Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ee7-33TD0U0Goo9Pz5p3Y0m_hd0.roa
File: ee7-33TD0U0Goo9Pz5p3Y0m_hd0.roa (raw, json)
Hash identifier: GTXqSuQtaKKRiQRienQBl5oW1Z76WFwg1wP8y5ah+bE=
Subject key identifier: 79:EE:FE:DF:74:C3:D1:4D:06:A2:8F:4F:CF:9A:77:63:49:BF:85:DD
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 018CC94E5C9DDFADD521936C0673A4BEE491
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ee7-33TD0U0Goo9Pz5p3Y0m_hd0.roa
Signing time: Tue 02 Jan 2024 08:33:25 +0000
ROA not before: Tue 02 Jan 2024 08:33:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39440
IP address blocks: 81.88.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:5c:9d:df:ad:d5:21:93:6c:06:73:a4:be:e4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Jan 2 08:33:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79eefedf74c3d14d06a28f4fcf9a776349bf85dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:75:02:23:59:83:be:da:31:a3:e2:d0:53:
cd:94:6c:f9:d1:6a:5a:36:31:69:94:ee:5e:bb:05:
d4:ea:1c:c7:dd:fb:01:61:30:99:46:ec:e4:f1:b0:
02:01:e5:a5:1b:6c:1f:58:37:fe:4b:69:b7:c3:38:
00:d6:a4:33:a2:f8:a7:83:48:a3:5e:ec:53:a9:84:
33:e2:1a:dd:d2:c5:e4:55:7e:5b:f4:10:b5:ce:f5:
b0:cb:25:fe:11:65:7a:7f:bf:00:ea:75:b2:8e:14:
55:8d:46:51:9a:f9:26:39:0c:57:7a:66:fe:a3:23:
0c:53:df:bb:05:3b:8e:34:da:be:6c:6f:74:d4:d9:
3d:0c:53:6d:0a:25:78:80:a5:d9:b2:94:fb:c6:36:
eb:e9:83:de:fa:75:0a:98:5b:36:57:35:05:2a:fe:
4e:1e:c9:f7:fd:89:42:3f:ca:2d:c6:0a:28:5e:25:
53:b5:42:aa:d6:05:fe:33:0b:b5:b6:6f:87:32:a5:
d3:94:be:df:f0:45:cc:eb:28:04:fd:4e:c4:f9:49:
36:cd:97:f8:e0:d7:85:fc:31:a8:4f:18:73:93:00:
19:d1:7a:e6:39:1c:0e:a7:e2:19:e1:ec:09:50:09:
68:b7:be:25:37:ce:5f:fc:14:47:2f:69:74:36:c2:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EE:FE:DF:74:C3:D1:4D:06:A2:8F:4F:CF:9A:77:63:49:BF:85:DD
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ee7-33TD0U0Goo9Pz5p3Y0m_hd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.184.0/21
Signature Algorithm: sha256WithRSAEncryption
be:c5:3b:4f:db:63:01:9f:0f:f0:10:37:48:48:f1:68:4d:13:
42:f6:4a:14:80:77:bb:06:e0:6e:69:ee:f2:41:af:e9:2a:5c:
1e:b3:88:6e:2d:4f:f3:e5:08:34:66:db:ff:5e:39:1e:50:70:
96:12:09:6c:ce:c5:af:c8:d7:73:3c:09:37:42:d3:cd:5d:d3:
c0:4b:d4:8d:40:58:07:81:77:b1:bb:69:11:d2:4c:ee:18:7c:
f4:aa:11:69:89:5a:b9:a8:ce:03:1c:b3:cd:73:ca:e3:78:d9:
e7:91:00:8c:40:62:f0:b2:a9:09:96:97:c3:d5:2c:f1:51:88:
c5:2a:d6:1d:61:ed:fe:40:6d:d2:01:7f:56:cf:87:86:04:cb:
a2:c7:dc:d9:c5:98:29:fb:3e:c6:e8:81:62:3f:07:ee:c6:83:
a5:52:ad:11:d8:8e:90:a0:0b:a9:21:f2:7d:ef:f0:74:eb:f4:
eb:56:15:86:a7:b9:ac:76:5f:19:8d:36:e0:b4:7d:64:26:bc:
2a:84:4f:5f:62:b0:52:a5:e5:ca:e6:f0:2f:96:13:ac:46:4a:
a8:83:7a:e7:2f:77:58:48:84:06:ec:0a:74:31:c2:ff:87:78:
4c:cc:b5:49:61:00:be:e0:0e:33:55:8b:3b:47:e4:89:a8:4a:
ad:c2:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:08:29 2024 by rpki-client on console-fra.rpki-client.org