Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/Z8VhPMv_6Q1tBzNuYWXQrs3iBbg.roa
File: Z8VhPMv_6Q1tBzNuYWXQrs3iBbg.roa (raw, json)
Hash identifier: u23+p9Wy9RdaYpxdPm2J4+mgbZed4O1PGu9MCbhE0r4=
Subject key identifier: 67:C5:61:3C:CB:FF:E9:0D:6D:07:33:6E:61:65:D0:AE:CD:E2:05:B8
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 018CC5DC0CD2DAA9413773DE43745D09812B
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/Z8VhPMv_6Q1tBzNuYWXQrs3iBbg.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8646
IP address blocks: 185.120.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0c:d2:da:a9:41:37:73:de:43:74:5d:09:81:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c5613ccbffe90d6d07336e6165d0aecde205b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:40:4e:9e:4e:6d:16:84:8a:c1:7f:cf:78:
38:d6:ee:ea:7f:2a:94:77:94:7d:b0:61:ef:1a:81:
0a:a2:8a:47:85:98:65:ae:a0:79:b0:c9:ad:b4:91:
32:d3:23:b9:7a:8b:46:5e:00:4c:a6:24:72:4d:cd:
0a:db:78:f3:eb:b3:44:38:c6:65:82:13:65:26:91:
c3:7b:de:b6:94:f4:b7:fb:66:02:45:53:09:08:ce:
22:a4:11:4b:4e:2e:33:3e:49:24:82:12:1f:b2:49:
50:df:52:b0:40:41:ed:cf:ff:77:af:7a:29:14:49:
a6:be:d2:26:f1:f1:31:f3:99:61:34:4d:fe:dc:b3:
69:32:3d:00:87:8c:40:39:4e:0d:e2:03:22:f1:be:
1e:cb:54:28:03:57:f7:14:0c:a9:4f:5c:ce:64:39:
21:1a:d8:0c:1c:78:9c:9f:52:54:f7:3b:29:2e:d9:
ce:0c:68:71:b7:e3:d9:27:cf:66:0f:ff:e9:93:a5:
c9:4d:54:2b:39:b3:03:a9:8f:8b:3f:13:0a:47:36:
1f:71:0d:5e:d3:41:36:94:f6:3e:17:83:58:99:22:
2a:1f:89:46:c6:7f:5d:cf:7d:d9:52:fa:ce:0f:bf:
92:0e:a1:44:fd:f5:de:8f:6f:b9:90:24:15:c0:a3:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:61:3C:CB:FF:E9:0D:6D:07:33:6E:61:65:D0:AE:CD:E2:05:B8
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/Z8VhPMv_6Q1tBzNuYWXQrs3iBbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.68.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3f:b3:ed:1c:1a:cb:ba:c0:54:e6:29:27:54:af:b9:07:03:
d1:7b:17:7a:1c:26:ef:22:01:05:b5:90:d9:92:12:6b:7d:5c:
4f:fb:dd:9d:95:fc:8d:66:53:07:1f:3a:08:b7:f8:3f:6b:ad:
56:d9:16:6b:60:d9:73:44:10:aa:8b:98:7e:5c:b9:cf:d8:2d:
91:a6:83:29:78:6a:b7:ac:23:49:3b:74:ad:b8:9b:8f:4b:ea:
07:4c:ae:f6:d2:ed:3e:f1:f4:e5:9f:fe:69:d6:9b:88:86:c5:
6e:90:b8:60:d0:40:77:f1:8f:33:7e:3f:34:73:b2:c8:2e:bd:
75:af:0d:4b:c9:e4:3c:9f:15:b8:fc:3b:6c:26:55:ba:b3:85:
18:91:88:3e:bf:f7:85:9b:63:a5:72:80:a3:88:29:5b:79:3b:
7e:82:6c:92:97:a5:f3:18:8a:d3:d9:f2:23:3f:07:4a:13:66:
1b:3c:62:6c:0d:b5:6c:a4:54:d6:c5:ab:17:3f:d6:c3:77:c0:
1a:8a:f0:e2:fa:32:ef:c9:e7:d8:53:fa:5f:fd:10:17:e3:36:
76:38:b6:32:db:8f:47:8c:44:fd:24:06:24:08:5b:33:52:88:
c8:0e:fb:eb:94:14:93:9d:cd:d1:bd:e4:af:98:81:c2:50:69:
cc:89:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:48 2024 by rpki-client on console-fra.rpki-client.org