Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zeR67-A8yMRRltQ9GkqNT3xiffM.roa
File: zeR67-A8yMRRltQ9GkqNT3xiffM.roa (raw, json)
Hash identifier: 1yRNALm2g7wq3LWV2rlx7sYWCLoQKbwqX872ne/rGsQ=
Subject key identifier: CD:E4:7A:EF:E0:3C:C8:C4:51:96:D4:3D:1A:4A:8D:4F:7C:62:7D:F3
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018F82AFB68472EBB05C71EB8762A7BEC700
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zeR67-A8yMRRltQ9GkqNT3xiffM.roa
Signing time: Thu 16 May 2024 18:35:04 +0000
ROA not before: Thu 16 May 2024 18:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.221.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:af:b6:84:72:eb:b0:5c:71:eb:87:62:a7:be:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 16 18:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde47aefe03cc8c45196d43d1a4a8d4f7c627df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:28:20:8a:9d:54:ec:c2:11:fe:fe:36:84:
03:fb:17:b3:ac:ad:bf:5c:b4:b1:11:02:c6:9d:4b:
63:12:16:97:a2:5d:17:6e:65:3f:6e:06:70:39:c6:
53:3e:9d:3a:25:39:2c:b5:5a:c3:8e:ef:74:ea:2c:
ee:1a:0d:5f:85:91:66:17:2c:e9:e4:23:48:bd:65:
c4:49:07:9b:a7:ed:bc:e3:f0:72:83:6f:9f:d6:6d:
d9:a9:63:bf:6e:2a:07:b3:03:e2:8d:88:44:4d:bf:
0d:20:29:a2:fc:a5:17:33:aa:66:7a:af:e8:dc:64:
c6:64:b6:84:a7:33:1e:8b:3f:00:1b:00:d3:d3:fa:
d3:d5:67:59:f8:36:a8:26:a3:cb:ee:08:79:9f:bc:
2f:d9:fd:83:7b:f8:6d:86:1b:72:f6:9c:b1:2d:e7:
87:d9:ba:41:e3:0c:5d:63:f4:1f:6b:dc:79:61:f0:
38:33:9b:78:68:8e:a9:32:1b:2d:5b:cd:13:80:1c:
9f:bf:95:cd:df:ce:e9:70:09:30:c0:e0:19:98:93:
2f:c2:a2:6f:b3:d2:eb:9c:5b:1c:ce:06:cf:fe:e8:
17:65:94:a7:7d:4f:07:c3:96:19:37:12:8e:47:96:
6d:7b:cd:3c:a3:23:c3:46:25:09:09:97:ff:8e:6d:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E4:7A:EF:E0:3C:C8:C4:51:96:D4:3D:1A:4A:8D:4F:7C:62:7D:F3
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/zeR67-A8yMRRltQ9GkqNT3xiffM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.26.0/24
Signature Algorithm: sha256WithRSAEncryption
53:64:bf:6b:7e:73:25:14:e7:01:2e:3d:b7:77:3a:e3:b5:f2:
f1:f7:ed:1f:e9:24:d8:0b:1e:1f:15:1d:4a:87:60:97:61:5c:
e0:f9:d5:df:c1:11:28:3a:f2:2f:70:3f:14:c3:d9:1b:91:c6:
3c:18:d4:f7:db:6a:ff:19:b9:03:cf:fa:d6:cb:f9:a8:e9:43:
76:ec:89:bb:b3:bb:ad:86:3e:f5:9f:94:78:71:78:c0:6b:69:
6f:81:a3:c8:3c:2c:64:6e:53:82:46:c3:8d:c8:28:7c:c1:52:
93:aa:d0:93:8f:08:64:6c:86:a8:ae:26:31:80:d6:c3:a8:91:
a6:4d:09:4b:69:85:04:bf:2d:6d:65:05:45:2e:2c:90:f5:a3:
d1:df:4d:3d:86:af:d7:0c:7d:35:3e:4b:4b:69:92:31:d2:29:
55:af:ce:05:7a:78:4a:4e:aa:9b:33:9e:9a:65:87:0a:78:2a:
ee:5b:71:61:29:b4:1f:e2:f8:e3:4a:99:ba:91:64:84:a7:9c:
09:a9:78:ca:5c:72:0d:3f:34:f4:a4:f5:cd:20:09:bb:eb:d9:
5b:a8:5b:e7:92:72:52:2c:1c:36:60:01:c8:91:f8:cb:b3:be:
b3:23:24:89:61:b3:31:4b:0d:cc:08:14:7b:d4:bc:4d:ca:2f:
07:ad:df:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:17 2024 by rpki-client on console-fra.rpki-client.org