Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/m3yhQQiXOMd59lWI2xRAjzCjLpA.roa
File: m3yhQQiXOMd59lWI2xRAjzCjLpA.roa (raw, json)
Hash identifier: XiOBRlEYNxocaEeZL3chFgsV47dAlYUf3GoJcIg3EvI=
Subject key identifier: 9B:7C:A1:41:08:97:38:C7:79:F6:55:88:DB:14:40:8F:30:A3:2E:90
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 018CC6B7B0A742C4E31E2242AB14F09B4041
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/m3yhQQiXOMd59lWI2xRAjzCjLpA.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61157
IP address blocks: 185.171.217.0/24 maxlen: 24
185.171.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b0:a7:42:c4:e3:1e:22:42:ab:14:f0:9b:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b7ca141089738c779f65588db14408f30a32e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:31:4f:94:d5:7f:6b:c7:1d:dd:9f:c7:01:
5c:2b:97:98:1c:f5:22:3d:8f:e0:40:18:6a:9c:16:
7f:8c:06:b1:0b:3e:ab:a2:59:40:37:c0:eb:e5:b8:
08:96:63:c6:90:51:02:c4:db:72:0e:eb:9c:0e:6c:
e7:d4:da:2a:4f:98:26:68:b5:61:79:1b:70:b3:98:
82:18:4b:42:2e:a1:25:77:c2:2f:bb:4d:9f:60:4b:
2c:63:3c:d7:77:0f:8a:d3:60:d0:9d:ac:2c:c7:68:
e0:22:48:21:be:d9:28:94:88:3c:78:43:f2:3c:a3:
53:b1:55:9b:30:75:3a:61:47:01:6b:35:02:9d:4e:
29:45:ec:f8:f9:18:40:44:15:24:30:d9:69:b3:61:
63:5c:fc:27:a5:1f:7a:d3:09:2c:ae:69:c3:51:c1:
15:59:45:99:68:d0:cf:5f:08:ab:2a:af:02:63:e0:
45:80:1e:36:95:08:3a:09:4e:b0:09:4d:f3:10:c0:
86:0c:86:8b:36:87:fa:78:74:69:fc:df:d3:84:f3:
ec:27:db:e4:80:66:80:d5:68:80:d5:bb:e6:8b:e7:
9a:14:66:75:06:43:a7:c5:07:cd:e8:68:5b:b9:d0:
aa:e6:9f:6f:5b:6a:d2:9e:ca:5b:80:07:17:dc:e0:
7a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:A1:41:08:97:38:C7:79:F6:55:88:DB:14:40:8F:30:A3:2E:90
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/m3yhQQiXOMd59lWI2xRAjzCjLpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:bd:b5:3d:56:da:3f:c6:fd:03:ed:d7:64:aa:1c:a5:fb:6c:
b0:80:11:5d:cf:bb:0b:78:b8:db:96:e0:99:6a:2d:95:30:27:
1a:e2:08:aa:fd:c6:98:8c:d9:4b:e9:96:d0:a0:b9:84:9c:6d:
74:fd:82:f3:fc:a0:f7:47:13:0d:a2:b0:de:d5:ad:40:90:6c:
19:99:df:4e:67:4c:2f:61:9b:c8:ce:73:00:54:8f:d5:c6:08:
be:d8:22:84:d6:b8:29:0e:0d:5a:ef:45:c0:3c:30:1b:c5:e3:
34:b4:72:47:1f:ea:d1:aa:aa:79:fa:5a:27:6d:cf:cd:1e:3e:
51:45:20:fe:57:08:91:c6:db:47:8d:b4:78:05:38:a5:72:b7:
a0:b3:7f:23:a4:c0:67:c7:e4:71:86:c8:bc:e0:71:ac:f5:e3:
90:06:d4:b1:b8:7d:3b:ac:94:92:6b:fc:8e:2a:da:b5:8b:82:
92:79:55:30:2a:62:7e:84:15:78:be:f2:d1:4f:cd:4d:56:60:
32:78:79:bc:b7:7f:69:12:51:a2:9d:bc:96:d8:9f:c7:ff:eb:
13:eb:1a:19:e9:7c:3d:ce:5d:9f:9d:cf:54:2c:fd:1b:23:07:
ed:0c:eb:5d:72:a5:c5:90:17:9c:12:31:5b:61:d2:93:d2:f7:
88:58:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:52:54 2024 by rpki-client on console-fra.rpki-client.org