Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzz-b6SOYNoZxsL5exp-9o298FE.roa
File: pzz-b6SOYNoZxsL5exp-9o298FE.roa (raw, json)
Hash identifier: e23kyMbswa4Red493A3iRO+FQFGF9bIebVk9LlhObyw=
Subject key identifier: A7:3C:FE:6F:A4:8E:60:DA:19:C6:C2:F9:7B:1A:7E:F6:8D:BD:F0:51
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E1C1604F8CD3671B4E0B18F57A349
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzz-b6SOYNoZxsL5exp-9o298FE.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212097
IP address blocks: 178.19.39.0/24 maxlen: 24
45.80.83.0/24 maxlen: 24
45.80.82.0/24 maxlen: 24
45.80.82.0/23 maxlen: 23
185.28.49.0/24 maxlen: 24
185.28.50.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
178.19.36.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1c:16:04:f8:cd:36:71:b4:e0:b1:8f:57:a3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a73cfe6fa48e60da19c6c2f97b1a7ef68dbdf051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:59:0e:d7:ca:b4:1a:59:78:e8:e5:82:62:
d2:aa:d9:e7:03:b0:2e:9e:24:9e:cf:83:bd:b0:33:
a1:9a:6a:a5:16:d2:3f:16:d5:96:43:50:fe:8b:51:
d2:94:3c:b6:c7:ca:35:9e:37:b8:7f:9a:f4:90:c0:
98:e3:e2:de:15:f2:0c:11:f2:bf:b2:71:35:8b:db:
d8:f3:7a:c8:a7:29:d8:c1:33:e9:e5:82:da:ea:46:
14:1b:1e:56:ae:1a:a1:d7:5d:6d:82:28:80:fd:2c:
b8:75:a8:12:3f:b4:9c:de:c7:fd:40:63:71:2c:2b:
56:ed:03:54:7f:3b:e3:90:bf:79:13:c5:81:48:e2:
8c:3a:3e:b1:8f:4c:c9:53:46:ae:3e:36:09:7b:f0:
15:c4:0c:4a:3d:4d:42:b2:aa:1a:a9:8a:d7:dd:51:
3c:8d:38:b0:3c:f5:56:cf:f0:50:f8:4f:f6:3e:8a:
79:68:85:35:2d:ad:84:dd:e2:bf:ef:3d:61:0e:6f:
24:98:93:bb:19:94:28:7f:d4:77:e9:98:f7:57:4f:
d7:39:60:9e:8d:1f:0d:16:88:62:e5:a8:a1:f8:88:
76:3d:72:7c:cf:cc:dd:35:35:71:9c:b3:4b:1a:2b:
9c:48:10:ec:3a:8c:49:41:74:14:40:22:41:f6:fb:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:FE:6F:A4:8E:60:DA:19:C6:C2:F9:7B:1A:7E:F6:8D:BD:F0:51
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pzz-b6SOYNoZxsL5exp-9o298FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.82.0/23
178.19.36.0/22
185.28.49.0-185.28.50.255
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b4:cf:98:92:ea:3d:69:de:11:a5:05:58:83:d7:bf:a9:c2:
32:ff:b6:1c:d4:32:b0:bd:9f:03:04:80:93:86:72:11:c5:ff:
9c:79:62:8e:1e:21:7f:7d:15:3d:da:69:d2:fa:35:84:64:2f:
f0:92:18:79:7c:02:86:36:2f:fb:06:2f:b2:84:22:32:03:48:
9f:fe:91:16:b5:02:4a:0b:1a:d2:01:fd:48:0d:c0:a1:4b:4f:
47:2d:b2:20:a8:bf:c1:b2:82:9c:af:0c:59:c5:b0:d0:b2:8d:
c3:20:db:36:c8:43:b9:f6:b9:69:d5:a5:46:6b:08:5c:47:2e:
8b:9f:40:0a:1d:83:7f:fe:2b:43:61:7c:0b:e8:98:97:29:6e:
34:41:c4:69:05:b5:72:77:86:ce:6c:b1:01:cb:de:a3:16:03:
ab:52:5d:a0:db:fe:b4:b4:51:f5:bb:2a:20:68:38:db:dc:94:
3b:e8:28:72:cc:39:b0:a3:24:ea:79:32:9c:f9:76:b9:2e:db:
5e:c0:c1:9c:f3:6a:e6:24:64:ea:cd:68:f2:c9:57:ae:cc:31:
88:8e:76:a5:70:17:19:07:03:d8:1b:99:35:3d:4e:0d:75:ab:
08:b8:a7:f5:92:8d:d2:5f:83:15:f8:ab:38:fc:00:42:82:97:
3b:6c:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:42:52 2024 by rpki-client on console-ams.rpki-client.org