Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3Zn7F_aPQYIPVHnxpCp4dZKzeH8.roa
File: 3Zn7F_aPQYIPVHnxpCp4dZKzeH8.roa (raw, json)
Hash identifier: xccIzHrP0feiRSRmjr6CbMXjPt2DrJ1jE/FFNdxMaeo=
Subject key identifier: DD:99:FB:17:F6:8F:41:82:0F:54:79:F1:A4:2A:78:75:92:B3:78:7F
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 0192949565AD9CB2E4FE2CCA337258A37F1A
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3Zn7F_aPQYIPVHnxpCp4dZKzeH8.roa
Signing time: Wed 16 Oct 2024 09:07:51 +0000
ROA not before: Wed 16 Oct 2024 09:07:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202506
IP address blocks: 185.247.160.0/22 maxlen: 22
185.247.160.0/24 maxlen: 24
185.247.161.0/24 maxlen: 24
185.247.162.0/24 maxlen: 24
185.247.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:94:95:65:ad:9c:b2:e4:fe:2c:ca:33:72:58:a3:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Oct 16 09:07:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd99fb17f68f41820f5479f1a42a787592b3787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:21:8a:34:44:0b:01:59:85:60:1a:4b:70:
a7:4c:41:43:95:1f:9d:c1:62:c9:86:72:77:b4:83:
8b:75:a5:73:f7:61:34:79:7c:c1:cc:b1:1c:84:4c:
32:a4:ee:a3:cd:fa:71:1d:b3:4d:cc:b5:c0:67:fd:
2b:34:66:2f:c0:d7:66:19:f5:9c:e8:8f:d9:40:a2:
39:21:bf:7b:27:da:0d:db:29:d9:d2:ca:49:3a:09:
aa:12:db:9d:11:43:59:ad:2a:07:9c:bf:3f:e2:37:
00:64:80:e8:e3:ee:90:03:73:76:17:b0:52:f9:f8:
2b:11:f0:f4:16:77:fc:33:4c:fe:b8:7d:ad:e2:a8:
2c:d9:40:42:7a:f3:1a:01:09:e2:2c:f2:7f:9a:4f:
b4:a9:58:f2:9d:4c:26:68:30:6c:9e:50:8d:ec:5b:
f5:82:93:6e:40:2d:8c:c1:52:02:91:89:ac:f8:75:
95:dd:ba:55:8d:4a:a7:54:f3:9d:3c:3b:73:62:dd:
e2:41:82:13:d7:f8:61:1c:d6:33:80:87:28:22:ad:
87:d9:f3:87:94:9f:2e:cf:bd:9e:12:3a:47:69:04:
6e:60:63:33:d5:f1:3a:b1:2f:5b:bd:c9:c6:e3:64:
b5:80:1a:13:21:31:09:fb:7b:98:2d:fc:61:4c:29:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:FB:17:F6:8F:41:82:0F:54:79:F1:A4:2A:78:75:92:B3:78:7F
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/3Zn7F_aPQYIPVHnxpCp4dZKzeH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.160.0/22
Signature Algorithm: sha256WithRSAEncryption
30:7e:93:8b:68:9e:9e:f5:c4:33:95:e7:62:5e:b2:1c:05:db:
9f:50:40:09:29:ea:49:d2:af:ee:85:f6:d5:26:9b:1c:e1:52:
05:75:a7:b9:42:3d:3d:00:f2:10:12:6c:ad:f0:22:6b:65:2e:
f6:57:26:aa:d8:d1:c2:c4:9d:19:77:82:92:be:8c:30:a9:3a:
a2:54:7e:07:fb:f0:16:0c:10:ba:ac:dd:96:6e:3f:af:37:3d:
df:d9:d2:4a:38:2d:f5:54:94:fd:f5:c2:c7:f9:53:0f:dd:39:
35:1e:a3:97:0e:ba:6c:73:3f:7c:68:01:d1:8a:eb:e6:8b:e3:
b3:6a:5a:ce:15:69:86:c3:bc:1f:c5:a4:2a:83:db:fd:33:d7:
d3:36:91:2c:66:06:87:39:6e:05:68:24:83:d8:cb:2c:88:11:
4e:9a:82:b8:67:97:63:a8:10:b8:0f:8d:7c:40:2b:15:9a:ea:
f7:20:c9:f9:43:f0:90:08:72:42:52:75:f3:e4:67:70:97:cd:
99:c3:92:74:8f:6d:b1:84:81:53:1d:d9:b8:57:60:c4:f2:26:
ae:f0:a4:f0:43:86:39:4c:95:87:30:4c:e1:c3:55:6b:f6:8b:
9f:99:f2:f8:36:b8:6a:f2:39:ad:43:20:5d:70:0c:5e:dc:fb:
cf:21:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:49:14 2024 by rpki-client on console-ams.rpki-client.org