Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/pzUsRfakD7uCfIoXXGbclIVCAkQ.roa
File: pzUsRfakD7uCfIoXXGbclIVCAkQ.roa (raw, json)
Hash identifier: KNz2QAbCWPscqkNrjFETXLbwJ4PsgeRkKkFao8/hupY=
Subject key identifier: A7:35:2C:45:F6:A4:0F:BB:82:7C:8A:17:5C:66:DC:94:85:42:02:44
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 018CC9BC55D1E31C52D545E3CD0C4AAF0553
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/pzUsRfakD7uCfIoXXGbclIVCAkQ.roa
Signing time: Tue 02 Jan 2024 10:33:32 +0000
ROA not before: Tue 02 Jan 2024 10:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 185.168.163.0/24 maxlen: 24
185.168.160.0/22 maxlen: 24
185.168.160.0/24 maxlen: 24
185.168.161.0/24 maxlen: 24
185.168.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:55:d1:e3:1c:52:d5:45:e3:cd:0c:4a:af:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Jan 2 10:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7352c45f6a40fbb827c8a175c66dc9485420244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:a4:c6:fe:be:cb:d8:ef:cd:f2:b3:a1:3d:
bf:30:db:79:aa:01:b7:eb:4a:d7:da:2a:f0:82:0a:
f0:cd:82:da:ad:0f:d3:dc:95:a9:cd:e5:14:b8:9e:
4c:02:71:48:f9:14:8c:3d:dd:cd:8d:89:92:c8:91:
29:3e:80:88:af:e7:94:2d:05:09:46:3d:e5:f7:2e:
51:2d:a7:22:8e:56:56:56:6f:25:45:5d:6b:99:34:
1d:56:e6:2a:64:16:80:c1:0c:b1:c9:52:3e:d8:85:
b1:3c:cf:db:0e:0a:b1:ef:35:04:69:26:78:06:5f:
a4:ca:28:8c:89:c4:90:55:2e:e0:66:9f:a6:7b:ef:
34:ee:01:cc:26:50:d6:63:df:41:2b:ef:31:50:be:
63:a8:cd:e7:df:22:21:46:bc:71:e3:f7:52:73:c6:
54:ad:1d:3d:a4:3b:12:19:3b:6d:84:c8:bc:54:c0:
39:82:8c:af:55:23:c3:fb:de:db:8a:53:dd:82:d4:
16:4d:54:1d:9f:c7:c1:22:4c:59:6b:d1:b2:28:12:
be:2e:89:6c:33:87:31:e0:26:54:5d:2a:9d:d9:66:
8c:89:db:7f:a0:6f:d6:50:c0:c1:cc:e3:24:d2:d8:
71:9b:e7:15:ef:39:f6:8e:17:23:1b:21:bf:f7:0f:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:35:2C:45:F6:A4:0F:BB:82:7C:8A:17:5C:66:DC:94:85:42:02:44
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/pzUsRfakD7uCfIoXXGbclIVCAkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.160.0/22
Signature Algorithm: sha256WithRSAEncryption
76:d2:e0:d3:6b:ee:6a:70:63:9e:ac:85:77:ea:e1:fc:e3:03:
31:a9:21:23:b1:93:6d:1c:5d:c4:53:5f:a3:58:9b:35:33:ef:
c2:6c:ca:ad:8a:88:53:79:65:cd:ec:1e:50:18:f0:ce:3d:ee:
28:b4:5b:0b:af:26:47:84:fb:80:15:59:7c:df:51:a8:a7:fa:
44:20:59:63:a3:ac:e6:a4:67:a6:1a:22:24:49:6e:45:b9:36:
9f:ca:a2:8a:61:24:be:4c:de:84:f0:84:e2:f7:67:04:f8:16:
92:9f:40:72:b3:c8:57:a4:88:64:9b:82:ce:16:47:66:1b:3f:
1e:fc:31:08:31:e2:ab:b8:6d:98:3c:11:22:3f:b6:8d:96:83:
1e:95:a2:81:ba:e6:a1:8f:e0:01:b8:9a:07:61:ab:32:93:e1:
fe:42:e8:6e:5a:8d:93:cf:74:bf:00:40:67:44:b0:01:a3:9e:
f8:97:08:e2:41:70:d4:c5:2c:21:d2:41:5d:7b:fd:5b:37:a8:
8c:da:c3:e9:9a:5d:cc:6d:20:3c:2e:56:ae:c2:38:c7:3d:58:
81:d7:e9:39:ff:7f:79:1f:1c:da:6f:be:b0:36:b8:03:df:50:
50:b2:21:a6:aa:97:26:a1:c3:16:16:e7:bf:cf:a5:00:e4:b0:
2b:b9:2f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:14:42 2024 by rpki-client on console-fra.rpki-client.org