Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1-zKwKVBNenb_iJ4AZIfACZv2n1Q.roa
File: 1-zKwKVBNenb_iJ4AZIfACZv2n1Q.roa (raw, json)
Hash identifier: IOokeDHD4Q7GhNtgqeVSdRNFVQFFZhmX8B97QdjgaKY=
Subject key identifier: FB:32:B0:29:50:4D:7A:76:FF:88:9E:00:64:87:C0:09:9B:F6:9F:54
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 018CCA99A04ED56D6106C5D5926873A353BE
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1-zKwKVBNenb_iJ4AZIfACZv2n1Q.roa
Signing time: Tue 02 Jan 2024 14:35:14 +0000
ROA not before: Tue 02 Jan 2024 14:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205888
IP address blocks: 188.85.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:a0:4e:d5:6d:61:06:c5:d5:92:68:73:a3:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 14:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb32b029504d7a76ff889e006487c0099bf69f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:99:45:2e:ed:a9:a5:19:44:96:4a:23:6e:
30:46:dd:05:cf:6d:66:87:0d:60:f7:75:9b:5f:16:
d2:6c:4c:6f:19:23:e4:57:ad:c3:d5:86:2c:c7:82:
f3:e7:e1:bc:7d:f1:28:30:2c:e9:5d:20:0a:74:a0:
78:64:f7:9b:e7:62:5c:af:4c:9b:a8:5f:6d:24:81:
9a:a8:d1:52:76:b1:47:5a:15:3c:da:f5:2c:8a:73:
dd:f9:c6:15:85:14:98:b3:20:1f:d8:b8:1f:08:dd:
4b:70:fd:6b:3d:e4:e6:80:45:6c:34:22:d0:5d:06:
7b:60:4a:95:4b:b3:14:4a:83:19:10:af:75:c3:8a:
d2:f8:20:5c:30:8d:5e:21:c2:13:f7:cc:b0:3a:88:
c9:44:5e:8b:20:ba:a9:7e:0c:d7:e8:34:91:a3:e3:
a8:59:ca:6f:d8:03:c0:92:b3:1b:a9:ba:d1:78:8b:
b0:0b:b5:05:41:db:3d:08:44:db:3d:0f:2f:98:0f:
0b:0b:b8:20:15:ad:08:c0:55:ec:1d:57:07:1b:38:
ec:67:a2:fc:5e:a2:14:2c:ed:b3:87:6c:14:e1:a8:
24:30:53:8c:a6:ee:c0:9d:57:8e:b7:6e:d2:e9:80:
d4:4e:54:f5:e9:7f:c7:37:ec:18:69:ea:80:fe:64:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:32:B0:29:50:4D:7A:76:FF:88:9E:00:64:87:C0:09:9B:F6:9F:54
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/1-zKwKVBNenb_iJ4AZIfACZv2n1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.85.140.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e5:cd:f6:e4:fb:2c:d9:18:b1:12:49:36:39:56:20:57:2a:
34:ff:04:62:61:ad:17:ba:c6:6d:db:b6:99:10:3c:fc:92:b7:
40:0f:1e:b0:de:77:9a:f5:ef:35:1f:cf:10:52:5c:66:57:30:
3e:30:f5:67:6e:1c:82:0e:3d:5c:f8:51:a1:55:c5:82:07:b5:
12:5e:d4:b8:fa:a0:ef:ad:0e:02:27:01:09:0b:6e:be:e0:03:
39:18:63:64:03:c0:83:d0:0d:96:52:a1:39:89:43:e3:00:bd:
0f:86:1c:e2:7d:c4:48:81:27:88:23:2b:a4:70:77:f8:ee:67:
6e:3a:f0:5b:5f:16:e1:88:af:45:e9:ef:6c:d1:44:6b:7e:e9:
d2:45:ca:0a:71:34:76:76:87:84:61:69:3d:8c:7d:ea:64:6a:
3b:ed:06:77:c8:21:1b:6a:76:2f:d0:4f:5d:1d:e9:d4:56:5c:
b1:00:eb:f1:33:9c:21:b1:8a:d3:c8:1e:01:78:71:34:6f:99:
af:47:2e:34:02:07:a7:9c:fe:5f:4b:c5:b1:b6:51:bc:b7:13:
4c:42:76:45:31:51:b0:c2:3b:f6:f3:78:52:e1:0f:8d:fd:26:
20:02:d8:41:d3:fa:60:31:e9:f0:40:c8:58:89:b9:7a:f5:83:
b1:d8:b8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:04 2024 by rpki-client on console-ams.rpki-client.org