Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/ZcxQKehNRFEOd5-ktRlLyib3USo.roa
File: ZcxQKehNRFEOd5-ktRlLyib3USo.roa (raw, json)
Hash identifier: EfmiUv8i7E4qQK7pO50SY+5JdHtEGjpCBFmCHwr9+uY=
Subject key identifier: 65:CC:50:29:E8:4D:44:51:0E:77:9F:A4:B5:19:4B:CA:26:F7:51:2A
Certificate issuer: /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial: 018F76E8498EE8A9D03DBDB0DD73EC2026EF
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/ZcxQKehNRFEOd5-ktRlLyib3USo.roa
Signing time: Tue 14 May 2024 11:41:25 +0000
ROA not before: Tue 14 May 2024 11:41:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43220
IP address blocks: 185.60.160.0/24 maxlen: 24
185.60.161.0/24 maxlen: 24
185.60.162.0/24 maxlen: 24
185.60.163.0/24 maxlen: 24
185.161.124.0/22 maxlen: 22
185.211.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:e8:49:8e:e8:a9:d0:3d:bd:b0:dd:73:ec:20:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Validity
Not Before: May 14 11:41:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65cc5029e84d44510e779fa4b5194bca26f7512a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:dc:f8:3b:69:3f:63:b6:e1:65:1f:c5:89:
25:62:7c:f4:6b:3f:18:15:04:1c:7e:b4:41:dd:46:
cf:b0:98:53:31:48:31:9d:57:a5:33:0c:1b:80:24:
9c:d8:5a:cb:22:cd:79:6e:72:78:69:7f:7a:28:65:
93:ae:58:d1:0a:f1:e9:91:e8:e0:8f:0a:bc:0b:38:
4b:7a:48:be:d6:01:3c:c4:06:c1:ca:45:7d:c7:14:
40:a4:e1:d3:84:7f:5f:18:2f:dc:2e:66:d8:9f:f3:
13:f6:25:60:5a:25:52:44:8d:cf:a9:7c:dc:2d:04:
d4:f0:2d:2c:c6:9c:e2:95:ec:69:73:52:d4:61:e3:
8f:43:32:cd:f1:64:1a:34:4f:c8:8e:38:5e:0a:3c:
e8:59:b3:11:ea:65:cc:58:65:a5:6b:b5:26:f0:89:
d0:aa:25:ac:59:a1:fc:9e:be:62:17:d2:4d:2a:4d:
d6:a1:55:57:1c:d3:25:07:59:a6:2d:9d:17:ad:2a:
75:3c:bd:e6:e8:e6:6a:06:08:02:78:7c:af:b0:88:
98:88:ef:2b:94:c4:5c:55:88:02:e7:8b:40:26:ec:
0f:d1:6b:19:7a:b7:52:97:0a:5f:69:db:f0:21:bd:
02:dc:a9:dc:27:6e:8e:36:f5:ae:9b:cc:44:e9:c9:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:50:29:E8:4D:44:51:0E:77:9F:A4:B5:19:4B:CA:26:F7:51:2A
X509v3 Authority Key Identifier:
keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/ZcxQKehNRFEOd5-ktRlLyib3USo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.160.0/22
185.161.124.0/22
185.211.52.0/22
Signature Algorithm: sha256WithRSAEncryption
56:44:8c:0e:af:0a:ab:6c:e0:36:49:aa:2b:04:5b:5c:51:e1:
88:b0:cf:28:19:d8:04:78:68:19:d0:ca:eb:88:46:7d:36:62:
84:c1:dc:1b:c1:dd:f1:ac:ec:8e:dd:f0:bf:5f:2b:bb:13:58:
9a:00:53:47:71:54:21:09:e5:79:07:5f:3a:b8:c2:33:59:10:
b8:81:7e:bc:d4:68:e6:77:9b:f2:f4:17:78:c2:56:42:53:d9:
f4:f5:53:c8:86:63:59:48:d5:61:67:ee:f6:2e:16:14:e8:8f:
2f:cc:2f:71:79:12:c3:16:5a:0f:e2:1e:3d:d6:d7:fd:c4:9d:
b7:33:63:73:2c:2b:e7:18:99:4b:f1:63:7c:29:1f:1a:6f:a8:
10:e7:52:dc:6c:92:c2:e3:98:95:6e:6d:33:75:8f:ab:f3:5d:
99:04:0a:8c:3b:4c:cd:1b:75:0e:3e:bc:06:b6:e2:88:4b:f0:
d4:fe:8c:ed:5f:06:2b:db:d2:51:41:c6:5f:b1:4c:23:66:20:
fb:53:31:49:a8:c3:b7:7a:d1:20:aa:2b:cb:5c:9b:d8:0e:5e:
58:fd:ea:69:bc:42:e3:c2:21:47:63:00:ba:e6:34:7b:91:66:
f6:9f:58:06:a6:70:8e:9b:0e:c3:7e:ba:7d:26:c0:7c:da:03:
7d:54:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:38 2024 by rpki-client on console-fra.rpki-client.org