Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/sM9s3xFpvx_7GQ6__ZL_kGNF-Jg.roa
File: sM9s3xFpvx_7GQ6__ZL_kGNF-Jg.roa (raw, json)
Hash identifier: II8ml92J8/xC5gPJACOvh/Cges0BmPe2DMZWjtvpSSI=
Subject key identifier: B0:CF:6C:DF:11:69:BF:1F:FB:19:0E:BF:FD:92:FF:90:63:45:F8:98
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 018CC5013CB9CA5E182C046A1E8E4A65CA60
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/sM9s3xFpvx_7GQ6__ZL_kGNF-Jg.roa
Signing time: Mon 01 Jan 2024 12:30:41 +0000
ROA not before: Mon 01 Jan 2024 12:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61327
IP address blocks: 185.164.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:3c:b9:ca:5e:18:2c:04:6a:1e:8e:4a:65:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 1 12:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0cf6cdf1169bf1ffb190ebffd92ff906345f898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:03:53:24:8f:6a:f7:29:41:76:4c:d8:cc:
af:64:40:01:20:d4:19:6e:c3:69:d0:7e:d8:d0:95:
1e:b9:0f:c1:f5:e6:56:1e:9b:2c:b9:d8:5a:c7:a2:
45:94:a1:79:86:85:e1:9a:88:7f:ed:a2:3b:f7:09:
9c:c4:ea:81:8a:f8:0b:3a:71:3d:8b:7a:db:d8:f6:
66:d6:a0:14:a5:91:2b:ca:02:a9:1c:84:61:37:f4:
4f:2d:65:55:50:39:ca:1a:9a:17:81:d6:ce:1b:e8:
4f:46:3c:dc:37:d7:35:ca:ef:51:a9:4c:de:be:96:
22:69:e0:98:78:b9:88:27:54:36:0d:13:f4:42:81:
c0:21:6e:a1:26:13:01:64:cc:e7:54:c5:10:71:ce:
1e:06:23:a1:9a:0f:9d:56:94:71:48:16:1a:60:ec:
1a:b1:e7:5a:e8:c7:8b:0e:52:9e:e1:c0:50:03:43:
42:99:a8:0b:5b:98:9d:d7:93:7d:06:c2:98:f4:b6:
10:84:4e:b0:ab:97:14:b2:a2:fe:74:77:4d:11:01:
d1:59:1f:75:13:1d:45:68:91:57:c4:7e:7d:f9:b4:
a7:8c:83:54:af:ad:76:30:f1:16:77:d1:b4:e7:2b:
c0:2f:cb:9d:1c:c4:11:51:06:3b:9e:a2:d8:82:e6:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:6C:DF:11:69:BF:1F:FB:19:0E:BF:FD:92:FF:90:63:45:F8:98
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/sM9s3xFpvx_7GQ6__ZL_kGNF-Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.63.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9c:b2:9e:6c:2f:80:d6:a1:01:07:f9:e4:9d:11:1f:80:73:
eb:d1:4c:e5:37:dc:ed:06:fe:c3:f3:26:ad:28:d7:ab:44:35:
d2:6f:97:7a:7e:ea:26:2d:3b:44:95:b2:0e:b0:54:10:4a:8a:
aa:2f:58:c4:79:5a:68:e3:fe:a3:ec:6e:95:8e:fb:f4:74:0a:
eb:e5:fc:b0:00:b1:74:d1:ff:79:96:18:ab:f3:96:e2:57:43:
dc:2a:91:2b:cc:20:3d:d8:81:31:92:e6:b8:00:0c:44:e1:36:
f5:85:b0:8d:45:0c:98:c7:e6:f3:5c:20:d1:5f:53:32:a0:c1:
88:d4:84:d6:44:0e:04:2d:5f:a0:de:99:a9:8e:85:ad:30:27:
03:5a:64:a1:86:18:b3:24:75:20:a4:6d:8d:ad:c0:6d:d4:42:
07:f5:c8:f2:53:3d:2e:50:e9:a1:45:8d:2e:89:d4:c6:95:79:
66:37:df:28:e6:43:01:2a:93:7d:f1:f7:5c:66:42:65:a4:bc:
c0:13:71:e8:40:32:9d:ce:ed:cc:6a:da:c7:14:04:e2:f0:bb:
75:67:bb:17:25:f6:9e:bc:12:a1:0f:e7:33:52:64:f5:c7:72:
f7:f7:42:e9:a9:a3:c2:48:ba:3a:60:13:dd:c1:61:18:d0:33:
89:94:15:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:35:35 2024 by rpki-client on console-ams.rpki-client.org