Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/sZOzWz2yCS131DJzmd23j41i5ps.roa
File: sZOzWz2yCS131DJzmd23j41i5ps.roa (raw, json)
Hash identifier: Z+r4mgpRw+C/vHRGdt9pyP6rN9vUkX9hXFjU+SKUfDg=
Subject key identifier: B1:93:B3:5B:3D:B2:09:2D:77:D4:32:73:99:DD:B7:8F:8D:62:E6:9B
Certificate issuer: /CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Certificate serial: 018CC349531C25185F3C84ACC33A09A3E2D1
Authority key identifier: 27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/sZOzWz2yCS131DJzmd23j41i5ps.roa
Signing time: Mon 01 Jan 2024 04:30:11 +0000
ROA not before: Mon 01 Jan 2024 04:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 185.38.160.0/22 maxlen: 32
194.36.148.0/22 maxlen: 32
79.143.64.0/22 maxlen: 32
79.143.76.0/22 maxlen: 32
217.29.50.0/23 maxlen: 32
217.29.52.0/22 maxlen: 32
217.29.56.0/21 maxlen: 32
2a0c:f540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:53:1c:25:18:5f:3c:84:ac:c3:3a:09:a3:e2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27280cc534516d1c1d9ea024eaafbd01fdc68c97
Validity
Not Before: Jan 1 04:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b193b35b3db2092d77d4327399ddb78f8d62e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:fb:21:ed:f9:bc:7b:ee:a5:be:72:a7:b2:
bc:29:36:a2:58:23:19:4b:d5:c8:56:10:32:3f:76:
a4:fc:bf:e4:13:85:e6:1b:a6:48:a8:6c:96:aa:ab:
e6:4f:c6:2d:15:b9:97:b1:27:61:1e:16:24:ca:34:
c2:8c:36:d8:a6:15:1b:19:4f:7f:10:13:53:fa:09:
d5:fd:86:00:45:57:39:57:ab:3a:43:f2:20:69:95:
b7:fc:aa:2f:72:96:17:e1:f8:e3:2d:b9:d0:b6:32:
b6:91:e6:51:0f:3e:6d:07:ad:0a:13:3d:46:80:dc:
a1:16:89:3a:a6:d6:e1:72:e1:75:d1:2c:fb:9e:0d:
57:bb:06:2c:c2:f1:7f:e9:a1:d3:8c:45:9e:a9:16:
ac:a2:74:d9:a3:12:7e:9c:80:76:27:19:4f:e6:7e:
a0:21:80:a9:e2:e0:40:1c:0b:07:2e:42:13:01:ef:
fd:e4:de:82:b7:f8:a4:eb:bb:ce:8e:40:1c:ea:ec:
a3:22:f3:34:c5:a1:f4:c0:e1:5f:b8:93:57:d3:c8:
15:0e:a9:60:ce:4d:98:be:87:a3:65:88:21:64:a5:
2a:31:ea:45:55:90:66:cf:1e:b2:3c:4a:ec:2e:bb:
9b:55:57:c8:90:1d:30:56:87:54:d8:41:24:98:3e:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:93:B3:5B:3D:B2:09:2D:77:D4:32:73:99:DD:B7:8F:8D:62:E6:9B
X509v3 Authority Key Identifier:
keyid:27:28:0C:C5:34:51:6D:1C:1D:9E:A0:24:EA:AF:BD:01:FD:C6:8C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JygMxTRRbRwdnqAk6q-9Af3GjJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/sZOzWz2yCS131DJzmd23j41i5ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0cc6b5-5477-490a-a295-15b79b02943e/1/JygMxTRRbRwdnqAk6q-9Af3GjJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.64.0/22
79.143.76.0/22
185.38.160.0/22
194.36.148.0/22
217.29.50.0-217.29.63.255
IPv6:
2a0c:f540::/29
Signature Algorithm: sha256WithRSAEncryption
1a:5a:7b:87:7c:0a:f8:dc:21:39:a5:01:d3:f2:be:9e:76:d2:
25:a7:ae:4e:18:78:6e:aa:c9:59:4a:d9:1d:a8:d9:6f:6a:3b:
d3:90:b7:9e:90:3f:e8:d9:39:95:e6:80:da:25:ed:fb:14:38:
79:20:b5:6a:08:fc:dc:16:2e:20:23:c6:23:32:0e:d2:6c:f7:
d8:5e:06:76:62:61:83:49:14:d1:f9:1c:66:0d:e7:55:b6:f8:
41:2d:e2:f7:55:fa:38:91:3e:1f:d3:0a:34:1e:f9:11:b1:ae:
83:6b:77:20:ab:bc:46:55:73:9a:48:3f:80:7e:0f:9a:b7:68:
11:2d:78:59:f3:64:29:cb:35:1b:65:87:ef:70:58:84:71:8a:
2d:c0:17:7d:c5:26:aa:97:55:da:cf:c5:c2:05:5e:fa:2b:d4:
81:be:fd:fb:38:82:ab:86:41:49:47:aa:df:31:24:fe:a5:18:
df:8f:3f:93:ce:4b:23:7c:4e:9e:94:ea:15:ba:de:e5:57:5f:
ba:2d:f2:c8:f7:6a:73:1a:99:40:d5:e6:51:f2:3b:b4:88:0a:
cf:65:8d:1c:d3:d6:5f:f3:ad:ed:6c:20:fd:66:59:e8:1c:79:
22:f2:f4:27:f4:21:08:7d:23:69:6a:65:d9:87:c4:09:bd:e7:
c2:cf:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:55:12 2024 by rpki-client on console-ams.rpki-client.org