Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/zU1xXkUz1FIoPofbU1uq56EnLnE.roa
File: zU1xXkUz1FIoPofbU1uq56EnLnE.roa (raw, json)
Hash identifier: jTUpbKlDLG+mBAUECt/53wUspIeu5RGngcVYhAJKggE=
Subject key identifier: CD:4D:71:5E:45:33:D4:52:28:3E:87:DB:53:5B:AA:E7:A1:27:2E:71
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018CC7273718EC81C15692F3E439896BBE7E
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/zU1xXkUz1FIoPofbU1uq56EnLnE.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207702
IP address blocks: 185.226.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:37:18:ec:81:c1:56:92:f3:e4:39:89:6b:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd4d715e4533d452283e87db535baae7a1272e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:28:9d:71:e8:7b:d6:03:12:b7:dd:93:a1:
d3:3d:86:dc:81:34:c1:b2:e2:c6:3d:0a:fd:b1:5c:
86:27:db:0c:ec:76:78:62:6f:06:e1:e9:00:6d:55:
13:ad:21:de:74:f8:97:e9:cc:ad:82:aa:6e:46:b0:
9d:92:24:58:15:05:d7:37:cb:95:9e:0b:b6:6a:cb:
68:c8:8d:fe:05:52:f0:17:c0:07:ec:65:d8:6a:8a:
9a:81:f4:28:05:d4:54:53:3e:9d:be:e1:84:d4:6f:
33:9b:b1:19:99:8b:82:b9:cf:7d:f3:5c:81:17:45:
4f:5f:dd:10:5d:64:37:c4:3b:ca:ea:39:d7:98:60:
0f:eb:03:12:db:2b:4b:9e:df:af:69:41:8b:4e:f6:
1f:0b:e8:3d:e6:f4:9a:39:51:15:65:da:f3:c2:21:
9e:33:a5:c7:38:0c:77:3c:9d:b9:cf:54:92:e5:aa:
fa:63:af:40:8b:46:e0:a8:bb:de:fc:63:b5:7e:73:
c2:7d:a7:2f:34:6c:9f:39:08:dd:63:e9:03:a0:9c:
ac:00:df:5d:fd:24:a1:3f:4d:17:f8:1d:67:f4:59:
e1:5e:21:1b:b8:2b:50:dd:a2:b5:63:42:71:85:8e:
92:eb:5c:f7:14:56:12:0f:ef:fb:d6:f2:b7:44:e3:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:71:5E:45:33:D4:52:28:3E:87:DB:53:5B:AA:E7:A1:27:2E:71
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/zU1xXkUz1FIoPofbU1uq56EnLnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.230.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bd:ef:c3:93:1f:57:b5:89:2c:91:f7:14:a2:3c:fa:88:40:
b7:b7:e1:c5:69:1d:e6:12:3b:f4:0f:b2:aa:cc:d8:70:0e:6e:
68:73:10:f0:48:9a:61:aa:ef:31:b6:52:fb:1c:c8:a2:2a:67:
3b:d4:f3:c4:d9:0a:27:37:52:e4:25:6a:7b:66:6d:dd:48:fc:
bd:58:40:de:5f:02:29:10:c1:a7:1d:6f:b9:5c:2d:cf:56:d9:
5f:b7:d5:80:81:29:91:25:7a:da:df:50:7f:49:48:44:ac:6f:
57:b6:79:62:21:d3:1a:58:6f:e2:a7:60:28:4b:6c:9a:da:cc:
84:db:38:67:ff:44:b7:fa:a9:11:c9:32:80:e6:ee:bd:26:1f:
6f:57:a6:1a:7d:88:36:2c:01:a8:3f:52:38:28:ae:73:bc:fe:
cf:0f:ae:c8:2e:29:8c:c6:e8:7e:32:ac:03:08:86:e6:a8:15:
ee:96:79:82:63:89:ee:02:29:36:d7:fc:37:dc:c1:85:9d:7a:
31:66:74:6a:77:43:00:a2:f9:64:0f:eb:85:e5:65:e9:30:5b:
5f:b6:11:77:81:7f:e9:64:87:4a:70:4e:d6:49:01:e9:9f:d8:
0f:10:b3:65:6b:23:83:54:62:35:ac:e1:39:4a:c4:a5:84:26:
09:51:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:52:11 2024 by rpki-client on console-fra.rpki-client.org