA3NWNlNGExNDA1MTM0ODQzMTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVbSJbj/O+8HQgplk1kqaFPgbX+r
EbLItbJA3QmsDKZ7sC76I38wbv49UkeFjf/td3OKYXGcL7WSiiYaFMx9o1ATmcVC
vJ9edC5nIAWcK6hIHNnkrlO7wcG9AeKG2xFijAxeH4s9/rz5H4Y9HjJT7+gw9xYI
4wh0YO/juJpZHeNESjDbx3b0mFeogGO/TGGB9Gt3OeeB49ZjpCXGfTGObbnY6brL
ajtcUTnEMMgzWb2nIZbjIaWflb4d+YJdoQR7Yg+Fkvmaykj4DgKX7Vwv0ju7VrjC
zPBZPxcxCz2LwYJLyxh6BLmrZrwvR6c1RPUOm3Ol4p1nYxiPA2y5ZZuVzQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFO3YIUywAuAGdH0HXOShQFE0hDEFMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvN2RnaFRMQUM0QVowZlFkYzVLRkFVVFNFTVFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAMBAIAATAGAwQAucWHMEUE
AgACMD8DBwAqBuiBZQ8DBwYqBuiBc0ADBwAqBuiBc+8DBwAqBuiBc/8DBwQqBuiB
kgADBwAqBuiBlgADBwQqBuiBlwAwDQYJKoZIhvcNAQELBQADggEBAI2dgY+l3471
5nasIBqn4/JX9ojKzSok80F3bz/Q85Nh0daEbwwdnQKluyISfgva9F22T+uxBna+
dSn3LSpY6C2cm/jeSAxa59j5OzGwpWcvzBEhdPlc87HA1hV+2TWmSRktgbA6/SBl
7kMuVVycED4gEiv3F9vssPaJDklJNxdov8oc/ElR+UVx8pO1QFbWUQQO8MYdev6w
xd5hyIuWHl93XZPRgMqSO8GcCfCt54UlRucq3CWENRCtbKJ/lP1DGP7ToPpleiKU
XvW/K6mRCCpctUxlwFJ+hF3ooM7B/5fmxmgISjsC9Oa6V1UaYIo2sQWWsvBZ/aVi
N1PDwKh7Nro=
-----END CERTIFICATE-----
Generated at Sat Sep 7 21:08:27 2024 by rpki-client on console-ams.rpki-client.org