Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/bZP-cto19TrOHBNuQoGq-plcH4A.roa
File: bZP-cto19TrOHBNuQoGq-plcH4A.roa (raw, json)
Hash identifier: TcuSOqHOgSfGF6GOWj8uOYgUJfEzdorC3fZCig0XH+w=
Subject key identifier: 6D:93:FE:72:DA:35:F5:3A:CE:1C:13:6E:42:81:AA:FA:99:5C:1F:80
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 018CC795718F8BFDC86F933368D6BFCE859C
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/bZP-cto19TrOHBNuQoGq-plcH4A.roa
Signing time: Tue 02 Jan 2024 00:31:49 +0000
ROA not before: Tue 02 Jan 2024 00:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64428
IP address blocks: 185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.40.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:71:8f:8b:fd:c8:6f:93:33:68:d6:bf:ce:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Jan 2 00:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d93fe72da35f53ace1c136e4281aafa995c1f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d6:15:15:87:5c:5a:2f:1e:0b:d2:40:57:ea:
12:0a:9e:7e:1a:1c:a6:a8:64:da:14:f3:a8:f9:3f:
a1:43:ee:1c:c0:96:c5:07:2c:75:e1:ae:d6:a3:28:
cd:34:48:4b:6a:14:83:b8:d6:63:2c:10:51:74:6b:
2a:2d:59:76:be:ee:6d:08:ce:6a:b2:e9:cc:c7:92:
21:b4:f0:3a:91:eb:32:53:a9:46:f2:37:aa:d6:5b:
35:43:e7:2b:48:4e:a4:22:76:e2:6a:86:43:48:94:
d6:16:0d:78:22:1b:4f:13:46:7c:91:00:f8:47:86:
d4:3f:cb:25:28:02:96:07:54:9b:7c:79:e1:48:4f:
a0:93:b5:fb:c5:c2:00:3a:f0:bd:1e:b7:9e:5b:c1:
a4:04:d2:84:48:24:96:ea:6f:90:f4:7c:3b:f8:9a:
f9:71:80:33:0d:b5:b6:1b:3c:3e:ee:23:e3:7a:8c:
a4:5a:08:73:9c:ae:a8:97:d6:28:ca:d0:6b:c5:12:
2e:e5:0f:a5:83:3c:38:a5:79:43:89:97:1e:a6:9a:
0c:bc:86:05:ec:8a:20:37:2d:1f:ba:b9:11:46:01:
f7:8d:00:36:0f:bd:c4:2f:4b:3c:09:01:54:96:ad:
29:18:a6:07:b6:d4:78:a4:39:5f:58:24:ff:8c:58:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:FE:72:DA:35:F5:3A:CE:1C:13:6E:42:81:AA:FA:99:5C:1F:80
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/bZP-cto19TrOHBNuQoGq-plcH4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.40.0/22
Signature Algorithm: sha256WithRSAEncryption
03:53:08:2b:8b:1d:ce:15:57:6c:b7:3b:58:4d:74:b3:40:1b:
f8:55:a9:d5:a1:07:5e:51:83:96:d1:ed:73:fd:11:62:a5:fe:
49:e9:ba:31:16:05:fb:40:4b:e0:ac:9e:f8:97:7c:ff:39:d4:
35:5f:4b:b7:11:89:3f:ed:15:62:14:4b:bb:fd:20:2b:97:28:
47:74:fb:7d:bc:b7:b2:94:25:76:64:b2:9e:7d:68:27:ec:8b:
20:ba:06:43:a1:0d:34:cb:43:27:7f:c4:6b:98:65:95:d7:26:
31:8f:60:3d:02:f1:de:05:7e:7d:1c:09:f1:1b:7e:75:12:b9:
d0:6f:48:65:d4:58:c1:10:63:c2:97:ef:9f:5e:4e:10:12:e1:
c6:8b:d5:05:73:58:3e:db:f7:4e:dc:b3:c2:7c:ca:00:a2:eb:
29:49:91:dd:e6:ea:16:68:44:5d:c4:92:5b:e7:0d:58:04:9d:
57:14:51:4d:d1:1e:02:f8:94:84:7b:c7:1b:75:75:89:dc:af:
d8:b1:f9:1c:15:85:37:79:38:b4:88:9a:74:ae:0c:05:e4:1e:
cd:5a:fd:f5:0b:a7:3c:a3:fa:04:9b:f3:e7:17:06:42:f6:29:
d0:75:9c:14:1b:a7:97:94:3a:e7:47:a2:25:23:a7:f6:65:2b:
66:43:01:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:03:54 2024 by rpki-client on console-fra.rpki-client.org