Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/99-qoCYJvy695PNNjdCuAHY0RaY.roa
File: 99-qoCYJvy695PNNjdCuAHY0RaY.roa (raw, json)
Hash identifier: PH3o1FR5oH76sCwkwMgLENMBtJGmJaEj66TSMrd0B2U=
Subject key identifier: F7:DF:AA:A0:26:09:BF:2E:BD:E4:F3:4D:8D:D0:AE:00:76:34:45:A6
Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial: 018CC64B3E2CAB66FB9C1493A5189485C49D
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/99-qoCYJvy695PNNjdCuAHY0RaY.roa
Signing time: Mon 01 Jan 2024 18:31:09 +0000
ROA not before: Mon 01 Jan 2024 18:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8469
IP address blocks: 185.64.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3e:2c:ab:66:fb:9c:14:93:a5:18:94:85:c4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Validity
Not Before: Jan 1 18:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7dfaaa02609bf2ebde4f34d8dd0ae00763445a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:2d:c7:34:a7:77:b2:ad:8a:01:e7:b4:ae:
85:4e:b8:8b:b6:05:82:0a:66:6c:41:d2:52:6b:8c:
96:23:6b:1a:9e:e8:0e:35:cc:82:58:93:b2:5a:a0:
b0:36:15:7c:a4:e0:13:65:d0:7e:7e:d7:fd:37:5c:
60:6a:d3:2a:4c:c1:96:79:59:96:b2:9b:52:de:61:
70:8d:c7:4b:c1:c7:de:44:48:e8:73:e3:5b:1d:82:
87:d1:15:b0:20:33:09:1c:0f:9c:1f:3d:8e:d1:66:
35:d4:79:99:df:bb:f0:40:45:9c:c9:5a:f7:8c:0f:
d9:3d:ea:d7:68:59:31:9d:0a:d2:87:29:3b:30:ed:
40:88:0b:15:7e:12:79:24:df:ed:76:74:62:df:e4:
a9:41:89:76:3f:67:cb:5a:49:ed:7e:5d:7e:60:ca:
c8:4e:9c:30:61:6f:63:0d:46:ae:e6:59:cd:98:2e:
c9:3f:b3:95:fd:e5:a1:3c:e4:db:9e:a6:5e:77:de:
c2:cf:f7:04:1f:e0:15:0c:a5:85:5b:40:60:e8:90:
15:a4:df:09:a7:b3:5d:10:de:f8:a1:33:f2:6f:e7:
c4:54:75:0a:3c:f9:5c:c0:09:fb:17:f8:89:f5:2d:
85:06:ad:db:ff:c2:35:1e:af:07:a6:04:b3:36:67:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:AA:A0:26:09:BF:2E:BD:E4:F3:4D:8D:D0:AE:00:76:34:45:A6
X509v3 Authority Key Identifier:
keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/99-qoCYJvy695PNNjdCuAHY0RaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:4e:fc:14:22:5b:5e:93:63:00:8a:cb:cc:55:4f:bc:0f:09:
78:59:c6:32:d7:7a:9a:d8:cf:df:7c:25:42:a8:fd:c0:bb:23:
9d:57:d4:09:98:cd:68:49:29:98:77:0c:44:09:a4:7e:1b:ef:
9e:2f:8f:08:4c:09:4c:18:d9:ba:f3:c4:e6:3a:3e:b0:c7:de:
aa:e9:27:f3:c5:70:03:6e:6b:54:ac:8a:6a:5c:3e:1c:a6:e4:
ea:87:f3:df:a8:14:91:da:3b:76:79:95:1a:23:86:d8:b0:57:
26:72:c4:e0:97:b8:98:6e:93:2d:fc:67:e4:cf:e3:08:a2:1b:
96:8c:f3:92:30:1b:ef:4d:ab:41:34:d0:77:6b:15:0e:07:04:
ef:3e:16:ae:a0:98:68:e1:9e:13:3c:08:6a:5f:8a:7d:bd:fa:
5b:79:da:d3:21:3c:7d:e3:2e:d6:36:fa:3c:55:c3:29:7b:ee:
18:49:22:72:3a:24:ee:37:9d:f0:2e:5d:13:46:3c:53:03:09:
03:b4:41:e9:ee:26:96:ba:da:73:18:ca:71:0e:2c:ff:5f:a6:
c2:aa:d4:2b:2f:61:45:3b:04:98:cf:fa:c0:63:57:b9:6c:45:
53:cd:1b:0a:85:06:03:a0:30:16:b1:99:ed:68:2b:fb:c2:76:
75:5d:28:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:58:09 2024 by rpki-client on console-fra.rpki-client.org