Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/7GNQfmtiaIKhIeVHx_-YUw6NR5A.roa
File: 7GNQfmtiaIKhIeVHx_-YUw6NR5A.roa (raw, json)
Hash identifier: bOzgGgRxld4spzZyJys8BMOyQxHOFpwQhhFlzUJ6rgw=
Subject key identifier: EC:63:50:7E:6B:62:68:82:A1:21:E5:47:C7:FF:98:53:0E:8D:47:90
Certificate issuer: /CN=6974808bae27da3c69eedaf440fc3ed9fd893988
Certificate serial: 018CC9BCFA551B5070B013DC5C376E811072
Authority key identifier: 69:74:80:8B:AE:27:DA:3C:69:EE:DA:F4:40:FC:3E:D9:FD:89:39:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXSAi64n2jxp7tr0QPw-2f2JOYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/7GNQfmtiaIKhIeVHx_-YUw6NR5A.roa
Signing time: Tue 02 Jan 2024 10:34:14 +0000
ROA not before: Tue 02 Jan 2024 10:34:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.143.239.0/24 maxlen: 24
185.143.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXSAi64n2jxp7tr0QPw-2f2JOYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:fa:55:1b:50:70:b0:13:dc:5c:37:6e:81:10:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6974808bae27da3c69eedaf440fc3ed9fd893988
Validity
Not Before: Jan 2 10:34:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec63507e6b626882a121e547c7ff98530e8d4790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:95:c8:e8:b7:62:98:86:1f:2e:0e:a6:55:
5d:bb:d1:03:df:f5:30:b4:8e:a7:10:4f:b0:8f:c7:
d5:16:0a:d9:5e:d4:d3:76:81:2d:ac:ea:68:2d:b3:
a4:51:75:8a:4b:b3:9e:52:0b:63:fe:ca:de:be:b1:
7d:bb:34:40:84:8e:6d:c1:33:6e:64:e6:25:ca:a4:
da:ee:c3:b9:71:58:d8:25:d6:c4:b2:1d:5e:6d:03:
68:74:ad:a8:1c:51:bb:44:5b:d3:87:ae:39:cd:1c:
94:eb:30:1b:ac:22:87:62:a0:00:e5:ef:1f:7e:fb:
de:d6:2d:98:c3:b2:59:e2:4d:81:ac:f8:b6:1f:2a:
c5:fe:bd:f0:53:3d:b7:19:72:44:e3:49:46:f5:e7:
9a:59:d8:f3:93:48:de:3e:91:c8:dd:a0:46:35:69:
68:e0:53:dc:26:c2:a0:ac:cb:dd:8a:97:7c:2a:63:
9f:8f:ca:4a:fb:a6:6e:fc:d7:dd:8e:01:d1:bb:2e:
bb:3f:16:94:75:81:36:b9:45:bd:be:0e:69:b7:09:
f6:a6:cc:37:5c:3a:b2:f7:61:3b:20:32:aa:ff:43:
84:f4:47:00:ae:c8:6c:2f:ef:e3:af:47:dc:80:15:
96:56:b1:b3:41:ac:ee:dd:0b:d1:9b:ab:31:45:81:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:50:7E:6B:62:68:82:A1:21:E5:47:C7:FF:98:53:0E:8D:47:90
X509v3 Authority Key Identifier:
keyid:69:74:80:8B:AE:27:DA:3C:69:EE:DA:F4:40:FC:3E:D9:FD:89:39:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXSAi64n2jxp7tr0QPw-2f2JOYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/7GNQfmtiaIKhIeVHx_-YUw6NR5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a470-2ba1-4893-aa25-721ccbfef077/1/aXSAi64n2jxp7tr0QPw-2f2JOYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.236.0/24
185.143.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:38:b2:ce:5c:3d:19:08:7d:de:67:83:be:fd:dd:7b:16:08:
dc:c0:30:c8:bf:0b:33:c5:60:93:e4:d7:d8:d5:4a:6d:4b:26:
3e:05:c2:de:9f:b3:35:6b:ae:13:6a:81:61:68:a4:e2:bb:2f:
ac:bf:54:fa:8e:a3:7a:45:7a:86:cf:35:d3:5b:a3:ad:52:21:
dd:bf:01:30:b7:3a:25:78:5b:69:0d:78:67:0e:48:53:87:b0:
ff:7a:0e:78:65:2d:e6:45:4d:55:62:6a:aa:83:8f:dd:02:cf:
cb:49:c2:a4:09:f3:69:5c:d1:f2:fa:70:85:d6:c7:c1:5a:8d:
78:b7:99:b5:2e:89:b2:23:80:03:36:87:59:2d:c6:d2:6f:63:
9e:e2:1d:f2:b7:d4:00:d6:1d:cc:5e:0b:54:d0:dc:6f:a2:e8:
12:e8:67:f0:d2:01:c9:64:d3:a7:6a:5e:18:40:68:f4:da:b1:
e6:5f:c0:68:9e:a5:50:63:98:a7:5a:04:73:ad:a1:a3:36:01:
6d:27:b7:00:3c:0c:81:a8:78:5c:b3:97:27:bd:87:09:c9:fc:
eb:c6:af:85:bc:6b:b2:84:74:c8:d6:0f:20:62:de:23:31:1a:
93:d1:fb:98:14:ca:9e:e4:ed:7f:1e:88:a4:66:49:2d:1d:5a:
aa:82:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:02:10 2024 by rpki-client on console-ams.rpki-client.org