Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ZxQ0RyvW-nI8U9row2qR12dtCic.roa
File: ZxQ0RyvW-nI8U9row2qR12dtCic.roa (raw, json)
Hash identifier: Kat8xi3qlbQXNgZmy/rhrSZmgMuNNTAL6pn7je/37V4=
Subject key identifier: 67:14:34:47:2B:D6:FA:72:3C:53:DA:E8:C3:6A:91:D7:67:6D:0A:27
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 018CC4922BF7ED57DA3380333CBDF5D3609E
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ZxQ0RyvW-nI8U9row2qR12dtCic.roa
Signing time: Mon 01 Jan 2024 10:29:22 +0000
ROA not before: Mon 01 Jan 2024 10:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201352
IP address blocks: 185.71.246.0/24 maxlen: 24
185.71.245.0/24 maxlen: 24
185.71.244.0/24 maxlen: 24
185.71.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2b:f7:ed:57:da:33:80:33:3c:bd:f5:d3:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jan 1 10:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671434472bd6fa723c53dae8c36a91d7676d0a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:cf:f9:d3:64:9a:cb:f3:04:08:2f:e6:ee:
c1:1b:45:ed:18:33:d6:91:5c:5e:65:90:35:97:2b:
51:ad:f9:76:89:80:25:d9:93:45:96:81:bf:d5:c6:
2a:51:c5:10:e2:d8:aa:12:3b:92:d5:99:ba:9f:f9:
5e:9b:98:db:ec:5c:57:a5:2a:be:5b:df:c8:04:ce:
6c:5b:b4:da:48:84:4f:4a:f5:6f:36:c1:ca:15:00:
fb:f1:83:14:5b:d2:93:d2:11:89:f1:92:21:38:47:
6f:2d:d4:c8:84:04:d6:af:dd:86:e6:15:50:98:92:
39:5d:d2:11:60:a5:27:32:50:e2:26:36:6d:d8:99:
f8:d9:23:48:c3:8a:e7:ce:2f:a3:8a:79:fb:ff:87:
b7:76:dd:cf:31:07:37:b6:ce:f3:36:0a:bb:7f:3f:
d6:38:2b:11:af:2e:31:61:01:0b:01:e2:a1:66:f5:
4b:48:15:f5:83:53:7c:fa:37:af:21:38:81:58:d0:
3b:fc:8f:3d:2c:47:2d:cf:d5:8c:a1:69:5c:89:3e:
07:26:36:9d:98:e4:d5:74:bb:fa:0f:f8:3b:e9:ad:
30:1b:26:26:a0:39:98:ad:8e:84:a5:3b:a9:44:72:
02:28:87:58:8d:96:56:04:3e:65:f8:51:fb:df:bd:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:14:34:47:2B:D6:FA:72:3C:53:DA:E8:C3:6A:91:D7:67:6D:0A:27
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/ZxQ0RyvW-nI8U9row2qR12dtCic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.244.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:b1:1e:bf:c1:bb:09:9e:82:4e:92:f2:b8:35:0f:6f:76:ac:
9b:f7:ba:66:f7:1d:79:8b:e7:22:e8:81:14:e9:fe:ee:8a:0c:
d4:c1:e0:95:2c:4f:83:80:72:09:1f:44:d8:34:43:6b:04:73:
c3:33:55:1a:2e:a2:16:95:4e:fe:01:e5:6a:66:b8:01:4f:8e:
80:f1:41:43:78:9b:0a:1a:58:10:34:f7:a6:1f:4f:08:40:15:
be:75:a3:0f:cf:cd:58:e2:a8:71:a0:38:04:17:72:0f:4e:58:
79:13:c0:5b:f8:fc:b6:a0:37:01:d8:1a:ec:0d:76:93:ee:e4:
01:ef:c5:45:06:50:68:67:ec:06:e2:9a:ef:1a:b6:f8:08:da:
aa:46:25:94:6a:a8:b1:99:59:a6:87:ac:97:39:f2:58:af:d4:
86:fb:72:47:65:24:24:53:c5:c5:00:43:51:36:5d:d2:f8:19:
59:94:0b:37:93:0c:9b:69:96:60:05:3e:d2:70:c1:7c:75:2a:
8c:de:0c:ac:e9:f5:9f:d4:bb:62:b7:77:14:0c:09:7b:83:2e:
e9:33:c6:c2:12:23:6f:4e:8e:a8:1e:7f:a8:05:38:7e:0a:19:
9e:9d:15:c7:a3:12:fa:1e:50:7e:ed:a6:c8:b0:46:f4:e9:43:
0d:cd:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:38:58 2024 by rpki-client on console-ams.rpki-client.org