Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/DzKWmciozD8SqViwlYOi3m2XUiU.roa
File: DzKWmciozD8SqViwlYOi3m2XUiU.roa (raw, json)
Hash identifier: Iih4ILdk7VMVvyofG5MYaSKY+MrWbgv5gsliXLS4Jac=
Subject key identifier: 0F:32:96:99:C8:A8:CC:3F:12:A9:58:B0:95:83:A2:DE:6D:97:52:25
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 018CC42488399F14A9A1404D43071B4F15F5
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/DzKWmciozD8SqViwlYOi3m2XUiU.roa
Signing time: Mon 01 Jan 2024 08:29:37 +0000
ROA not before: Mon 01 Jan 2024 08:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58010
IP address blocks: 185.71.124.0/24 maxlen: 24
185.71.124.0/22 maxlen: 22
185.71.125.0/24 maxlen: 24
185.71.124.128/25 maxlen: 25
185.71.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:88:39:9f:14:a9:a1:40:4d:43:07:1b:4f:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: Jan 1 08:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f329699c8a8cc3f12a958b09583a2de6d975225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:41:89:ee:49:72:26:2f:88:21:22:21:63:
a1:e2:fd:9f:82:2e:e1:b2:f1:a9:4c:ee:44:24:61:
32:fb:73:e3:a9:14:77:45:3a:b5:eb:f0:ec:57:c2:
d8:4f:84:a0:04:5c:cd:66:90:d4:01:cf:67:91:8c:
06:b0:21:a0:e6:a9:dd:e9:ce:64:85:7c:d6:9d:8f:
39:74:97:3b:4e:0d:c6:f1:d9:a6:0a:0d:a4:d1:38:
7b:c4:db:2f:e0:db:b5:66:e7:70:c0:27:68:f6:d0:
bf:02:b1:e2:8f:d6:af:9d:2a:63:b3:e0:a6:11:a4:
12:8e:0c:9e:3d:b5:86:7d:eb:63:0f:95:3c:ba:71:
a7:d5:cf:72:33:a2:73:6c:dc:81:7c:7b:26:45:e0:
af:55:40:40:00:5b:7c:a1:ee:ac:d6:60:2f:c3:13:
68:1c:90:a5:c5:52:3d:35:8e:b1:5c:9d:3b:0e:ce:
a3:2b:df:f8:0b:be:50:e2:98:7c:12:96:60:00:9d:
c9:54:e6:30:03:70:da:b1:66:5e:4b:18:09:f6:66:
9c:5e:ba:a6:bf:6d:7b:7a:34:22:bd:38:82:ce:c3:
2c:7e:b0:79:f9:8e:83:5e:c6:0b:08:da:b0:6f:72:
21:cd:42:fb:f3:07:9e:75:67:58:e0:48:92:d5:cb:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:96:99:C8:A8:CC:3F:12:A9:58:B0:95:83:A2:DE:6D:97:52:25
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/DzKWmciozD8SqViwlYOi3m2XUiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.124.0/22
Signature Algorithm: sha256WithRSAEncryption
76:74:f4:cf:e9:51:ca:20:cf:b3:86:3b:18:2e:87:7f:c6:c7:
ff:18:41:bf:cb:5c:63:e8:8a:f9:0e:40:7e:c7:d9:76:21:d5:
7a:a3:2b:ea:f0:9c:55:17:35:4e:ef:89:e3:e5:3c:3a:af:12:
b3:9d:11:05:9b:35:c6:40:db:18:83:a3:a5:88:74:c8:93:f1:
b8:ef:45:e1:aa:1e:bf:f6:b2:e9:e6:f2:9f:95:a2:5f:5a:92:
fe:bb:ac:9f:4a:90:f8:62:f6:e6:4e:de:3b:35:2a:6f:f4:74:
49:e7:55:c7:94:e0:10:fc:20:79:eb:c3:25:f4:9a:f9:4d:92:
de:e7:50:d0:5d:7d:26:52:33:42:64:17:02:4e:80:23:6c:d8:
63:4f:b8:b0:f2:01:a0:73:a3:75:e1:a2:7e:d3:3b:29:47:65:
0c:4d:57:b0:5e:b0:48:c7:9b:50:3d:cf:a9:a9:fa:bf:d1:3c:
b6:fc:c2:c5:42:95:c6:cf:35:30:b5:3e:04:53:a3:8e:ad:ac:
5f:93:ac:77:6e:1b:df:42:25:a9:f4:d5:77:5a:e2:d0:b3:a9:
c2:42:eb:89:32:b4:72:61:d0:be:68:b9:75:67:0a:09:28:c3:
b6:56:72:6a:a0:34:60:67:1d:b9:55:45:84:c1:26:fc:b5:49:
64:fe:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:06:14 2024 by rpki-client on console-fra.rpki-client.org