Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Z3alFCDeUH1sR5MZUIANVg6GCVM.roa
File: Z3alFCDeUH1sR5MZUIANVg6GCVM.roa (raw, json)
Hash identifier: 0g2U3YSWveQyXnAY6ZuF1jGi9kE0OB6G6C9x2OBRqtw=
Subject key identifier: 67:76:A5:14:20:DE:50:7D:6C:47:93:19:50:80:0D:56:0E:86:09:53
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 018CC7266B93669AF25BA4C5578E6AFDB0B1
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Z3alFCDeUH1sR5MZUIANVg6GCVM.roa
Signing time: Mon 01 Jan 2024 22:30:33 +0000
ROA not before: Mon 01 Jan 2024 22:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16376
IP address blocks: 185.105.64.0/23 maxlen: 24
185.105.66.0/23 maxlen: 24
2a09:fd40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:6b:93:66:9a:f2:5b:a4:c5:57:8e:6a:fd:b0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 1 22:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6776a51420de507d6c47931950800d560e860953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:14:ef:7d:de:46:75:fe:9d:ce:0b:35:c0:f8:
50:e0:90:15:8e:e9:8e:20:da:0a:8c:57:49:65:fc:
7a:90:e6:d1:29:22:6e:cc:f0:33:c1:3c:12:b2:fa:
ca:f2:77:3e:92:0c:53:af:88:d7:6e:6f:42:be:7d:
0d:72:15:c5:97:ab:ab:9b:44:70:ea:22:01:2c:ad:
42:63:93:fe:77:3b:87:b8:91:37:47:f3:71:34:f6:
7b:dc:68:09:3c:c8:04:1e:e5:2f:8a:42:f6:62:b3:
7d:71:f5:da:84:d2:e5:d1:6a:d7:57:d8:86:56:6e:
10:5c:05:e0:97:cd:b3:b9:5b:17:1f:b6:48:14:d3:
e3:e0:3d:d6:2a:e4:f3:09:a6:cd:52:34:ec:07:ac:
44:94:21:c6:25:76:f6:a2:aa:21:35:f4:95:35:2f:
56:be:c5:d7:07:2a:ab:c2:4c:82:77:81:1f:48:dc:
0f:fa:82:8f:78:c9:8d:b3:f7:d9:bd:0f:07:82:cf:
2c:e8:66:a1:65:c2:92:7a:50:2c:33:dd:64:8e:73:
1c:3b:ff:42:58:9c:36:f8:54:08:b3:54:d0:58:d8:
e6:d1:18:5a:0a:86:2b:ee:8d:d4:24:77:3a:96:ff:
74:45:7b:20:2a:ca:93:87:41:d6:53:f1:36:9d:5d:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:A5:14:20:DE:50:7D:6C:47:93:19:50:80:0D:56:0E:86:09:53
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/Z3alFCDeUH1sR5MZUIANVg6GCVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.64.0/22
IPv6:
2a09:fd40::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a3:df:86:6b:e1:6f:89:00:8d:18:ae:de:e3:ca:c0:ef:a8:
e3:ef:24:8a:60:25:2f:81:54:bc:cd:e1:a9:5a:ec:e4:a3:aa:
3d:d1:b1:13:21:94:79:07:52:ad:21:f3:11:64:0d:4b:08:35:
70:8a:57:d0:dc:97:6e:43:60:77:b3:e9:96:dd:14:01:f4:d0:
ff:78:94:bf:63:37:9f:63:d7:09:27:31:61:77:4f:ca:3f:4b:
c8:3b:17:50:e9:dc:31:ef:69:fc:c9:36:92:ae:44:70:6d:5d:
7b:03:a1:45:cd:06:52:e1:7e:de:bc:5a:6c:9e:65:6c:82:77:
71:18:81:6b:0f:0a:19:34:c1:fb:1b:e1:69:fd:14:1f:5d:97:
d3:fd:ed:9e:51:eb:55:21:23:ab:01:38:ee:f5:24:00:65:47:
60:b3:83:54:ed:fb:91:c4:57:f1:d8:7e:02:77:bf:f2:bb:87:
4b:90:59:7a:ed:2c:49:06:bc:c6:e7:99:7a:0c:c9:fb:a5:22:
6b:47:e0:88:78:39:df:c7:df:27:29:9d:f8:72:8d:af:4d:20:
ae:27:4b:61:a2:32:ae:f8:44:b1:31:a9:ae:a2:d4:c4:bf:c3:
62:4e:82:7d:aa:64:1a:70:d9:29:3f:77:a8:cd:26:62:af:be:
9a:cb:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:07:06 2024 by rpki-client on console-ams.rpki-client.org