Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/SjE-fq9vGYouGPyfzbGYHw_TVFc.roa
File: SjE-fq9vGYouGPyfzbGYHw_TVFc.roa (raw, json)
Hash identifier: dYi31FwJOoXJ6Z1u9s+QpRrgB7Ilwz3O6JelHEzcKzg=
Subject key identifier: 4A:31:3E:7E:AF:6F:19:8A:2E:18:FC:9F:CD:B1:98:1F:0F:D3:54:57
Certificate issuer: /CN=65865968a1d8f4f377865c913af3b9af890d7cce
Certificate serial: 018CC4245B19576BAEF2DE1DD0711FCCFB8F
Authority key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/SjE-fq9vGYouGPyfzbGYHw_TVFc.roa
Signing time: Mon 01 Jan 2024 08:29:26 +0000
ROA not before: Mon 01 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61241
IP address blocks: 185.161.172.0/23 maxlen: 23
2a07:c386::/32 maxlen: 32
2a07:c381::/32 maxlen: 32
2a07:c384::/32 maxlen: 32
2a07:c383::/32 maxlen: 32
2a07:c387::/32 maxlen: 32
2a07:c380::/32 maxlen: 32
2a07:c380:38::/48 maxlen: 48
2a07:c382::/32 maxlen: 32
2a07:c385::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5b:19:57:6b:ae:f2:de:1d:d0:71:1f:cc:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65865968a1d8f4f377865c913af3b9af890d7cce
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a313e7eaf6f198a2e18fc9fcdb1981f0fd35457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:71:f6:5c:a5:cf:d9:33:1b:f2:3d:d2:7c:21:
d5:be:44:80:0e:14:17:51:56:55:92:c3:b5:5e:ce:
08:7d:11:58:d5:07:75:4d:b2:22:39:50:0b:4b:50:
18:1e:9a:4e:b8:20:df:69:af:04:96:68:84:59:39:
31:17:29:c6:be:fe:bd:5c:c2:01:8f:83:3e:ff:b6:
b7:e8:d9:4e:ac:f3:b2:f2:39:26:c5:23:95:78:9c:
c6:13:17:f9:38:7e:66:e7:f0:bb:18:d3:60:8b:57:
75:b7:d7:0b:4f:22:60:d4:4b:65:df:6e:cb:d3:4d:
88:83:86:42:ab:9c:a4:bd:e0:96:9e:2d:2c:9b:f1:
8e:ef:c2:9c:82:e1:35:ed:a0:3f:37:56:29:49:6f:
fb:ea:f4:5f:e6:82:1f:32:6e:d3:11:3d:c7:6a:49:
ef:b1:e4:79:5a:21:57:9d:79:df:f0:1b:4f:45:e8:
9d:3b:14:77:46:13:44:e7:3e:be:e2:cb:55:b2:22:
5a:fe:e0:0d:c8:d6:8f:8a:ea:1c:d8:a4:72:8b:8a:
c2:fc:90:75:7f:7f:78:3e:8c:26:0c:35:9b:24:43:
8a:e3:21:88:d7:79:eb:5d:5c:45:1f:79:2b:8a:23:
39:bd:8a:ff:bd:91:d0:5d:88:ad:e2:ac:d3:f4:c1:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:3E:7E:AF:6F:19:8A:2E:18:FC:9F:CD:B1:98:1F:0F:D3:54:57
X509v3 Authority Key Identifier:
keyid:65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/SjE-fq9vGYouGPyfzbGYHw_TVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.172.0/23
IPv6:
2a07:c380::/29
Signature Algorithm: sha256WithRSAEncryption
16:85:08:c6:cb:0e:67:7e:0c:3a:b9:f8:f3:6c:f3:be:b2:3c:
3c:4f:5e:84:09:24:91:c7:72:25:df:87:8f:2c:92:b8:05:0c:
2a:73:04:d3:d5:74:52:03:60:84:0b:16:18:b4:a6:6f:a6:2c:
0a:ed:fe:dd:2b:e0:77:dc:e3:0a:b0:e1:57:36:a4:42:7a:a1:
48:d6:f2:5e:24:ce:17:88:ce:b8:31:a8:4b:51:24:8c:11:5b:
f4:29:f2:12:74:cd:8d:c3:fb:af:b4:f1:eb:8d:a4:69:23:bb:
27:b2:30:1b:08:9b:2a:57:ff:8b:6a:9d:73:8c:00:43:1c:ec:
a4:0a:99:ec:ae:f8:bc:da:fe:42:33:94:74:c6:d6:9a:d8:a1:
98:fd:26:c7:65:c5:0e:49:30:89:ba:19:2c:17:a8:e0:ad:fb:
44:46:53:da:3c:87:0e:22:86:07:de:9a:98:f6:2c:bb:a4:d6:
70:df:aa:5f:57:06:1a:50:e7:ec:00:22:77:da:27:7b:a8:fb:
e2:6b:03:66:31:19:59:3e:a4:5d:b3:cf:77:10:f3:1a:28:fe:
b5:9d:8d:10:ce:f0:02:23:0c:f8:67:3f:47:fb:b8:12:5d:97:
32:42:65:cd:1c:8e:74:5c:7d:d1:a6:30:3b:99:c7:0e:16:94:
44:d7:60:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:33 2024 by rpki-client on console-ams.rpki-client.org