Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/ZjUA35qp5_Y57yZwkicvVNFa4AA.roa
File: ZjUA35qp5_Y57yZwkicvVNFa4AA.roa (raw, json)
Hash identifier: aeT/KNQNUKum+ssiY52If0uLWQgVaQzA6CXaXAKsvrQ=
Subject key identifier: 66:35:00:DF:9A:A9:E7:F6:39:EF:26:70:92:27:2F:54:D1:5A:E0:00
Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Certificate serial: 018CCA29DFF318A90C827A037774B4FD83EA
Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/ZjUA35qp5_Y57yZwkicvVNFa4AA.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8752
IP address blocks: 95.182.32.0/19 maxlen: 19
185.35.168.0/22 maxlen: 22
46.38.96.0/19 maxlen: 19
212.46.0.0/19 maxlen: 19
2a03:3200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:df:f3:18:a9:0c:82:7a:03:77:74:b4:fd:83:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=663500df9aa9e7f639ef267092272f54d15ae000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:4d:47:d7:f5:3e:c6:08:8e:40:cc:0e:a9:
03:05:b1:3f:90:49:48:26:de:7a:11:02:5f:47:e7:
99:7a:b0:85:86:d1:18:ba:5d:2f:4f:1b:76:f6:98:
27:0c:dd:0b:a7:2b:9c:01:21:c5:df:34:76:7b:bd:
9b:28:c4:ef:bb:61:7d:52:ff:d5:06:0e:5e:e4:1f:
be:29:dd:e4:b2:77:60:75:a0:89:aa:5b:27:67:37:
33:0b:dc:0d:be:8c:06:34:bc:08:62:e0:56:f7:d3:
d5:68:e0:b1:a5:82:81:82:16:4d:10:c2:b7:7a:fb:
08:7a:80:a7:a7:d8:26:61:03:13:be:b4:3b:59:0c:
0f:2d:75:d7:f0:c3:0f:b5:5d:17:5a:4c:34:25:7f:
39:e3:1e:af:44:59:52:ca:f3:64:a5:22:80:fc:b9:
59:29:cf:71:8c:89:f2:f3:2a:f7:48:f6:8b:3f:d1:
ad:35:3e:e5:20:14:0b:b8:c3:8d:e1:49:cb:43:20:
e4:e1:59:64:03:d0:57:43:70:3f:6e:7d:e6:4e:78:
50:3d:41:ee:cc:2e:0d:83:0e:91:76:2d:07:6b:a0:
88:99:c3:29:cd:72:e7:b2:6d:51:a1:fa:01:9e:75:
b1:b9:f6:70:96:da:5d:b4:a4:95:63:7e:92:2f:c1:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:00:DF:9A:A9:E7:F6:39:EF:26:70:92:27:2F:54:D1:5A:E0:00
X509v3 Authority Key Identifier:
keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/ZjUA35qp5_Y57yZwkicvVNFa4AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.96.0/19
95.182.32.0/19
185.35.168.0/22
212.46.0.0/19
IPv6:
2a03:3200::/32
Signature Algorithm: sha256WithRSAEncryption
2c:0d:93:e3:2c:4d:ab:87:d0:40:1e:be:29:30:de:27:59:3e:
01:6e:51:1e:e8:b5:63:65:94:2c:3f:98:55:c1:2a:45:78:10:
27:4d:2c:1f:e5:62:ab:f9:77:24:a6:eb:75:b4:77:12:1d:77:
c8:34:9e:8e:60:fd:ec:f7:0b:2e:f0:81:76:c6:71:47:ce:f9:
4f:b5:b6:b2:d3:f7:12:6d:da:be:76:d6:c6:54:36:40:7d:75:
a0:cb:16:86:ba:4b:48:08:7b:3f:2e:af:12:f3:7b:db:61:c4:
e8:3d:07:f2:f4:2b:ee:6e:4b:08:6b:f5:31:b6:1c:6a:44:ab:
5e:68:74:56:df:08:37:33:a4:1e:6e:dc:07:5f:fd:96:89:b3:
2f:b2:36:5f:71:23:71:19:94:c7:f1:0b:98:57:57:16:e6:43:
19:a0:49:e5:9e:63:87:46:3a:0b:0e:8d:0a:41:2c:fe:4c:65:
9e:dd:e0:4d:43:0f:8c:77:0b:97:d0:e2:1a:6a:36:05:2e:c4:
85:ed:1c:d7:c6:ec:b4:9a:8d:83:a8:75:4c:47:29:4c:53:a1:
f2:f2:8d:bb:ec:fc:3e:19:f1:15:76:7e:e7:32:93:c8:dc:69:
9d:cb:65:a8:77:43:99:5b:b8:7f:60:06:9b:e8:1b:a7:35:d9:
77:9e:5e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:59 2024 by rpki-client on console-fra.rpki-client.org