Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/zo-qOKqMRdn0qdQz1crdieXr9pw.roa
File: zo-qOKqMRdn0qdQz1crdieXr9pw.roa (raw, json)
Hash identifier: 2BTfRKsHPu55gOlcW3CrGACo6C2zaZiUVglT72WF3Q8=
Subject key identifier: CE:8F:AA:38:AA:8C:45:D9:F4:A9:D4:33:D5:CA:DD:89:E5:EB:F6:9C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 018CCA994B5B0A4B5F62333647DC219F9290
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/zo-qOKqMRdn0qdQz1crdieXr9pw.roa
Signing time: Tue 02 Jan 2024 14:34:53 +0000
ROA not before: Tue 02 Jan 2024 14:34:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 185.9.159.0/24 maxlen: 24
185.9.156.0/24 maxlen: 24
185.9.157.0/24 maxlen: 24
185.9.158.0/24 maxlen: 24
185.118.142.0/24 maxlen: 24
178.20.224.0/24 maxlen: 24
185.118.143.0/24 maxlen: 24
178.20.225.0/24 maxlen: 24
178.20.226.0/24 maxlen: 24
185.118.140.0/24 maxlen: 24
178.20.229.0/24 maxlen: 24
178.20.230.0/24 maxlen: 24
178.20.231.0/24 maxlen: 24
178.20.227.0/24 maxlen: 24
178.20.228.0/24 maxlen: 24
37.123.96.0/24 maxlen: 24
37.123.97.0/24 maxlen: 24
37.123.98.0/24 maxlen: 24
37.123.99.0/24 maxlen: 24
37.123.100.0/24 maxlen: 24
37.123.101.0/24 maxlen: 24
37.123.102.0/24 maxlen: 24
37.123.103.0/24 maxlen: 24
2a00:9bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:4b:5b:0a:4b:5f:62:33:36:47:dc:21:9f:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Jan 2 14:34:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8faa38aa8c45d9f4a9d433d5cadd89e5ebf69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:8c:e1:16:77:d9:75:bb:5c:7f:b1:ef:1f:
f7:d4:c3:f2:61:ae:5c:ff:ba:40:42:10:a2:41:6a:
82:92:f9:bc:a9:b1:ae:c2:7b:81:07:82:ac:fd:f3:
a3:71:58:1d:2f:77:88:87:ab:cc:89:83:ce:c3:c1:
55:fd:af:d5:a0:29:a3:e5:31:a5:77:1c:9b:1a:06:
11:37:66:6a:8a:5c:86:e7:f3:63:e8:ab:cd:62:70:
ec:6e:90:45:4d:29:58:48:73:81:04:03:93:d4:27:
81:b5:30:bf:4a:ef:88:07:4b:d3:ae:85:fa:f6:e2:
c3:4b:7e:58:88:6a:f0:ae:ab:20:34:8f:67:de:ad:
ec:1a:56:6c:52:47:ba:4a:98:28:e5:83:00:1f:f9:
26:b7:3b:24:be:3d:23:e5:d4:82:18:e7:07:cb:b4:
8a:7d:af:f8:4d:30:29:9c:fb:8f:00:41:4f:f9:93:
5b:1e:62:60:4c:68:4e:c6:17:9d:d9:9c:77:94:c5:
e4:37:b1:0d:8a:a3:ee:b4:d1:98:33:96:c7:3a:cc:
98:7b:4f:22:bc:10:bd:3d:6a:f1:56:2a:d3:82:3c:
47:ac:13:14:5e:3a:85:46:90:8f:2b:b3:b9:ff:89:
33:d0:92:93:a3:31:d0:4c:f5:d4:41:5f:cc:dd:08:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8F:AA:38:AA:8C:45:D9:F4:A9:D4:33:D5:CA:DD:89:E5:EB:F6:9C
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/zo-qOKqMRdn0qdQz1crdieXr9pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.96.0/21
178.20.224.0/21
185.9.156.0/22
185.118.140.0/24
185.118.142.0/23
IPv6:
2a00:9bc0::/32
Signature Algorithm: sha256WithRSAEncryption
51:88:12:f9:cf:52:9e:2c:98:85:c7:82:a8:bc:aa:72:58:8e:
3e:f9:49:27:c8:58:47:b3:86:95:7d:c4:f4:06:b7:e6:7a:f6:
8b:2e:0c:f2:a1:11:63:76:b7:23:30:ab:a5:90:07:c8:8d:66:
cc:ff:75:06:a2:f3:3e:52:40:52:7c:18:80:00:a7:0e:b1:51:
86:11:83:d8:8d:7f:02:a2:cf:16:4f:8f:23:56:3d:16:f5:fd:
89:ea:53:68:3e:88:4b:de:dd:35:3d:12:69:e1:63:14:77:4b:
1a:e9:c5:25:8b:11:00:f5:fa:7e:37:3a:05:fb:e5:8f:66:8e:
1c:62:0a:8e:2d:57:ee:8d:43:ab:c7:bf:98:42:6d:f4:a7:93:
aa:50:f6:13:64:82:26:85:eb:73:ec:e6:e1:3e:a6:fa:d4:04:
cf:4d:e8:09:59:7d:bd:86:df:47:3d:4d:cc:68:79:c2:2b:da:
64:fb:51:18:73:03:80:05:de:77:8f:49:02:dc:bc:0c:83:d6:
9a:f6:1f:d0:26:40:66:33:61:c3:7b:64:d7:0c:71:2b:ac:59:
58:fa:b3:98:72:0f:62:22:b8:f3:c5:dc:26:d3:ed:1e:33:5e:
c1:b5:fb:a5:38:e0:7a:f4:3a:03:41:81:82:4d:54:41:ce:d6:
24:87:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:37:05 2024 by rpki-client on console-ams.rpki-client.org