Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ZmiPBbQ7mvpf9gPfZPAXTszOFE0.roa
File: ZmiPBbQ7mvpf9gPfZPAXTszOFE0.roa (raw, json)
Hash identifier: CZRYOLTDL/UpVvaNEMji7H5wPlyfdbEgDDVSmi4pTA4=
Subject key identifier: 66:68:8F:05:B4:3B:9A:FA:5F:F6:03:DF:64:F0:17:4E:CC:CE:14:4D
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018F2869AC37CDF818D1F42F1F5E3C34DDF1
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ZmiPBbQ7mvpf9gPfZPAXTszOFE0.roa
Signing time: Mon 29 Apr 2024 05:52:44 +0000
ROA not before: Mon 29 Apr 2024 05:52:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 185.148.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:69:ac:37:cd:f8:18:d1:f4:2f:1f:5e:3c:34:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Apr 29 05:52:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66688f05b43b9afa5ff603df64f0174eccce144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:98:ac:a0:92:63:c4:9e:9d:71:9a:22:de:
3a:b7:24:08:cd:75:6f:9a:22:3c:69:c3:ea:ff:c4:
a3:20:0c:7d:6c:24:ab:97:f7:c4:d4:e7:c5:33:22:
60:8b:d8:bf:7f:eb:81:f5:1d:6b:ef:52:7e:66:7a:
89:e4:24:9c:57:f6:62:22:1e:d7:1f:8e:8a:43:3a:
5c:ce:a0:f8:1d:a5:a0:92:a4:21:49:72:c6:73:62:
3e:e8:9b:85:15:3d:40:0d:ef:b6:68:c0:6a:e3:d8:
35:32:48:d0:85:b2:62:29:20:c1:f5:f8:27:6b:26:
e3:ca:ab:28:30:9f:96:bb:75:22:1b:3c:0b:36:d2:
4f:6d:e5:57:fc:fb:1e:c4:64:a7:02:2d:c4:b5:e4:
06:70:56:e7:19:a0:60:92:8e:fd:21:87:fa:58:90:
6c:da:da:bd:22:e4:30:f8:de:19:0d:bc:e4:c9:d8:
75:bc:e6:6f:b6:21:64:5c:14:93:14:58:b5:db:e1:
f6:0c:65:ac:38:59:a1:1b:7d:5c:f3:9d:15:af:80:
58:f7:a5:a5:c9:e9:92:9b:c2:bc:49:77:b4:9a:0e:
f0:75:0e:ce:fa:b6:f0:11:b2:5a:dc:31:71:ef:1f:
7d:1f:a6:34:a2:ab:5e:36:6f:fd:a8:4c:8f:48:e6:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:8F:05:B4:3B:9A:FA:5F:F6:03:DF:64:F0:17:4E:CC:CE:14:4D
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ZmiPBbQ7mvpf9gPfZPAXTszOFE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:8b:74:61:80:c4:75:26:40:82:8a:b6:52:75:0c:5d:79:39:
50:8b:7f:fa:b1:7b:38:a9:a2:8e:a2:eb:20:50:20:c6:81:c2:
fb:17:25:d5:c6:2f:9c:05:68:68:92:f5:92:c0:48:82:2a:57:
16:6c:97:eb:c3:b4:e3:75:81:f5:a9:8c:e4:32:2d:b7:28:bc:
54:71:9d:44:ee:b6:34:e0:0d:82:7e:82:99:70:6b:20:23:94:
dd:0c:36:23:26:ad:64:ea:5e:00:8b:1c:ce:52:ff:2d:c4:a6:
27:c6:45:37:75:d7:93:e7:af:9c:ef:b1:f6:fa:49:47:39:94:
21:cd:a6:2e:33:89:d9:b6:d4:12:7d:87:2f:aa:f5:c3:55:53:
f6:cd:31:54:0b:9a:86:6a:8d:7c:2e:99:c8:e2:94:12:02:e5:
0c:20:7c:43:0f:e4:05:27:37:c7:d4:56:17:53:b3:1d:79:8c:
2c:6e:99:1b:3e:81:db:5a:75:19:f6:8a:5b:7a:a6:96:d9:77:
73:92:be:35:f4:a9:cf:78:d7:00:a6:64:01:6a:0f:c2:14:4c:
db:bd:26:e8:6b:dd:6c:84:31:c8:4e:16:9c:2a:a2:ec:19:0f:
d2:82:dd:c9:11:51:2b:09:97:8f:2a:57:fd:4e:70:56:57:9b:
34:81:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:09:56 2024 by rpki-client on console-ams.rpki-client.org