Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7be3KlVWtY9E6GU_jdoff4miTvA.roa
File: 7be3KlVWtY9E6GU_jdoff4miTvA.roa (raw, json)
Hash identifier: aMLMj+8Ya41+zKbG2YsMmVyVQc7xiiZxfUrEegbEr4Q=
Subject key identifier: ED:B7:B7:2A:55:56:B5:8F:44:E8:65:3F:8D:DA:1F:7F:89:A2:4E:F0
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 018CC3B71DEAF8A436EDED809FE11C316637
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7be3KlVWtY9E6GU_jdoff4miTvA.roa
Signing time: Mon 01 Jan 2024 06:30:07 +0000
ROA not before: Mon 01 Jan 2024 06:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203568
IP address blocks: 92.243.76.0/22 maxlen: 22
185.130.156.0/24 maxlen: 24
185.130.156.0/22 maxlen: 22
185.214.220.0/22 maxlen: 22
185.214.220.0/24 maxlen: 24
2a07:6a80::/29 maxlen: 29
2a07:6a86::/32 maxlen: 32
2a07:6a82::/31 maxlen: 31
2a0d:d5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1d:ea:f8:a4:36:ed:ed:80:9f:e1:1c:31:66:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Jan 1 06:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb7b72a5556b58f44e8653f8dda1f7f89a24ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:6d:da:f6:4a:5f:f2:b5:c8:6a:fd:a9:af:
88:06:92:25:41:67:ac:45:cd:61:a0:fd:a5:5f:60:
04:ea:f0:42:bf:dd:76:ff:07:fc:3c:5e:cf:e4:41:
c6:59:df:d0:0f:6f:78:7e:47:e5:5f:b5:0c:60:5c:
d0:4b:12:95:11:f2:02:8d:01:74:9e:bd:ca:10:15:
77:b2:fe:70:9c:d9:4c:9e:4b:2d:23:f2:b4:94:d8:
b1:fe:f1:99:20:94:a3:4d:b0:8d:67:9b:c1:c9:7f:
6e:23:34:5b:c7:f3:d8:2f:a3:c5:90:f7:84:3f:06:
1c:d6:0b:0d:0b:f2:00:a3:3b:91:84:26:5d:08:c9:
d0:bd:82:35:77:79:5a:23:a0:66:ae:ae:91:75:78:
f3:5c:82:d1:79:97:fc:24:ad:fd:6d:cc:19:81:54:
41:c8:07:23:6b:4c:a7:18:2b:62:68:81:c8:9e:50:
a6:a3:0c:ef:fc:4f:2c:71:99:ae:fe:5b:82:03:15:
c0:87:ef:b3:6c:3f:84:5f:eb:57:86:fb:86:70:98:
07:55:81:6a:21:41:fd:d9:e1:e7:54:35:5b:d8:31:
9d:11:0d:88:6a:e9:ec:d3:bc:96:c4:21:cc:62:6d:
35:71:dc:a0:ed:a1:88:1d:80:eb:c4:ad:83:26:7c:
f7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:B7:2A:55:56:B5:8F:44:E8:65:3F:8D:DA:1F:7F:89:A2:4E:F0
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/7be3KlVWtY9E6GU_jdoff4miTvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.76.0/22
185.130.156.0/22
185.214.220.0/22
IPv6:
2a07:6a80::/29
2a0d:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:b5:e7:25:32:d7:fb:c9:31:c3:97:06:39:17:04:5f:2e:9c:
5a:a2:f5:e5:50:37:15:61:43:2e:4d:01:b5:fe:f4:7a:e2:85:
b8:78:8e:97:da:71:c3:7f:05:9b:56:4e:0e:12:bd:b2:0c:50:
1b:79:08:36:76:02:ac:fa:cf:59:20:6b:c3:55:c8:05:ee:cb:
09:d0:4f:b0:02:8e:23:53:52:88:07:59:98:fd:c4:e8:a3:82:
c9:51:e5:b9:dc:0d:c5:24:ef:2d:1a:fb:43:0a:19:45:cf:74:
52:91:86:e8:8e:7a:77:de:27:19:a8:9e:6d:dc:dc:e5:cf:79:
7d:fd:4a:95:f7:b6:1f:35:c9:35:87:fc:a8:26:83:86:b7:7b:
7c:5c:6b:a7:ab:23:42:4d:56:f5:5a:4a:f2:03:16:d3:cb:c9:
20:ed:d8:da:44:23:52:6e:78:95:55:8c:0d:d8:e0:fb:e9:da:
ad:5e:ed:5a:19:17:7b:4f:b3:ab:df:25:56:2d:5a:36:af:b9:
b4:e4:24:7d:5c:d5:0f:b5:c5:28:2f:ab:c1:19:e1:eb:b3:bc:
ca:46:6d:7f:50:ed:99:aa:77:73:0a:eb:ed:65:f3:f2:d2:02:
d2:60:f1:e1:70:6c:f8:85:67:2c:45:62:a7:8d:e8:d6:24:a8:
d3:06:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:54:40 2024 by rpki-client on console-ams.rpki-client.org