Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa
File: ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa (raw, json)
Hash identifier: 2RjbLY8LhSQ3Evm/8VOdlMtGPZj54uoPjsV9kvsRDfs=
Subject key identifier: 66:F1:4D:E8:CE:06:33:7A:C7:72:47:BB:13:28:4F:EE:86:32:C5:7D
Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial: 018CC4939C502009BE04E0EB6D0C49A6D003
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59770
IP address blocks: 185.53.72.0/22 maxlen: 22
2a04:cc40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:50:20:09:be:04:e0:eb:6d:0c:49:a6:d0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f14de8ce06337ac77247bb13284fee8632c57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:45:a3:06:cc:1b:b4:c4:b7:fa:87:a4:fb:
e5:45:90:02:5c:c1:1a:81:d1:a5:3f:d7:56:5c:0b:
12:40:8d:24:f0:a6:53:94:7d:95:11:84:a6:1b:b4:
5c:cf:cb:0d:eb:0f:2d:36:1b:5e:71:cc:50:bc:02:
f9:81:53:02:90:e3:2c:fb:32:1c:c5:62:5b:aa:f9:
dc:52:35:6d:45:15:85:df:11:29:20:09:74:df:43:
d4:c7:f5:15:cf:e8:a2:80:32:a6:ef:87:7a:ab:2f:
23:dd:12:b4:79:b0:31:33:0b:47:2b:fe:f4:66:22:
16:ab:53:be:3a:2e:e1:42:b9:a2:56:dd:8c:13:73:
05:ce:40:d7:9b:8f:a9:5b:dc:fe:01:40:23:66:44:
2b:79:1a:3d:35:e7:15:9d:c5:19:6c:ea:26:3a:36:
ba:de:6e:ca:e3:1b:d3:b2:09:ef:56:18:b1:6d:aa:
09:97:5e:b3:b5:66:7a:be:e5:fa:87:e2:32:bc:e3:
74:5b:ff:56:e0:90:df:32:dd:ea:39:31:d8:ce:3e:
8d:7a:1f:5f:1a:a9:a4:5c:70:6b:62:87:e2:ec:e2:
ff:bd:f5:c3:f6:45:24:b4:fb:56:23:9c:4b:c4:12:
43:9d:bb:16:f7:24:5d:83:be:c1:39:69:bc:7a:8b:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F1:4D:E8:CE:06:33:7A:C7:72:47:BB:13:28:4F:EE:86:32:C5:7D
X509v3 Authority Key Identifier:
keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/ZvFN6M4GM3rHcke7EyhP7oYyxX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.72.0/22
IPv6:
2a04:cc40::/29
Signature Algorithm: sha256WithRSAEncryption
73:72:9c:c1:5c:0d:1b:e1:89:2f:ab:cd:cc:1d:cf:d9:2e:19:
f8:54:a5:92:37:c9:21:ee:af:80:cf:ea:19:31:3f:e5:ea:99:
68:f2:87:66:17:6f:2a:b7:05:d7:d4:42:73:ee:bb:3b:08:cf:
d8:74:0e:c0:97:ea:7f:20:1d:65:4f:fc:a3:7f:d4:03:3a:bb:
9c:60:46:97:06:cb:76:4a:55:64:0d:91:7d:5c:2d:5b:87:93:
e3:29:de:20:db:27:83:bd:7f:30:f3:8c:af:2b:68:f5:d5:b0:
45:f9:95:d8:3c:55:c5:7e:31:a1:d0:b5:83:f9:48:5b:40:7d:
22:97:de:99:15:89:e6:c4:d4:89:95:d8:8e:5a:73:34:53:5c:
a0:af:de:a7:4d:79:52:2b:c9:34:ba:0b:37:bf:54:36:52:66:
00:f6:3e:53:be:41:a7:c3:bf:3d:48:a0:12:88:e0:41:ab:27:
2e:03:af:17:7d:69:15:27:a8:6c:c0:26:b8:3d:ba:85:3c:68:
aa:2f:a7:df:0f:a2:06:1e:84:a9:13:65:f8:88:be:fc:7c:d9:
14:7e:0a:56:29:6f:7a:bb:3a:19:a3:c0:b7:61:00:48:da:16:
9e:45:b1:35:90:be:b6:72:ae:32:aa:df:97:4f:33:d1:f5:6b:
ce:35:1b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:58 2024 by rpki-client on console-ams.rpki-client.org