Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/zgYaXj8Op05yweZu3SmOa-kNm3U.roa
File: zgYaXj8Op05yweZu3SmOa-kNm3U.roa (raw, json)
Hash identifier: m/mupTRI4F5RSkHY+8wnfIb29hd2UsLZxaXIybvM47w=
Subject key identifier: CE:06:1A:5E:3F:0E:A7:4E:72:C1:E6:6E:DD:29:8E:6B:E9:0D:9B:75
Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial: 018CCA2A2E3E3FAB476603A997034764E7F4
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/zgYaXj8Op05yweZu3SmOa-kNm3U.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206672
IP address blocks: 185.179.63.0/24 maxlen: 24
185.179.62.0/24 maxlen: 24
185.179.61.0/24 maxlen: 24
185.179.60.0/22 maxlen: 22
185.179.60.0/24 maxlen: 24
2a0a:7c80:e800::/38 maxlen: 38
2a0a:7c80:6000::/38 maxlen: 38
2a0a:7c80:800::/38 maxlen: 38
2a0a:7c80:bc00::/38 maxlen: 38
2a0a:7c80:5000::/38 maxlen: 38
2a0a:7c80:3c00::/38 maxlen: 38
2a0a:7c80:d000::/38 maxlen: 38
2a0a:7c80:6c00::/38 maxlen: 38
2a0a:7c80::/38 maxlen: 38
2a0a:7c80::/32 maxlen: 32
2a0a:7c80:8000::/38 maxlen: 38
2a0a:7c80:1400::/38 maxlen: 38
2a0a:7c80:9400::/38 maxlen: 38
2a0a:7c80:a800::/38 maxlen: 38
2a0a:7c80:2800::/38 maxlen: 38
2a0a:7c80:5800::/38 maxlen: 38
2a0a:7c80:d800::/38 maxlen: 38
2a0a:7c80:ec00::/38 maxlen: 38
2a0a:7c80:8c00::/38 maxlen: 38
2a0a:7c80:400::/38 maxlen: 38
2a0a:7c80:8400::/38 maxlen: 38
2a0a:7c80:7000::/38 maxlen: 38
2a0a:7c80:f000::/38 maxlen: 38
2a0a:7c80:dc00::/38 maxlen: 38
2a0a:7c80:4800::/38 maxlen: 38
2a0a:7c80:3400::/38 maxlen: 38
2a0a:7c80:2000::/38 maxlen: 38
2a0a:7c80:a000::/38 maxlen: 38
2a0a:7c80:c800::/38 maxlen: 38
2a0a:7c80:b400::/38 maxlen: 38
2a0a:7c80:5c00::/38 maxlen: 38
2a0a:7c80:c00::/38 maxlen: 38
2a0a:7c80:e400::/38 maxlen: 38
2a0a:7c80:f800::/38 maxlen: 38
2a0a:7c80:7800::/38 maxlen: 38
2a0a:7c80:1800::/38 maxlen: 38
2a0a:7c80:9800::/38 maxlen: 38
2a0a:7c80:ac00::/38 maxlen: 38
2a0a:7c80:2c00::/38 maxlen: 38
2a0a:7c80:5400::/38 maxlen: 38
2a0a:7c80:d400::/38 maxlen: 38
2a0a:7c80:4000::/38 maxlen: 38
2a0a:7c80:c000::/38 maxlen: 38
2a0a:7c80:6800::/38 maxlen: 38
2a0a:7c80:fc00::/38 maxlen: 38
2a0a:7c80:1000::/38 maxlen: 38
2a0a:7c80:7c00::/38 maxlen: 38
2a0a:7c80:9000::/38 maxlen: 38
2a0a:7c80:3800::/38 maxlen: 38
2a0a:7c80:b800::/38 maxlen: 38
2a0a:7c80:2400::/38 maxlen: 38
2a0a:7c80:a400::/38 maxlen: 38
2a0a:7c80:cc00::/38 maxlen: 38
2a0a:7c80:4c00::/38 maxlen: 38
2a0a:7c80:7400::/38 maxlen: 38
2a0a:7c80:e000::/38 maxlen: 38
2a0a:7c80:6400::/38 maxlen: 38
2a0a:7c80:1c00::/38 maxlen: 38
