Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/Z89K2JO1WJVCdM6katDbE5ar0CY.roa
File: Z89K2JO1WJVCdM6katDbE5ar0CY.roa (raw, json)
Hash identifier: iuz/TK/9oL0R5JJGqafe35EW3PGygqQfI8P8wD5et5s=
Subject key identifier: 67:CF:4A:D8:93:B5:58:95:42:74:CE:A4:6A:D0:DB:13:96:AB:D0:26
Certificate issuer: /CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Certificate serial: 018CC802236370B63ACA01270B0E047260BE
Authority key identifier: 74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/Z89K2JO1WJVCdM6katDbE5ar0CY.roa
Signing time: Tue 02 Jan 2024 02:30:32 +0000
ROA not before: Tue 02 Jan 2024 02:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 185.74.222.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:23:63:70:b6:3a:ca:01:27:0b:0e:04:72:60:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Validity
Not Before: Jan 2 02:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cf4ad893b558954274cea46ad0db1396abd026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:15:aa:dd:a6:08:07:74:0b:a5:ea:c9:5a:
bc:30:c1:82:43:0d:00:4e:d5:3f:1a:ac:32:f6:6c:
96:9d:ab:25:b8:c7:7c:53:b1:25:d1:53:ae:5a:5e:
54:9c:6f:d6:bc:97:5c:21:3e:a6:53:56:7e:c5:48:
ed:b6:04:10:99:4b:79:8c:9e:55:16:d4:49:61:16:
da:ed:70:97:79:f2:12:dc:a2:5a:d0:30:9f:8b:8c:
20:1f:1f:2b:b8:37:29:cc:6a:2e:6e:83:59:0c:63:
7a:33:59:d9:3c:20:9c:63:10:55:8e:80:23:98:03:
a8:44:5e:6c:6c:55:91:a3:4d:34:35:ed:00:d1:ba:
b0:30:b9:55:98:13:75:e1:36:e9:4f:19:0c:c8:c2:
e2:a0:bd:b8:a2:72:c0:70:f6:9a:48:86:fa:2b:29:
c4:f4:01:ff:38:bf:c6:fa:7f:27:48:ba:b9:78:0f:
f9:dd:87:91:4a:0a:4a:ba:0b:80:b0:41:47:5a:fb:
c6:54:05:ba:a5:ec:5c:7e:dc:e4:9e:ce:c3:66:8a:
fa:dc:c1:d7:a1:6d:5e:46:f5:6f:b0:e9:e4:87:0f:
53:ef:de:ca:04:fe:7b:f0:1a:89:b8:73:2b:25:83:
19:fa:c4:b5:a8:10:e9:a3:45:64:72:3d:51:cb:bc:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:4A:D8:93:B5:58:95:42:74:CE:A4:6A:D0:DB:13:96:AB:D0:26
X509v3 Authority Key Identifier:
keyid:74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/Z89K2JO1WJVCdM6katDbE5ar0CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9f:35:ff:55:b1:07:e1:1b:5b:5d:fd:0b:56:66:99:4b:2f:
89:4e:01:bc:2d:73:ad:34:59:25:2f:73:cb:11:62:24:4a:78:
17:78:7a:60:21:fa:f7:b7:13:ba:31:ff:ef:a3:3d:18:52:74:
e0:e8:9d:8f:6a:09:11:e9:e4:23:37:12:dd:0c:54:04:58:91:
fb:bb:8f:8a:f7:ca:d2:48:26:ea:e1:ca:19:66:47:aa:f2:57:
d0:e6:8c:18:2b:88:64:3c:cb:74:21:0a:98:08:83:1f:ff:70:
cd:c4:da:40:76:90:23:da:14:53:a5:35:b9:ea:da:69:7d:83:
b2:58:7c:5c:6b:d0:5f:20:66:5f:17:c1:19:dc:88:98:eb:e6:
e0:6d:b1:2b:33:b7:51:5c:ea:5d:0e:3e:12:fd:21:fe:fd:89:
1c:47:a2:f7:fa:1d:6d:56:12:e8:8c:3d:a2:4e:a5:9f:74:42:
f9:ab:1a:93:f3:8a:57:4a:7e:f8:4a:51:88:19:64:4b:b4:66:
2d:33:e8:99:08:f5:84:7c:1b:4f:01:45:51:00:99:94:4d:83:
fe:dd:f6:2e:06:5b:c4:f7:de:10:91:12:c8:69:64:66:fc:9b:
c1:bf:cc:b0:92:72:5b:cf:e6:56:c3:b4:2b:19:91:e7:dc:0f:
0a:68:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 09:34:30 2024 by rpki-client on console-fra.rpki-client.org