Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa
File: SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa (raw, json)
Hash identifier: swBwHR+hEKPvAq/37h/pumtuHGcXoy/13UJgpMP+adU=
Subject key identifier: 4B:33:FE:3B:4D:21:BC:FC:B1:43:60:32:EE:BB:B8:46:D4:4A:59:DE
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 018CC42549C46BD671DD126C5AAA6A405354
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.186.213.0/24 maxlen: 24
185.186.212.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:49:c4:6b:d6:71:dd:12:6c:5a:aa:6a:40:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b33fe3b4d21bcfcb1436032eebbb846d44a59de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:f1:e8:8d:87:a0:d2:5e:26:86:f2:a8:14:
25:77:8a:e5:2d:b4:d2:27:a0:19:4a:4e:1c:21:c5:
28:75:f9:d3:06:70:15:4f:77:b2:80:4c:f1:ff:ac:
b1:36:a0:7a:83:aa:ae:46:9e:f8:f6:7f:0f:b9:12:
4a:61:6c:30:da:f8:c4:fe:7d:b8:29:84:1e:b8:92:
6e:30:25:c4:c7:bf:af:61:36:02:43:18:84:9f:c6:
b9:60:8b:a5:60:77:9f:eb:eb:33:3c:7a:5d:95:76:
f5:d3:89:fb:f2:28:9b:24:61:8f:0a:60:fe:33:a2:
4a:45:67:d4:f0:cc:13:32:89:ba:62:08:bf:7d:5e:
68:a9:58:70:65:0f:d4:c5:c8:1c:9e:a6:ca:e9:76:
7c:6e:37:6d:a8:fb:7f:b7:15:2a:6f:9a:f4:65:be:
0e:55:64:a0:32:7f:d7:d0:78:07:da:1a:b9:69:24:
91:44:de:05:25:56:0c:14:cc:39:34:b5:1f:b6:e4:
25:68:23:e9:08:26:09:97:e1:07:e4:b8:3a:6c:7e:
9a:f6:ef:a8:f9:9f:b8:ce:0c:41:24:a4:c5:bc:16:
d9:fe:c9:56:31:de:db:b2:3e:e6:d3:46:f4:40:a3:
4c:9d:e2:18:bd:0c:8d:f1:91:95:82:f5:31:69:85:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:33:FE:3B:4D:21:BC:FC:B1:43:60:32:EE:BB:B8:46:D4:4A:59:DE
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/SzP-O00hvPyxQ2Ay7ru4RtRKWd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/23
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
9d:53:06:b5:3f:cb:0b:cd:ae:a6:b2:b3:db:28:55:ef:61:52:
c3:f3:b5:0f:ed:fd:b4:25:e0:e8:01:17:7c:0b:ce:54:a1:cb:
0a:ba:7b:95:d0:0e:cd:37:2f:5c:9d:03:a7:20:f0:7e:b7:19:
d0:d2:f5:b8:4f:ef:49:6f:10:8b:16:94:3d:d2:12:8c:64:52:
ed:34:89:6a:da:9b:07:7d:19:56:10:46:dc:06:17:9e:a4:1f:
3a:72:ee:06:fc:0b:36:28:7a:2e:09:6f:d4:8a:e2:d1:76:13:
ba:da:cd:75:70:6b:ee:ae:bc:37:3b:46:2e:87:f1:26:26:89:
4f:fe:9a:17:90:7e:1a:2d:ce:80:75:72:76:44:99:e4:b7:be:
3d:34:8b:c1:1a:79:46:13:0f:d4:9d:95:16:97:43:8e:cc:78:
f8:6f:bd:10:7d:89:cd:94:54:05:71:94:e9:94:de:32:8a:46:
e5:53:d2:8b:39:96:84:b7:df:fe:bf:4b:5f:1b:1c:22:74:41:
ae:05:1b:0c:52:a4:9f:80:34:87:16:2d:bc:64:70:53:0d:2f:
67:01:2d:bd:82:ed:42:4c:da:53:51:ef:12:2d:de:79:33:35:
da:8d:71:20:03:38:76:8b:71:5d:96:04:09:14:5f:08:81:1e:
2f:47:0b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:07:43 2024 by rpki-client on console-ams.rpki-client.org