Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa
File: zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa (raw, json)
Hash identifier: QCIUxLhfAXS4VKNcKKZcAlOFpNWNCTKnA4v7BQ/4wp0=
Subject key identifier: CC:3D:23:F0:E8:95:D8:DB:D4:02:E6:2C:5B:1F:CA:88:F8:70:88:07
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 018CC94E584885CE5B8579C74FB5C49BE678
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56876
IP address blocks: 193.192.58.0/23 maxlen: 24
94.250.192.0/19 maxlen: 24
185.137.120.0/22 maxlen: 24
176.57.128.0/18 maxlen: 24
2a00:e440::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:58:48:85:ce:5b:85:79:c7:4f:b5:c4:9b:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc3d23f0e895d8dbd402e62c5b1fca88f8708807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:b6:4f:88:bd:7c:20:f7:99:d0:39:66:28:
c8:02:e2:07:08:ec:29:40:94:b2:91:a5:8c:22:f9:
a1:a2:ca:10:6c:86:78:25:42:49:54:eb:58:7d:cd:
31:fe:a4:c3:e0:54:8a:c5:28:9a:6e:57:ea:9c:99:
3e:b7:0e:6a:86:90:b4:28:c5:c0:a2:6f:57:16:b3:
e8:9d:40:29:1e:8d:5f:16:1f:96:a0:27:24:10:3d:
fc:f1:31:43:f3:2e:60:39:29:9d:4a:28:e1:9e:dc:
a6:27:20:cc:e6:35:f0:ad:24:17:e5:c8:a0:c2:3b:
00:20:f1:6e:f7:09:87:d2:2d:3e:7e:0a:24:26:0b:
f3:21:59:1a:a5:00:43:61:3d:25:be:9d:b9:76:c4:
ae:01:f4:ab:e8:dd:6c:71:b6:61:15:02:28:b5:0d:
71:11:3f:d4:4c:48:89:df:38:a8:c4:0d:28:e1:15:
b2:4c:ab:6a:a8:78:c1:9d:f2:fa:41:7a:86:87:93:
e4:8a:3d:39:34:18:44:00:ad:e0:4b:f1:3b:a9:4b:
96:1b:43:b3:f5:d4:8a:12:8c:2b:bd:a8:b7:7a:c1:
02:70:4e:f7:c3:c1:12:4d:10:79:fe:aa:11:b2:6e:
91:6c:b6:e1:78:cd:c2:01:2f:37:f2:eb:bc:97:dc:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:23:F0:E8:95:D8:DB:D4:02:E6:2C:5B:1F:CA:88:F8:70:88:07
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/zD0j8OiV2NvUAuYsWx_KiPhwiAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.192.0/19
176.57.128.0/18
185.137.120.0/22
193.192.58.0/23
IPv6:
2a00:e440::/32
Signature Algorithm: sha256WithRSAEncryption
81:96:df:fc:81:19:b6:51:ec:1e:7c:26:90:5a:8e:91:a7:46:
8f:bc:32:79:bd:a0:6c:ec:36:c4:92:cd:cc:57:45:f8:a0:ef:
36:33:65:a1:6e:65:db:75:45:93:5d:0f:bf:7f:2d:d5:cb:11:
62:28:93:ac:7f:e5:4e:f6:13:54:a0:72:af:68:6d:bf:60:07:
0f:96:80:ca:c7:c9:dd:de:06:30:5c:fe:34:a6:12:bc:5a:13:
5b:12:60:7a:ab:da:e5:1b:3e:2a:81:8c:17:e5:5d:d2:88:02:
b2:99:13:e4:e9:9d:dc:95:25:53:6a:3e:b6:5f:3f:8d:0c:34:
65:6e:9e:1f:51:0c:58:32:77:6f:e0:a3:e6:74:9b:1f:69:c0:
3a:fc:8b:81:c3:7d:fa:2a:2c:8c:71:38:37:33:ae:bb:c7:32:
57:67:16:be:76:ed:ae:a4:0a:0c:fd:e2:f6:d6:a1:5a:9b:56:
b0:24:5f:f0:7b:94:e5:0a:52:81:e0:9d:e1:70:f9:1b:be:2d:
21:80:ed:10:8d:dd:ed:2a:ef:6e:00:3d:50:ac:76:b7:f6:22:
93:eb:a8:27:86:e3:bc:a8:89:0c:cb:87:9c:27:8b:2c:97:2b:
8a:06:0b:21:1e:30:fb:8d:3f:f6:3e:b3:7f:0d:3c:c9:f5:26:
5f:f2:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 08:27:47 2024 by rpki-client on console-fra.rpki-client.org