Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/Z9aGLo3Lm5FHg8VrNmuRK091OhI.roa
File: Z9aGLo3Lm5FHg8VrNmuRK091OhI.roa (raw, json)
Hash identifier: J6Gt7FNYV/KVN3fM6x7G3yHHZgCPOhUOO6bg1bXIWyg=
Subject key identifier: 67:D6:86:2E:8D:CB:9B:91:47:83:C5:6B:36:6B:91:2B:4F:75:3A:12
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 018CC424B3518577038012B4ED74F83D25C1
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/Z9aGLo3Lm5FHg8VrNmuRK091OhI.roa
Signing time: Mon 01 Jan 2024 08:29:48 +0000
ROA not before: Mon 01 Jan 2024 08:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201031
IP address blocks: 185.88.24.0/22 maxlen: 22
185.88.24.0/24 maxlen: 24
185.88.24.0/23 maxlen: 23
185.88.26.0/24 maxlen: 24
185.88.26.0/23 maxlen: 23
185.88.25.0/24 maxlen: 24
185.88.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b3:51:85:77:03:80:12:b4:ed:74:f8:3d:25:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Jan 1 08:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d6862e8dcb9b914783c56b366b912b4f753a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:a9:7f:3c:59:10:75:26:f7:27:62:05:30:
69:8c:de:92:28:7d:23:96:86:74:4f:1f:56:f6:e2:
db:06:7b:ae:50:7c:ef:dd:a9:d8:f5:7d:16:b3:f5:
d2:ec:cf:6f:cf:3f:4d:f9:ef:a6:23:75:39:11:14:
b7:7c:04:2d:ca:f2:73:5f:59:9b:e7:5e:3d:1f:0a:
d3:03:6d:70:73:d2:7e:c1:24:15:a6:24:37:11:e7:
08:70:f2:18:18:0b:b8:71:ea:ef:21:3b:48:46:d6:
b9:65:e9:6b:69:c7:e0:a6:50:a9:db:e4:14:72:aa:
3c:65:f9:d1:2e:f4:bb:14:a3:93:52:9d:84:49:c0:
86:29:47:61:37:86:97:5d:ea:db:06:03:3a:99:79:
12:be:c9:4a:36:3b:3c:8d:0d:d6:b0:50:f6:68:da:
37:15:63:44:1f:8b:22:27:96:f1:6d:eb:75:9f:83:
4c:16:b6:f9:f3:e4:43:c5:4b:d9:a1:72:9c:a8:cd:
5e:b9:4d:5d:74:49:9b:48:e1:1a:a7:9d:96:15:07:
7c:a3:7c:f8:40:17:c9:01:2a:ab:74:42:4a:b9:3a:
6e:59:5d:fb:d5:7c:50:8a:de:98:28:29:82:f4:db:
4d:13:80:0c:ff:f2:b2:ac:9b:f6:dd:62:04:02:a9:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:86:2E:8D:CB:9B:91:47:83:C5:6B:36:6B:91:2B:4F:75:3A:12
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/Z9aGLo3Lm5FHg8VrNmuRK091OhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.24.0/22
Signature Algorithm: sha256WithRSAEncryption
74:22:74:00:c7:a0:ce:0c:ad:48:2e:44:e4:5a:62:92:fa:01:
69:b1:bf:81:ee:0d:d5:d3:20:03:57:8c:51:b5:b4:21:6c:5a:
4a:b7:14:39:50:9d:53:36:c7:79:cc:6e:b0:30:6f:ff:e2:15:
02:e3:ac:66:26:6b:68:56:82:cb:38:42:b5:e4:79:ce:7f:c7:
ab:5f:f0:c6:f9:bf:3f:dc:ee:f4:7d:68:2b:0f:32:72:85:82:
d2:17:eb:4a:fa:f6:bb:b4:32:71:57:a5:d2:3c:a6:28:4d:fa:
5d:39:79:e7:10:c5:63:00:85:06:21:0c:0e:94:5e:c4:2e:60:
e0:17:b1:f3:89:e3:2d:ba:f9:66:e0:ac:0e:99:95:84:a2:37:
84:6c:c4:05:ad:d3:2e:f2:fe:85:5e:df:09:10:53:79:70:5a:
cc:02:0b:5b:2d:3a:dd:11:0f:b8:3d:84:de:e1:ed:44:34:13:
ca:35:0e:96:ef:30:3a:35:fb:ab:59:b0:91:f3:08:b1:ae:ae:
ff:38:41:b4:e6:5b:51:2a:33:15:b7:4c:23:d9:74:16:2e:f4:
68:fe:1f:d8:15:41:2c:46:ea:1a:1e:20:f6:c6:27:32:fa:16:
9a:5f:ff:45:4a:63:a3:0f:56:3d:7b:23:d3:8c:b5:8b:bb:bd:
6d:15:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:52:40 2024 by rpki-client on console-fra.rpki-client.org