Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/RZLH0zZFfmBcygDgxzZbdxXl20Q.roa
File: RZLH0zZFfmBcygDgxzZbdxXl20Q.roa (raw, json)
Hash identifier: JALFMU8FOqwFhtPy9eWBl8bjii55MnLT2XMNLSitvF8=
Subject key identifier: 45:92:C7:D3:36:45:7E:60:5C:CA:00:E0:C7:36:5B:77:15:E5:DB:44
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 018D56CC822DC81BDD62C83E5872EC6ACF4D
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/RZLH0zZFfmBcygDgxzZbdxXl20Q.roa
Signing time: Mon 29 Jan 2024 19:57:39 +0000
ROA not before: Mon 29 Jan 2024 19:57:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50500
IP address blocks: 185.114.88.0/24 maxlen: 24
185.114.89.0/24 maxlen: 24
185.114.90.0/24 maxlen: 24
185.114.91.0/24 maxlen: 24
185.134.176.0/24 maxlen: 24
185.134.177.0/24 maxlen: 24
185.134.178.0/24 maxlen: 24
185.134.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 13:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:cc:82:2d:c8:1b:dd:62:c8:3e:58:72:ec:6a:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jan 29 19:57:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4592c7d336457e605cca00e0c7365b7715e5db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:5c:68:51:dc:46:ea:89:96:41:ae:81:46:
70:51:aa:e0:8e:ef:7b:cd:8d:5a:52:bd:52:5a:76:
f3:34:b2:9e:b6:fa:4b:33:d7:04:d8:36:08:a0:37:
58:90:54:f4:68:49:6b:68:9b:1b:16:c2:e9:78:f1:
e0:76:f1:f8:25:1c:fc:38:79:31:5f:53:29:b5:b8:
b8:db:8b:8c:e6:ba:b7:9a:cd:90:27:f4:30:a7:4f:
55:4b:3c:59:af:00:48:4e:8c:92:3c:90:10:8d:31:
df:6d:7a:80:3f:09:86:82:a6:1c:5e:24:11:5a:0b:
82:9b:ff:43:cc:09:f8:31:91:20:92:ee:21:8a:fb:
12:91:23:26:b4:11:de:fc:52:28:74:9e:bf:82:ca:
72:80:66:10:a8:c9:fc:91:ba:78:12:c0:85:e8:f0:
e5:fc:e7:ea:3b:43:57:b2:36:c7:df:01:db:3f:9f:
c7:e1:c3:26:5a:73:5f:ca:7e:a9:fd:bc:5d:2c:d7:
fa:c5:4e:37:0d:e1:e8:83:57:23:50:88:d4:c3:ed:
cd:15:09:a0:18:54:ce:e4:db:fc:ac:70:3d:df:60:
6d:11:e1:12:9f:9d:e2:59:d8:ed:33:d8:e6:15:ed:
9e:9e:88:65:d6:b8:2b:71:78:33:6b:0d:88:93:5c:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:C7:D3:36:45:7E:60:5C:CA:00:E0:C7:36:5B:77:15:E5:DB:44
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/RZLH0zZFfmBcygDgxzZbdxXl20Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.88.0/22
185.134.176.0/22
Signature Algorithm: sha256WithRSAEncryption
56:17:e8:73:45:af:2f:9e:de:72:95:59:00:16:16:ef:09:1d:
48:b0:d3:81:9f:54:14:05:bd:6c:c0:ee:d0:cd:c3:86:5a:e2:
9a:31:38:d3:41:03:3b:97:42:12:78:59:07:72:ec:13:04:97:
26:85:b8:d0:54:c5:4f:6f:9b:fa:f5:0f:a0:76:ae:c7:2b:34:
5b:80:0a:f3:8a:33:77:62:cb:a6:fc:fe:5e:b7:05:14:89:ea:
db:de:db:0c:d0:54:b2:8d:59:eb:aa:9c:36:b4:ec:0b:a3:fa:
89:f4:b4:4b:ad:e7:d0:25:e6:ff:51:b2:25:11:e1:d4:47:3a:
ce:81:a3:1f:bb:40:5f:0f:89:42:3d:1a:0a:4b:59:18:0a:25:
64:97:f5:a2:72:a1:a9:6f:b7:b3:55:25:fe:c1:58:fc:7d:da:
2c:1c:ad:04:26:ac:75:23:da:71:1c:7f:dc:67:dc:e6:b3:93:
02:81:b4:7e:46:c9:db:65:de:2a:5f:3d:67:cb:46:b4:89:f1:
9b:ff:aa:e2:60:70:ff:a0:e9:5b:db:67:2b:f8:6e:47:74:08:
dc:64:9f:f7:74:0d:69:44:11:4d:95:2d:bd:1d:75:78:61:1b:
d6:2a:50:b5:de:10:98:fa:b3:88:6d:bf:ea:ad:21:de:4b:71:
ab:ee:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:05:37 2024 by rpki-client on console-ams.rpki-client.org