Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/Z_5eIqCF4EZoXt7MLQArmSMmHnY.roa
File: Z_5eIqCF4EZoXt7MLQArmSMmHnY.roa (raw, json)
Hash identifier: T0ktgxknT1cUQ2HRiZHdLiWUl0wn2NxbnMtk3gJ2xMI=
Subject key identifier: 67:FE:5E:22:A0:85:E0:46:68:5E:DE:CC:2D:00:2B:99:23:26:1E:76
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 018CC26D7FB4C54F69F4C167B2ABF6CAA827
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/Z_5eIqCF4EZoXt7MLQArmSMmHnY.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 185.70.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 10:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7f:b4:c5:4f:69:f4:c1:67:b2:ab:f6:ca:a8:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67fe5e22a085e046685edecc2d002b9923261e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:44:3c:7e:60:e5:2c:eb:f7:af:82:e6:e3:
b6:16:a2:39:4f:70:0b:5d:97:75:85:e7:e8:3a:82:
ad:9b:d4:c1:8a:3a:92:46:f5:da:e2:74:44:f0:60:
11:96:65:64:11:d8:7d:c7:16:db:c0:76:52:fe:2f:
93:09:7c:0c:d9:4b:20:e7:c4:c2:96:dd:1f:16:17:
ec:5c:25:75:26:24:2a:66:9d:15:19:2a:38:68:68:
7d:18:56:cc:e8:1e:91:72:39:f6:74:ec:65:10:b1:
6b:39:eb:41:58:62:e8:e6:0d:e0:17:b3:9d:74:bc:
04:2e:57:5f:ee:1a:3e:7e:87:e8:e5:64:90:40:2b:
0d:7c:93:19:df:1a:6c:71:93:0a:6b:28:99:70:a4:
23:ed:b4:01:a0:b9:47:e3:0f:58:bf:d6:d8:ec:a5:
12:ee:c0:e1:d2:b3:ec:b0:61:5c:c7:b1:7b:2e:a7:
82:69:58:ac:69:aa:50:f3:40:8d:5f:c1:a7:87:c2:
f9:55:d0:20:7b:2f:9e:54:0a:d1:b7:fc:e7:05:50:
5a:6b:4a:af:e2:43:c3:72:90:30:09:fd:64:14:f4:
e5:5b:7e:4a:c7:a1:19:d6:bb:a3:ff:84:91:8b:b5:
8f:20:de:bf:4a:5d:05:a1:6f:f7:f1:f4:5d:0b:68:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:5E:22:A0:85:E0:46:68:5E:DE:CC:2D:00:2B:99:23:26:1E:76
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/Z_5eIqCF4EZoXt7MLQArmSMmHnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
21:44:f5:e9:8b:c5:ef:cb:22:e4:8b:41:34:f7:91:e2:9d:0a:
57:26:d1:92:07:da:dc:d2:dc:33:b0:73:85:7d:d2:fe:c4:65:
47:e4:02:88:7d:27:7b:f9:49:6a:07:49:26:44:a1:12:6f:14:
0a:3e:28:ea:0a:da:d1:81:fe:c5:34:15:9d:3d:fe:65:48:e1:
31:3b:67:3f:7a:d0:4f:5f:05:0f:37:a2:ee:2c:be:17:c0:58:
2e:1a:a4:6f:bb:d0:66:f7:fc:a9:d9:3f:fe:c1:81:75:a0:21:
16:eb:f2:37:ed:98:42:17:22:aa:88:1d:d1:af:eb:6e:a1:cc:
8a:82:f1:69:b9:0f:62:02:bf:6e:d5:4e:22:2f:5b:6e:c6:a2:
14:c6:44:c3:e9:00:2e:e9:4b:9c:f3:1e:cd:67:34:a8:b5:ff:
ea:25:39:04:b5:25:ef:26:f5:7c:fa:ec:b9:c8:e8:50:13:fd:
12:b6:46:04:71:84:96:83:9a:0e:8a:64:03:72:e3:60:7c:4f:
f7:fd:d9:26:57:ae:84:15:15:8c:29:2a:9e:3c:b9:cb:9c:4c:
5d:ce:8c:a3:64:6b:cf:df:31:6b:35:9c:41:f7:83:96:f5:5c:
a4:a9:f3:e3:3d:34:69:3f:08:c3:43:da:9c:42:a6:1f:97:ee:
87:27:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:50:30 2024 by rpki-client on console-fra.rpki-client.org