Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/zRuKwjYD0qdXCHE8hBTN3tvmh3Q.roa
File: zRuKwjYD0qdXCHE8hBTN3tvmh3Q.roa (raw, json)
Hash identifier: 2yFkAOTzd97IbN1Dapx+UX3xNIB7CIMWZFOmNrr5vBE=
Subject key identifier: CD:1B:8A:C2:36:03:D2:A7:57:08:71:3C:84:14:CD:DE:DB:E6:87:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 018CC2DB182F7B38FC55957A254FA782AEB6
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/zRuKwjYD0qdXCHE8hBTN3tvmh3Q.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197674
IP address blocks: 185.72.218.0/24 maxlen: 24
185.72.219.0/24 maxlen: 24
185.72.216.0/24 maxlen: 24
185.72.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:18:2f:7b:38:fc:55:95:7a:25:4f:a7:82:ae:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1b8ac23603d2a75708713c8414cddedbe68774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:a7:ce:57:63:b7:fe:7a:d0:93:b0:e5:af:
1b:76:d2:15:5c:50:a5:62:9a:4b:7e:63:03:57:44:
7d:df:23:ec:1a:61:ea:57:03:cf:17:f1:f7:f2:2e:
35:58:b7:62:05:ed:53:4d:80:3c:ed:42:5e:40:0c:
c4:25:62:e3:6a:28:cc:a9:f1:8f:c3:26:fb:d1:80:
17:72:a6:1d:a4:18:78:2a:8a:03:54:bd:ac:ad:88:
3a:a8:b6:01:94:09:96:86:a5:e5:f7:34:ec:71:5c:
20:ff:ff:2c:4d:ac:24:34:27:7a:f2:f6:bc:bc:1f:
f0:11:47:d3:07:d8:64:b3:93:09:66:ec:e1:a2:9b:
6a:15:e8:c4:2a:21:fc:a9:f3:0e:82:8e:16:4f:c8:
a0:97:1f:2f:ba:64:9d:be:89:88:1f:9f:63:04:28:
1d:de:88:42:ea:1e:dc:1b:30:21:73:e6:1a:2c:a7:
1f:32:d1:7a:c4:6f:e4:8f:9a:d0:f8:37:1a:0c:d2:
f7:41:b7:f5:2d:8a:de:65:4f:61:a5:48:97:92:45:
de:70:dd:e5:74:9e:4e:08:e7:0f:37:6d:f2:50:ab:
e0:62:ba:e6:46:9e:f4:7a:74:ad:f2:c4:1e:ae:b4:
5b:f2:7b:b6:d9:4a:e4:b9:f0:b1:07:d0:21:bd:ef:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:8A:C2:36:03:D2:A7:57:08:71:3C:84:14:CD:DE:DB:E6:87:74
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/zRuKwjYD0qdXCHE8hBTN3tvmh3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.216.0/22
Signature Algorithm: sha256WithRSAEncryption
95:4e:e3:d6:09:ad:4a:2b:80:ec:35:d6:9e:24:8d:86:99:62:
cd:60:64:09:22:04:ed:fd:43:a4:5e:5e:9a:76:52:80:eb:e0:
fe:4d:8a:f9:db:62:0e:bb:67:61:77:95:a4:7e:35:6a:c4:30:
bf:b1:d8:20:ef:e9:97:ae:06:7b:af:5f:1a:94:57:4b:36:52:
84:c0:77:a9:52:8a:b1:3e:97:9f:77:dc:2b:b0:3c:bd:fe:a2:
a8:f1:12:1c:93:f4:2d:38:a8:62:14:20:d2:1f:e5:7a:2c:74:
35:78:b4:de:69:2c:32:e4:e8:18:90:44:1a:a1:b8:8b:37:ca:
b5:7a:96:b5:37:dc:96:43:fc:23:70:6f:6f:20:df:d7:db:59:
0a:ef:ff:18:43:b6:94:c0:ae:7b:4e:6c:87:dc:e3:ea:2a:31:
e9:9f:9e:fe:24:0b:24:99:e5:d1:88:56:fb:4c:10:9c:bb:52:
c9:42:07:4a:f0:67:ca:33:bc:0a:fc:79:1f:02:74:cc:be:88:
1f:24:65:c8:0a:ca:f5:0e:c4:f5:7c:6b:1d:d8:b1:70:35:63:
12:f9:90:16:f2:fa:d4:0f:dc:2d:d3:30:e2:1a:1b:13:7f:24:
dd:4e:8e:9d:06:62:ac:0a:28:b2:34:fb:00:da:90:13:92:f6:
c8:ba:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:02:11 2024 by rpki-client on console-ams.rpki-client.org