Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/vGziqUVkfhpN79XrhX2zzO4gCPg.roa
File: vGziqUVkfhpN79XrhX2zzO4gCPg.roa (raw, json)
Hash identifier: bHHg3+OLzichfC0eUQcd8Vxs7AczNhY9R0rnR777UEM=
Subject key identifier: BC:6C:E2:A9:45:64:7E:1A:4D:EF:D5:EB:85:7D:B3:CC:EE:20:08:F8
Certificate issuer: /CN=65865968a1d8f4f377865c913af3b9af890d7cce
Certificate serial: 018CC4245A497D0D627C609C2630E5A2740E
Authority key identifier: 65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/vGziqUVkfhpN79XrhX2zzO4gCPg.roa
Signing time: Mon 01 Jan 2024 08:29:25 +0000
ROA not before: Mon 01 Jan 2024 08:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5578
IP address blocks: 185.161.174.0/23 maxlen: 23
185.161.174.0/24 maxlen: 24
185.161.175.0/24 maxlen: 24
2a07:c380::/29 maxlen: 29
2a07:c387::/32 maxlen: 32
2a07:c380:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5a:49:7d:0d:62:7c:60:9c:26:30:e5:a2:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65865968a1d8f4f377865c913af3b9af890d7cce
Validity
Not Before: Jan 1 08:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc6ce2a945647e1a4defd5eb857db3ccee2008f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:51:3a:21:ad:9a:83:6f:d8:1b:e1:e4:1e:
78:1f:55:13:d0:fd:c2:fe:93:0b:e5:c6:94:19:b3:
dc:1d:10:53:df:db:a2:56:ac:f6:fe:d4:97:a8:b3:
99:3d:25:e6:81:1d:84:f4:4b:1b:6b:ca:8f:d5:ff:
12:8b:10:ea:f4:9c:67:27:33:21:14:cf:87:38:66:
3a:41:70:86:ba:fb:86:35:dc:97:fb:99:2c:2c:3f:
dc:1b:a4:4e:25:ac:9b:33:da:46:e1:d2:15:c3:92:
df:e3:97:d8:58:58:92:31:19:a9:18:29:f5:23:4c:
d3:a8:9f:f4:7b:aa:bf:29:d3:e3:0b:0b:0f:d3:38:
f7:c7:bd:4a:a7:d6:71:f1:16:32:72:17:6a:29:45:
eb:a9:31:81:f2:2e:9d:99:0d:a5:b9:10:5c:d6:46:
82:ff:26:12:e4:03:00:56:5c:79:8c:ff:27:43:92:
79:08:cc:51:71:52:3a:7d:8b:d3:c5:3c:71:42:73:
92:7e:c0:e0:ea:08:e7:36:17:73:1d:e3:69:66:cb:
b4:d4:12:f4:97:a8:e9:b5:99:17:de:60:2a:5d:23:
59:a7:4d:a4:42:b0:76:88:77:85:62:58:eb:41:f8:
bd:71:74:87:7b:36:d8:b9:d7:14:aa:43:26:25:15:
72:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6C:E2:A9:45:64:7E:1A:4D:EF:D5:EB:85:7D:B3:CC:EE:20:08:F8
X509v3 Authority Key Identifier:
keyid:65:86:59:68:A1:D8:F4:F3:77:86:5C:91:3A:F3:B9:AF:89:0D:7C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYZZaKHY9PN3hlyROvO5r4kNfM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/vGziqUVkfhpN79XrhX2zzO4gCPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32c5ce-28b2-47d7-abd5-2e9d6ca08701/1/ZYZZaKHY9PN3hlyROvO5r4kNfM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.174.0/23
IPv6:
2a07:c380::/29
Signature Algorithm: sha256WithRSAEncryption
33:44:0f:d1:4d:c1:12:89:0b:51:82:6d:e5:0f:79:b3:b7:1b:
95:ff:51:3b:74:a1:07:92:3d:47:b1:56:49:a6:35:42:61:2d:
96:46:81:d5:63:43:0f:7e:20:e2:66:08:1c:3c:8d:9d:28:75:
99:4b:01:86:95:cc:24:1c:68:74:60:a8:b0:a6:1b:ba:25:e6:
93:4b:10:62:a0:58:12:f8:4e:97:ea:9e:be:42:2b:f1:09:77:
43:14:94:08:96:a2:75:12:fb:93:eb:3b:98:04:68:3f:fe:7e:
c6:e2:63:af:9a:6a:b5:47:95:d6:74:90:13:e3:97:fe:5d:31:
d1:62:fb:ac:58:ab:c5:47:d3:0d:bc:50:82:7b:63:c3:ac:16:
9e:f9:82:4e:7c:26:8c:cd:44:53:9b:06:1c:df:71:7d:db:c3:
1f:2f:66:98:58:c1:04:ca:fc:5b:cc:9f:55:14:53:69:1e:70:
f1:9f:6d:9b:c4:e1:d6:5f:09:49:88:93:3f:93:24:98:f0:0b:
3a:7a:2b:03:69:07:4f:9d:c5:7d:0f:4f:6b:d4:e4:94:e4:65:
f8:2a:45:4d:bf:34:00:ea:d0:47:8c:a7:89:9e:da:c6:74:30:
c6:88:14:45:60:a3:a3:f0:ed:fc:c3:f9:b1:8a:ce:76:25:b4:
08:af:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:13:08 2024 by rpki-client on console-fra.rpki-client.org