Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa
File: 1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa (raw, json)
Hash identifier: 7lKsnQQvw+MIMVSXztdEghlL0g44hAPTYlZQRg8r0w8=
Subject key identifier: D6:B0:C9:8F:A1:7E:2B:E4:57:D6:44:E4:43:A6:B4:13:FC:F0:89:1A
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 018CC56E858E0CA6BCA74B67028B0FCD31F8
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa
Signing time: Mon 01 Jan 2024 14:30:03 +0000
ROA not before: Mon 01 Jan 2024 14:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47492
IP address blocks: 81.161.227.0/24 maxlen: 24
185.94.232.0/22 maxlen: 24
185.94.232.0/23 maxlen: 24
185.94.232.0/24 maxlen: 24
185.94.233.0/24 maxlen: 24
185.94.234.0/23 maxlen: 24
185.94.234.0/24 maxlen: 24
81.161.224.0/24 maxlen: 24
185.94.235.0/24 maxlen: 24
81.161.225.0/24 maxlen: 24
2a03:e841::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:85:8e:0c:a6:bc:a7:4b:67:02:8b:0f:cd:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jan 1 14:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6b0c98fa17e2be457d644e443a6b413fcf0891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:3f:15:3f:19:6d:ba:07:d1:7c:15:2c:2b:
f0:9f:af:ac:59:76:0e:b4:0c:e3:5a:5f:4b:69:9f:
60:16:6c:72:c1:8a:9f:60:a5:67:47:a4:4e:f0:dd:
a8:ca:65:64:44:4d:b7:e5:4a:5f:f5:38:10:00:c9:
a7:06:4c:b2:8d:0d:aa:dc:f1:a0:99:8d:18:e5:c6:
3d:cc:56:3c:3c:43:a1:ee:97:c6:f5:8c:c1:b6:a6:
ce:ec:f9:f1:86:d3:6a:bd:c7:8e:dc:11:a3:6f:37:
3a:c7:df:50:15:fd:33:93:a7:76:03:50:fd:07:0b:
d1:4b:cb:8d:0c:57:b2:7e:16:f1:4e:39:ac:88:a9:
41:23:7a:a3:d8:ad:d5:20:6f:17:6f:fc:09:35:d1:
75:16:ac:16:f4:33:2a:41:4e:24:e4:70:a4:f5:16:
7b:63:e8:7b:ce:71:c1:d2:a2:e2:65:80:3b:1a:47:
00:a5:71:9e:55:1f:e6:69:67:67:47:fe:b7:e6:6f:
9d:bf:a3:43:39:8e:50:b5:5c:bd:cd:51:75:4e:03:
e2:b8:48:46:dc:79:7d:23:13:ee:8b:66:16:24:36:
98:04:8f:59:62:2a:14:1d:36:4f:19:68:ce:30:40:
e1:a2:16:80:ab:10:93:be:82:cc:15:f6:97:a6:52:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:C9:8F:A1:7E:2B:E4:57:D6:44:E4:43:A6:B4:13:FC:F0:89:1A
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/1rDJj6F-K-RX1kTkQ6a0E_zwiRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.224.0/23
81.161.227.0/24
185.94.232.0/22
IPv6:
2a03:e841::/32
Signature Algorithm: sha256WithRSAEncryption
7c:fa:2e:6f:e7:1a:c8:14:26:b5:7d:f0:71:bb:51:17:82:b7:
4b:4c:57:2b:15:56:ba:d1:f7:23:00:2f:86:d4:75:9e:17:23:
a7:ba:2e:9e:9f:11:cb:ee:af:19:aa:20:49:4a:95:73:72:3d:
88:a7:c9:57:dc:de:4a:5d:ee:77:2f:2c:ed:2d:b5:82:39:44:
f8:31:bb:3e:0a:d2:70:a7:f9:4a:6f:cc:fb:91:4d:77:0d:b1:
6f:3c:1d:12:d9:2b:37:b3:44:82:c7:96:db:59:ec:56:fa:fd:
e9:2f:5c:ba:cf:6f:29:c4:80:0e:46:62:53:43:4d:9c:93:7b:
a2:2f:98:b8:93:30:c9:93:b3:49:52:47:4c:24:28:d7:0f:12:
f2:c6:ec:14:f4:3f:d3:17:6f:c2:ba:5e:b4:e9:dc:b1:9b:6c:
27:53:96:3a:1c:0f:ac:61:a4:10:8b:5c:bf:a0:01:2f:7e:97:
51:7b:44:be:85:a5:ad:ca:97:38:83:5f:01:ef:1f:e4:e2:ff:
cb:5f:be:eb:d2:23:a2:cb:07:bd:25:27:56:97:c7:99:10:91:
cf:68:ed:a9:24:2e:09:1e:8f:6a:c1:aa:dd:25:54:ac:95:1b:
05:ce:0d:42:b0:44:ce:43:17:4c:81:a8:66:f9:8c:3e:d9:e6:
79:68:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:52 2024 by rpki-client on console-ams.rpki-client.org