Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/asNZ6E6pHAoCFMqmXqqQYFcQzmg.roa
File: asNZ6E6pHAoCFMqmXqqQYFcQzmg.roa (raw, json)
Hash identifier: mjUOpjZuI5R0nPg0wXROxzF8fGSkLLfOTWj3gaVtff0=
Subject key identifier: 6A:C3:59:E8:4E:A9:1C:0A:02:14:CA:A6:5E:AA:90:60:57:10:CE:68
Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial: 018CC5DC146FEEF0D4541B27E96800C08948
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/asNZ6E6pHAoCFMqmXqqQYFcQzmg.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62537
IP address blocks: 185.94.26.0/23 maxlen: 23
185.94.24.0/23 maxlen: 23
185.94.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:14:6f:ee:f0:d4:54:1b:27:e9:68:00:c0:89:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ac359e84ea91c0a0214caa65eaa90605710ce68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:12:9f:88:a3:24:4b:a2:ea:cd:36:f5:82:
a6:13:b5:6a:22:00:35:b9:99:9d:b1:e4:78:e0:01:
4f:23:6c:b5:30:d7:8a:5a:d8:a0:f5:71:1a:f8:c3:
62:9d:7e:78:cb:aa:4b:82:3e:84:9e:1d:0f:62:cd:
0a:d0:ac:b0:c2:4f:f7:70:26:84:31:72:bf:71:52:
85:75:1d:fd:7a:6a:16:ef:2d:96:2a:53:68:f7:76:
8c:8e:75:88:e7:e5:dd:66:42:ce:de:0f:73:93:9b:
19:9f:e3:86:c6:01:90:23:65:d5:08:9c:20:5c:96:
cd:2c:64:e8:a8:96:20:3f:b4:23:e2:21:32:f1:4f:
44:35:b9:99:d6:90:97:7b:f5:40:19:e7:a3:ca:cb:
5e:30:e3:c8:6d:bb:58:99:f1:af:cf:08:12:54:5a:
42:02:ad:43:40:fa:48:22:cc:26:14:2c:bc:77:eb:
87:b7:43:d1:56:0f:e2:30:74:31:97:b9:44:6f:a2:
bb:2c:89:d6:49:58:ec:e7:bc:57:e4:cc:99:ae:8c:
bd:f7:2e:08:e1:88:04:b2:42:9f:bd:69:f9:4c:88:
04:63:d0:65:3d:04:7a:07:53:ca:64:74:d3:d9:a3:
8d:cb:6a:15:3e:54:32:10:fa:b7:fa:c2:e4:7f:89:
59:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C3:59:E8:4E:A9:1C:0A:02:14:CA:A6:5E:AA:90:60:57:10:CE:68
X509v3 Authority Key Identifier:
keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/asNZ6E6pHAoCFMqmXqqQYFcQzmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.24.0/22
Signature Algorithm: sha256WithRSAEncryption
02:49:e6:88:b7:8c:19:f2:ef:92:b3:89:f3:1b:ab:b4:0a:ab:
4d:0c:e9:7d:93:9c:23:84:13:8f:68:4d:a7:05:87:19:91:80:
ee:06:97:d9:e6:90:37:33:b9:6b:3b:cb:97:93:32:d9:1f:90:
7b:36:3a:08:b2:4e:be:f7:6a:34:e2:d2:b8:b5:4f:d2:4f:79:
c6:ab:ab:8c:c1:80:b8:8a:a5:13:51:3f:5f:c9:44:20:7d:ff:
96:04:98:68:15:e1:bb:11:24:9b:03:68:aa:98:c8:86:aa:76:
87:b4:df:48:d7:aa:0c:a0:bd:54:aa:43:be:21:7d:0e:06:92:
fc:ff:4c:9b:2d:b0:7f:13:d3:2f:c5:19:39:be:88:86:6e:55:
a7:00:f9:79:28:a5:e4:a8:34:21:d9:de:e2:96:e7:f1:4b:1a:
e0:9e:24:53:42:c1:ad:0a:fb:cc:b7:93:42:e6:29:01:32:a4:
7c:a1:bd:2d:51:a4:e8:dd:e8:07:0e:e5:5f:2a:bc:9e:7c:e0:
bc:67:73:e0:d3:d9:92:7a:5e:2b:da:7b:39:15:f0:eb:ae:b3:
57:79:f7:12:b4:ad:93:ef:4b:55:9b:40:40:c7:8b:46:0b:40:
84:c6:c0:7d:63:a2:f2:ee:e2:ce:d3:a2:7f:0a:df:0a:65:43:
3c:ca:88:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:55:41 2024 by rpki-client on console-fra.rpki-client.org