Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/zrgfiyT1-zLCvjo8vunFpu8GeKs.roa
File: zrgfiyT1-zLCvjo8vunFpu8GeKs.roa (raw, json)
Hash identifier: uYznNi3OV8BdhkyXm2Vdx3+8Kncqp4+1ksO7bCAkodY=
Subject key identifier: CE:B8:1F:8B:24:F5:FB:32:C2:BE:3A:3C:BE:E9:C5:A6:EF:06:78:AB
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 018CC3495083010D1C4A4A0523ADDCBD9581
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/zrgfiyT1-zLCvjo8vunFpu8GeKs.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203082
IP address blocks: 185.251.244.0/24 maxlen: 24
185.251.244.0/22 maxlen: 24
185.251.245.0/24 maxlen: 24
185.251.246.0/24 maxlen: 24
185.251.247.0/24 maxlen: 24
2a0c:6cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:50:83:01:0d:1c:4a:4a:05:23:ad:dc:bd:95:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceb81f8b24f5fb32c2be3a3cbee9c5a6ef0678ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:b7:dc:2a:f5:1c:44:bc:bd:22:94:fb:9e:
35:80:48:84:77:a6:06:c6:c3:f4:d4:0a:df:5a:a2:
a2:76:8b:e3:7e:27:eb:eb:20:d2:ee:75:37:13:f6:
82:1e:a9:9c:01:d5:9e:01:f2:47:ba:66:06:84:e9:
15:81:ad:99:f8:63:51:72:02:a8:d8:d3:59:62:73:
f0:12:dd:b9:99:38:08:78:1a:05:68:cc:02:32:d3:
62:ec:9b:bd:d9:ec:3b:cc:5a:33:20:bf:91:ec:58:
70:14:cd:82:fd:94:d2:42:1a:48:9a:3d:9f:cb:4c:
a7:c5:00:12:fa:f9:66:97:1d:37:bb:ce:e7:b6:5d:
93:9e:20:48:e5:2b:44:56:80:f5:f9:9b:74:90:2c:
10:1f:e1:2f:64:33:46:91:92:f8:de:76:c8:ab:ca:
9c:e5:b5:d6:1a:01:dc:93:36:50:f3:ca:9b:50:89:
63:40:f0:42:45:68:9a:a9:95:69:0e:e6:6a:d8:d8:
db:c2:bf:0f:7e:93:c0:b0:dd:09:04:c8:78:ac:4f:
d4:7f:ab:28:1e:c4:a9:53:b0:1f:48:b1:cb:8b:2a:
d3:75:14:fc:7b:05:83:25:b9:25:82:04:62:40:05:
2a:43:0c:7b:ac:83:1b:9a:ab:9d:3d:4b:fb:61:bc:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:1F:8B:24:F5:FB:32:C2:BE:3A:3C:BE:E9:C5:A6:EF:06:78:AB
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/zrgfiyT1-zLCvjo8vunFpu8GeKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.244.0/22
IPv6:
2a0c:6cc0::/29
Signature Algorithm: sha256WithRSAEncryption
51:67:89:38:99:7c:80:17:f7:b1:7f:3c:ad:5d:99:b4:f2:b3:
92:34:a7:49:17:33:ea:81:dc:fc:dd:c3:8b:1b:02:3a:0a:1e:
ad:08:20:10:d4:df:7f:d9:bf:15:a4:a2:d3:1e:d4:da:46:3e:
71:ee:28:10:a0:11:69:1d:8f:a8:2d:c7:5e:26:68:19:e7:c4:
1b:e5:20:56:eb:33:42:34:aa:38:30:ea:fa:01:9a:9b:e0:4f:
26:ac:d7:c3:3e:a5:6f:9e:d3:64:3c:67:3d:a1:bd:7f:a4:bb:
c7:2b:68:11:7a:7f:91:9c:31:a2:ce:b1:1b:03:f4:56:67:cf:
3f:78:56:27:33:d4:a3:92:96:c6:33:b1:d6:fa:03:48:98:f8:
17:55:05:f1:53:03:87:a7:dd:a2:d0:9e:aa:d9:58:a8:0e:d1:
9c:95:43:e6:ad:3b:05:40:f6:42:41:00:7e:be:66:3b:86:82:
8c:61:8e:b0:cd:35:69:3c:0a:e8:85:0b:5a:ac:2b:3e:08:4f:
a8:d7:c5:c1:57:f5:9d:0e:77:e0:95:34:8f:f6:de:0e:41:89:
0a:70:18:ef:87:5c:90:fd:6a:c7:74:87:05:c9:ee:e5:7d:19:
e5:c4:6c:f6:0d:6b:d4:14:d1:51:7d:f0:f8:5e:fe:9d:60:cc:
b8:5f:e4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:11:08 2024 by rpki-client on console-fra.rpki-client.org