Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/Z-gsK_sRj-wIM2rz-KhKD9CfQMA.roa
File: Z-gsK_sRj-wIM2rz-KhKD9CfQMA.roa (raw, json)
Hash identifier: oLCuWFaecr4N+oIY9imVdn0hKCqaq2Ap+YsxNXOvKwQ=
Subject key identifier: 67:E8:2C:2B:FB:11:8F:EC:08:33:6A:F3:F8:A8:4A:0F:D0:9F:40:C0
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 018CC26D0A42A0558F5FDAFCF93C0AA5E73D
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/Z-gsK_sRj-wIM2rz-KhKD9CfQMA.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31549
IP address blocks: 185.211.84.0/24 maxlen: 24
185.211.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0a:42:a0:55:8f:5f:da:fc:f9:3c:0a:a5:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e82c2bfb118fec08336af3f8a84a0fd09f40c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:65:12:68:b9:10:dd:f4:8b:94:99:fa:37:6c:
20:1c:50:b3:32:05:d1:22:4f:78:8e:49:cb:e1:6a:
e4:a5:6f:78:43:9a:8a:60:3e:10:2e:b0:dd:fe:ee:
bc:02:a8:23:4f:a2:8a:19:10:3a:7a:b3:f2:f6:82:
03:cc:47:a0:9b:c9:5d:64:eb:50:02:ff:f1:9b:11:
a4:52:d2:4f:6c:29:78:02:1c:27:e9:84:95:63:c1:
81:a2:bd:6f:6f:fa:f4:b4:4a:3d:2a:94:22:63:11:
3c:83:cb:37:4d:e8:b2:44:94:7d:d4:d8:6b:bb:04:
66:e0:dc:2e:4a:27:90:0d:7f:fc:89:54:e2:ff:8d:
3c:3e:e0:1c:2e:9d:f2:2e:b0:75:fa:de:4a:9a:df:
ff:b8:63:fc:4f:fd:97:04:4a:9e:39:76:08:56:93:
0d:ee:2a:b6:94:9f:a9:94:75:c5:9e:af:3d:2b:92:
16:e1:20:57:52:08:89:72:16:07:32:54:06:c6:91:
29:c8:02:5b:4e:ed:e8:cf:35:05:9a:28:9f:f7:3a:
1b:d3:2d:c4:23:15:fa:41:b4:00:3f:24:5e:17:cc:
3b:29:20:41:ed:9a:c6:aa:5b:2e:5b:58:bc:53:66:
d1:9b:83:d9:4e:6e:6a:e7:e7:d7:a1:3a:17:3b:90:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E8:2C:2B:FB:11:8F:EC:08:33:6A:F3:F8:A8:4A:0F:D0:9F:40:C0
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/Z-gsK_sRj-wIM2rz-KhKD9CfQMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.84.0/24
185.211.86.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c4:cc:83:9e:a9:c0:30:9d:c0:b6:e2:94:f4:9a:14:ec:08:
93:8c:c9:b6:a1:07:55:cd:e2:11:49:c5:c4:aa:01:1a:5a:4b:
84:5a:1a:f1:ca:01:20:b6:cf:1c:98:b3:f4:54:f4:99:6c:94:
f8:0b:6a:e1:0a:1b:18:60:e9:f0:68:9c:8b:9a:85:d1:c4:5f:
74:9c:60:38:81:cf:1a:16:d3:03:7d:a3:f9:0f:cd:61:76:2b:
a5:bc:16:54:32:a2:c2:82:77:d7:c2:85:25:92:46:c5:2e:06:
97:d1:cd:35:8b:c8:5f:99:84:d3:df:0a:63:41:34:9e:ec:9f:
2a:70:0e:12:ba:a0:c0:0b:ad:88:e9:38:ef:bd:7c:6f:30:08:
27:bc:92:2a:52:10:27:59:0a:ec:91:d4:77:9b:71:43:b8:d7:
50:e9:56:fb:ae:63:4d:fe:1b:82:b5:b2:fa:7c:b7:f0:d5:17:
78:76:5a:e1:2a:bb:8d:b3:5c:e1:dc:da:20:63:cb:34:0f:f6:
79:1b:0c:cb:2d:32:42:df:26:91:d1:59:12:eb:c8:b7:9b:4a:
ad:d1:13:2d:65:4d:7e:f9:2f:1a:14:9c:e9:de:90:25:43:d1:
5d:51:b9:33:88:99:bc:cc:cc:c5:f9:9e:c9:32:88:c0:a3:bc:
f1:23:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:07:53 2024 by rpki-client on console-fra.rpki-client.org