Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zx-aFF_xB6b2RxseHpCoy0isq5Y.roa
File: Zx-aFF_xB6b2RxseHpCoy0isq5Y.roa (raw, json)
Hash identifier: lNp749YpnlxyCQYOdbWwuns7AZhxMQlXiVEYY78Xy6E=
Subject key identifier: 67:1F:9A:14:5F:F1:07:A6:F6:47:1B:1E:1E:90:A8:CB:48:AC:AB:96
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 018CC727497D8AA29CAD1F2A301A979BB172
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zx-aFF_xB6b2RxseHpCoy0isq5Y.roa
Signing time: Mon 01 Jan 2024 22:31:29 +0000
ROA not before: Mon 01 Jan 2024 22:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 185.222.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:49:7d:8a:a2:9c:ad:1f:2a:30:1a:97:9b:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jan 1 22:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671f9a145ff107a6f6471b1e1e90a8cb48acab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:82:54:fc:23:3f:88:74:37:2b:1b:07:3b:
09:62:2a:bb:3a:52:f5:a6:56:aa:de:bd:1b:cd:c9:
9e:88:b7:da:af:05:2e:08:d6:96:c0:73:18:05:ae:
95:e4:ee:f1:fd:04:f0:5b:39:e3:43:95:19:cd:69:
b3:a0:1a:d3:30:0f:07:eb:37:3e:22:20:df:af:26:
5d:cf:27:57:53:4f:94:c7:19:24:78:00:4f:a0:7c:
94:d6:09:86:9d:82:e2:69:45:f0:14:50:64:69:e1:
7e:bd:34:0e:23:f8:12:ec:7e:ed:65:cf:cf:b8:3b:
74:20:0e:ea:f7:ba:e5:3f:b4:cf:8f:f3:5c:bd:3b:
21:10:1b:c7:43:39:c5:16:20:f9:98:f5:a9:c9:63:
f5:39:17:d0:31:58:6f:be:42:36:52:ea:02:34:1e:
73:c0:7f:90:b2:25:c6:23:7c:f7:85:17:28:04:87:
c0:d4:4b:b1:b0:41:a6:cf:e6:fb:b6:7d:1c:08:84:
67:97:af:70:b8:6a:57:2a:43:ad:12:11:05:6b:3c:
8f:6d:82:86:99:85:ce:c7:4b:b7:e3:ec:18:89:c7:
df:2a:56:28:b1:d2:b7:a7:ec:e2:7b:fb:df:65:1e:
c7:55:ac:bf:b3:73:a6:cb:5c:66:65:d7:46:e0:3b:
55:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:9A:14:5F:F1:07:A6:F6:47:1B:1E:1E:90:A8:CB:48:AC:AB:96
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/Zx-aFF_xB6b2RxseHpCoy0isq5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.140.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:d3:bd:0d:c2:3d:3b:33:18:75:22:44:96:43:b8:74:39:7f:
9c:d3:ca:50:5c:f3:e8:6d:26:99:98:6c:b8:4d:a1:01:c2:3f:
56:05:88:e8:40:65:75:3f:a3:35:2c:cf:04:e8:2d:fc:a5:87:
76:0e:5a:2a:4b:8a:90:f4:6e:82:86:49:b1:b6:58:36:7b:24:
cd:47:e8:2c:71:8c:b6:14:00:98:d4:fd:50:a8:1f:cf:05:f5:
09:a3:99:42:69:4b:2b:36:bb:f1:8c:95:e2:e4:07:94:78:d1:
a9:b4:ff:9a:ac:71:d2:0e:c0:95:35:29:5e:be:ea:f5:de:94:
16:0b:f4:36:bf:11:98:d8:5b:2a:53:a6:4f:96:cb:54:bc:d3:
25:e3:64:62:8f:4a:63:97:3f:80:05:ad:ee:b8:61:75:0e:8a:
b8:f3:1a:2d:72:a8:73:53:e5:cd:bd:f9:5c:74:57:ad:8b:bb:
7d:2b:ee:80:ca:a8:08:9a:b3:13:11:e2:66:17:5e:05:14:7c:
c4:24:80:d3:34:3f:73:a1:b5:27:11:20:f4:1c:47:9c:cd:2a:
c9:c6:bf:fb:e8:5e:c9:95:f5:d7:f8:34:87:a8:c1:84:1f:f7:
71:4e:90:a9:d2:8f:42:26:2d:1a:f5:91:bc:61:ec:da:d2:f7:
3c:10:fa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:43:04 2024 by rpki-client on console-fra.rpki-client.org