Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZzHXYQ_C2PzXppFMt9ZZTAuq288.roa
File: ZzHXYQ_C2PzXppFMt9ZZTAuq288.roa (raw, json)
Hash identifier: cj3ZuNTfjpR9c49Hx1CKk8LSmvJAoiO6B52mldX0Uz4=
Subject key identifier: 67:31:D7:61:0F:C2:D8:FC:D7:A6:91:4C:B7:D6:59:4C:0B:AA:DB:CF
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 018CC5012F6DABF35E18B7A63A9BB5EE2381
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZzHXYQ_C2PzXppFMt9ZZTAuq288.roa
Signing time: Mon 01 Jan 2024 12:30:38 +0000
ROA not before: Mon 01 Jan 2024 12:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51188
IP address blocks: 194.28.0.0/22 maxlen: 22
185.166.28.0/22 maxlen: 24
193.93.132.0/22 maxlen: 22
193.28.203.0/24 maxlen: 24
2001:67c:25c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2f:6d:ab:f3:5e:18:b7:a6:3a:9b:b5:ee:23:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Jan 1 12:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6731d7610fc2d8fcd7a6914cb7d6594c0baadbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:10:0b:08:47:5a:8d:b8:e2:88:3a:31:b8:2e:
cd:4d:1f:bb:54:0e:4d:ae:63:52:34:34:2f:80:fc:
bb:11:57:b8:a9:b4:01:42:e4:60:a5:7e:ce:05:04:
8f:b6:db:df:f5:16:57:10:1b:c2:3f:72:eb:bc:07:
93:6a:73:19:61:e8:49:35:dd:91:0a:b6:13:7e:7d:
d9:a6:3d:90:46:40:dc:a6:33:d0:c7:aa:ea:49:d0:
69:38:50:c9:21:5c:40:59:f6:b7:23:e4:cd:b6:cc:
f3:a9:67:4e:ff:da:db:36:38:12:a7:99:66:e4:86:
d9:74:91:5b:93:33:ad:70:88:a7:c3:a4:ab:4f:90:
ab:b3:21:65:1a:62:4f:73:29:0c:86:c2:a8:81:14:
2e:79:86:42:36:fe:1e:85:9d:4e:c2:b5:38:c3:47:
e0:9d:b8:72:e2:66:43:f2:82:dc:30:81:f5:40:dc:
17:f3:51:09:6b:52:58:81:00:01:cb:8c:5e:75:8d:
6f:aa:2e:92:6b:ca:6c:3e:95:21:45:9c:6b:5a:d3:
ef:4f:61:84:56:74:00:dd:39:20:e9:de:ab:12:d4:
26:7d:1b:32:c7:00:19:54:f8:72:cf:e2:b3:9b:84:
8b:6a:a8:87:05:08:5b:b3:05:f5:58:92:9c:72:22:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:D7:61:0F:C2:D8:FC:D7:A6:91:4C:B7:D6:59:4C:0B:AA:DB:CF
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZzHXYQ_C2PzXppFMt9ZZTAuq288.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.28.0/22
193.28.203.0/24
193.93.132.0/22
194.28.0.0/22
IPv6:
2001:67c:25c::/48
Signature Algorithm: sha256WithRSAEncryption
6e:dd:91:37:79:95:84:20:b1:7a:84:3e:e1:b6:5c:b6:51:eb:
c2:1c:01:2f:c2:6d:06:4d:fc:95:70:a2:d7:75:9e:3f:8c:ea:
78:3d:82:46:5e:0c:66:96:96:f9:36:4d:13:2d:a0:99:d9:22:
8a:03:42:65:72:31:06:90:62:54:a4:d8:a0:78:06:31:c2:6e:
87:c8:99:d1:b3:26:82:b2:ef:30:aa:92:8a:7a:00:5d:b8:a1:
73:ed:fd:5e:3f:e6:f8:b2:fe:0b:08:ac:c0:91:b7:2d:af:22:
2a:54:45:08:0a:2b:35:8c:b1:d0:b7:6f:35:ac:34:8e:2c:e6:
66:29:55:c5:77:30:e1:df:28:3a:67:a0:50:5a:bc:c9:a0:e4:
2d:05:f3:28:01:ae:02:a3:6c:e7:c8:37:9c:63:55:1a:40:1d:
64:b7:69:9e:b6:a3:a9:98:05:04:d0:07:87:38:42:46:7d:40:
ef:a5:a7:71:fe:27:b9:2f:3c:1d:c8:1e:f3:d2:fb:1a:e4:a9:
f8:72:c0:43:a6:f8:c3:a3:65:9d:4e:d8:c4:b2:26:1f:e1:79:
2b:0e:ec:30:be:f5:cc:ae:a8:09:9d:a6:ee:21:b2:c0:98:c3:
36:e8:26:5a:90:ae:c9:f7:e4:f1:ff:ce:2b:9a:c0:37:20:44:
1c:7f:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:45:45 2024 by rpki-client on console-fra.rpki-client.org