Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa
File: ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa (raw, json)
Hash identifier: 0k+Mzq/cOPCr6/pXSxHPs52VFLR7kRctdtSogHIznKQ=
Subject key identifier: 64:56:8A:D4:3A:F0:4B:12:E9:92:BD:49:AF:05:51:C2:4C:E1:A2:BE
Certificate issuer: /CN=8260152edd476b31708404452958615b65ddcb0a
Certificate serial: 018CC501058913DD5C8CF4BBAE9F0872C4E7
Authority key identifier: 82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa
Signing time: Mon 01 Jan 2024 12:30:27 +0000
ROA not before: Mon 01 Jan 2024 12:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25540
IP address blocks: 185.126.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:05:89:13:dd:5c:8c:f4:bb:ae:9f:08:72:c4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8260152edd476b31708404452958615b65ddcb0a
Validity
Not Before: Jan 1 12:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64568ad43af04b12e992bd49af0551c24ce1a2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:30:6c:37:5a:50:7e:42:64:53:34:a1:fc:
96:ed:c6:5e:ae:dc:e9:f9:e1:28:8a:13:97:7c:93:
00:f7:d2:f2:3a:6f:dc:22:52:73:5b:42:ee:bb:9e:
56:88:47:55:f7:fa:5b:12:4b:dd:6d:a8:eb:76:14:
69:7f:c0:f2:06:58:f9:2c:51:3b:4f:03:a0:50:64:
c7:fa:5c:83:8a:51:6f:57:fb:60:e8:ed:cf:1c:19:
02:36:a7:aa:88:b4:c8:2a:76:08:e2:61:17:71:af:
c6:3b:e0:88:6c:da:75:ee:c9:da:38:eb:db:11:f9:
4c:b6:4b:ab:a4:0a:71:2d:4e:98:aa:2b:d0:c7:28:
86:61:08:67:c1:87:e0:20:c8:c6:cf:f3:be:dd:5a:
3d:a5:14:19:ed:2e:70:45:e6:fd:6a:60:40:40:7a:
f6:e9:49:ec:07:00:7e:d2:e3:57:fb:00:84:16:f8:
ea:8b:47:c8:76:8d:08:51:e0:bd:88:95:35:5b:a6:
9e:79:be:21:05:b4:b4:2d:3c:65:6a:cf:d0:fc:26:
f8:16:d6:55:40:3c:06:d5:b2:5f:a7:a5:79:a3:8e:
f4:88:9a:4c:e7:ff:c7:9a:e3:6d:bc:c4:6c:a1:d3:
09:a2:c4:c1:d0:ee:05:95:d8:f3:ad:01:50:06:c6:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:56:8A:D4:3A:F0:4B:12:E9:92:BD:49:AF:05:51:C2:4C:E1:A2:BE
X509v3 Authority Key Identifier:
keyid:82:60:15:2E:DD:47:6B:31:70:84:04:45:29:58:61:5B:65:DD:CB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmAVLt1HazFwhARFKVhhW2Xdywo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/ZFaK1DrwSxLpkr1JrwVRwkzhor4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49f40c-5448-4217-956f-ccf9b0f0e227/1/gmAVLt1HazFwhARFKVhhW2Xdywo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.244.0/22
Signature Algorithm: sha256WithRSAEncryption
32:e0:69:b9:64:55:2a:01:0f:20:f5:f0:34:3c:04:94:2d:e8:
f9:7e:24:8a:69:36:b0:1a:a0:7f:e1:d6:b0:90:9c:73:27:bd:
24:85:a0:9b:a9:d8:f6:a9:03:42:07:e1:12:a9:30:50:c7:9d:
ef:b3:b5:9d:7e:f3:79:ea:52:00:d6:98:e6:bf:39:b6:47:37:
6a:cc:94:84:ac:45:3c:8a:18:71:c7:0b:8c:4a:ff:8a:7d:d6:
61:b1:30:57:8d:42:e5:10:a4:36:71:0a:29:7a:58:1e:f4:0a:
f5:87:44:95:4c:f8:44:a5:05:bc:5e:12:40:68:82:81:1f:c9:
92:da:5f:26:1c:6e:f0:38:f6:72:51:95:ac:1c:d6:f8:36:f5:
a9:a3:67:2e:a2:22:7a:2d:02:fe:a3:c2:cf:ac:c4:e0:07:63:
0b:bb:48:db:61:f6:df:7c:d8:4e:96:00:80:2d:9a:96:40:38:
8b:63:64:43:59:86:dd:9e:ec:5f:17:b3:0e:35:1b:20:b8:03:
47:bc:d2:30:f1:32:da:cc:f8:6e:60:87:83:ca:ca:fa:7a:f2:
33:37:78:cc:75:4e:1c:a6:6f:1c:a5:96:a9:8e:80:0c:ab:1a:
51:1c:82:03:3e:97:2c:3c:29:37:94:88:73:86:95:15:ee:b8:
a4:e6:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:52:01 2024 by rpki-client on console-fra.rpki-client.org