Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/ZkvgEO7tEtYYXZzfk_LBC8SiOu8.roa
File: ZkvgEO7tEtYYXZzfk_LBC8SiOu8.roa (raw, json)
Hash identifier: bQCC1Eq397s5rmM3RU24sC3caUKaw10Es0s/QLAxunk=
Subject key identifier: 66:4B:E0:10:EE:ED:12:D6:18:5D:9C:DF:93:F2:C1:0B:C4:A2:3A:EF
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0191FAC82E46F7833E448D71C6ECEE3CC487
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/ZkvgEO7tEtYYXZzfk_LBC8SiOu8.roa
Signing time: Mon 16 Sep 2024 12:21:48 +0000
ROA not before: Mon 16 Sep 2024 12:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5631
IP address blocks: 79.173.128.0/18 maxlen: 18
79.173.128.0/19 maxlen: 19
79.173.128.0/20 maxlen: 20
79.173.128.0/21 maxlen: 21
79.173.136.0/21 maxlen: 21
79.173.144.0/21 maxlen: 21
79.173.152.0/21 maxlen: 21
79.173.160.0/19 maxlen: 19
79.173.160.0/21 maxlen: 21
79.173.168.0/21 maxlen: 21
79.173.176.0/21 maxlen: 21
79.173.184.0/21 maxlen: 21
83.143.224.0/21 maxlen: 21
83.143.224.0/22 maxlen: 22
83.143.228.0/22 maxlen: 22
195.167.128.0/20 maxlen: 20
195.167.128.0/21 maxlen: 21
195.167.136.0/21 maxlen: 21
195.167.176.0/20 maxlen: 20
195.167.176.0/21 maxlen: 21
195.167.184.0/21 maxlen: 21
2a00:5840::/32 maxlen: 32
2a02:890::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:c8:2e:46:f7:83:3e:44:8d:71:c6:ec:ee:3c:c4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Sep 16 12:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664be010eeed12d6185d9cdf93f2c10bc4a23aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:bc:9c:60:98:d2:94:6b:42:d6:ec:d0:0d:
04:3e:fe:53:62:fa:44:a1:82:d4:00:13:b0:20:b4:
b2:00:7c:3c:69:88:88:ff:25:ae:c3:d9:1f:1e:31:
62:b6:6c:17:1e:19:b3:50:eb:df:ec:10:e9:da:b3:
10:4e:49:d8:92:7b:c6:fc:b5:91:f3:4c:ad:3a:b1:
87:34:ce:cc:e7:db:73:b2:fb:e4:ed:d5:a0:7b:1d:
79:58:7a:e4:3e:61:d2:ad:41:d5:aa:95:90:04:86:
25:1b:5d:fc:d7:97:81:43:8a:cc:63:60:f0:1a:c1:
40:54:4b:d3:20:2f:e1:f1:97:18:d6:2d:2e:14:35:
e6:37:55:d1:80:f6:00:c3:bf:f7:b6:52:5a:e9:3b:
e4:b3:62:50:8a:34:38:60:9f:75:da:90:bf:2f:5c:
2c:9a:53:2d:4b:75:07:75:3a:ed:61:2f:55:40:fb:
0f:8d:c6:8a:62:95:2c:d3:e5:bc:70:4b:c7:94:1b:
c0:9e:20:42:42:d9:46:f1:98:00:02:d6:5e:c7:40:
72:5b:fa:cf:3d:37:cf:9b:1a:6c:73:9b:3a:f3:dd:
95:ae:eb:b2:de:32:14:b4:ec:9c:e8:20:19:ac:90:
37:ce:6a:c3:6f:ac:ee:16:83:94:e5:a4:74:58:4c:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:E0:10:EE:ED:12:D6:18:5D:9C:DF:93:F2:C1:0B:C4:A2:3A:EF
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/ZkvgEO7tEtYYXZzfk_LBC8SiOu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.128.0/18
83.143.224.0/21
195.167.128.0/20
195.167.176.0/20
IPv6:
2a00:5840::/32
2a02:890::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e7:6d:ce:a2:4e:e1:35:89:bb:1c:bc:20:59:ef:d1:74:14:
78:9f:73:30:15:cb:37:66:ee:d6:40:fc:57:c8:41:71:68:90:
05:fe:94:31:0d:0d:c6:08:d2:25:0e:d3:7c:42:15:32:a6:8a:
26:e3:05:39:3b:20:fb:76:93:2b:c8:22:58:4a:21:21:4a:45:
f1:3e:4c:84:b3:94:b0:67:72:f0:43:b4:34:81:d6:c2:70:4f:
af:84:9f:1e:d7:87:6f:c0:bf:85:0f:0f:7c:c5:f8:f2:7b:c0:
b4:7c:b5:6f:16:e8:6d:8b:f8:80:be:a2:95:63:c3:48:ad:da:
38:e8:36:5a:11:47:c8:e3:dd:7e:f5:f5:af:83:d5:53:b2:09:
c6:06:85:49:8b:46:ff:40:d7:ab:ee:05:58:8c:44:45:13:32:
cf:9b:62:35:fb:5c:ab:98:b3:b8:53:57:85:37:ab:97:af:ce:
68:8e:95:9f:2c:cc:31:60:00:bb:15:2f:e8:17:9d:5e:ea:1d:
81:14:92:bc:03:4e:23:b6:d6:d2:76:1f:a8:c8:8b:8d:9a:30:
42:0a:f1:63:d6:44:5f:2e:f2:dd:85:fb:c1:d8:06:61:be:ca:
78:d2:fb:23:72:8e:2b:9b:0d:51:08:61:5b:96:d5:2b:09:31:
09:85:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 08:16:30 2024 by rpki-client on console-ams.rpki-client.org