2a0a:7c80:8800::/38 maxlen: 38
2a0a:7c80:f400::/38 maxlen: 38
2a0a:7c80:9c00::/38 maxlen: 38
2a0a:7c80:3000::/38 maxlen: 38
2a0a:7c80:b000::/38 maxlen: 38
2a0a:7c80:4400::/38 maxlen: 38
2a0a:7c80:c400::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2e:3e:3f:ab:47:66:03:a9:97:03:47:64:e7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce061a5e3f0ea74e72c1e66edd298e6be90d9b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:e1:ab:c7:f7:37:84:dc:95:ae:01:12:de:
32:8d:e2:0a:3d:1f:1e:e9:21:68:4a:57:22:c6:d7:
39:b7:9e:5e:74:fe:d6:80:17:0b:49:cf:07:03:45:
92:8a:73:ec:9c:2f:5c:2d:56:59:30:63:3e:eb:96:
36:6c:03:90:c5:87:cb:3b:61:bb:28:2b:7f:a9:89:
ad:3e:8b:be:66:55:4f:da:f0:72:a6:91:da:ef:dd:
11:a5:c6:81:a6:01:87:23:51:37:8d:a5:cc:48:6e:
a9:9c:75:2e:1b:74:5e:fa:18:6f:1e:8c:40:04:b3:
ee:5b:fd:43:78:5c:b2:fb:80:c1:b1:4c:83:d8:12:
da:f0:8d:a6:48:d5:92:aa:69:19:d2:d3:b3:27:a5:
cf:0d:fe:72:de:1b:f5:13:a4:6d:97:6f:2c:80:52:
de:ab:c6:e7:a4:d2:98:62:85:6d:a5:e8:18:43:87:
dd:9a:b8:14:22:de:83:30:5e:10:b7:a7:1f:db:13:
ab:17:bc:43:65:1d:11:45:04:ec:a7:4d:c8:bb:b1:
38:72:9d:13:02:9d:72:9f:f7:52:41:af:92:af:ac:
3e:10:a6:6c:c7:4b:a3:36:24:21:db:d2:90:5b:ba:
d5:dc:b3:e7:b4:c1:0a:81:c3:5e:3f:ca:06:d7:83:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:1A:5E:3F:0E:A7:4E:72:C1:E6:6E:DD:29:8E:6B:E9:0D:9B:75
X509v3 Authority Key Identifier:
keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/zgYaXj8Op05yweZu3SmOa-kNm3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.60.0/22
IPv6:
2a0a:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
4c:1f:20:7f:ec:84:17:40:b9:10:9c:d2:e3:a8:a1:0b:22:fe:
69:85:43:34:d2:03:f1:2d:dd:7a:c2:46:79:7c:5b:49:e3:59:
db:ad:f8:12:85:e0:86:72:95:f8:cb:9f:4f:87:c2:02:de:7c:
88:c8:72:82:9c:af:3f:d3:79:7f:0b:bd:3c:e0:c3:0d:25:b3:
de:e2:06:1a:c0:d8:ea:2d:4d:1d:91:33:93:b9:a6:f6:00:75:
9d:0a:ab:24:13:c6:66:9a:d7:6b:0a:99:3a:bd:0e:02:15:93:
a5:01:e5:2d:81:70:20:ed:9a:e4:9e:4f:5f:82:98:72:90:01:
69:af:a7:07:a3:e3:09:78:7d:84:1c:09:12:b3:c4:b6:53:f3:
52:d9:c7:b7:2a:94:f0:6e:8d:57:ed:d6:8a:c4:ef:3b:57:9f:
2f:47:e4:74:14:6f:ac:ad:7a:e3:8d:98:8a:dd:6e:6e:0a:40:
2b:6b:78:f8:bd:e5:0f:4f:7a:d0:76:41:35:0b:1c:e4:e1:f4:
2e:7f:42:4b:3f:e0:35:87:55:de:da:ee:48:e5:d5:db:24:37:
ae:1d:47:be:5d:9e:57:6f:92:7b:73:80:25:15:fd:38:48:82:
97:4e:3a:2f:f7:aa:5d:aa:d1:e8:bb:e9:9d:ad:af:99:46:bf:
9e:4b:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:19 2024 by rpki-client on console-fra.rpki-client.org