Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/grN9nAu5ZZSKJUCl7QZmu-ZPnF8.roa
File: grN9nAu5ZZSKJUCl7QZmu-ZPnF8.roa (raw, json)
Hash identifier: MQRgRaPtZcttkFJ1g/gOOocGtIJdEbOWJeCSq4Ir70Y=
Subject key identifier: 82:B3:7D:9C:0B:B9:65:94:8A:25:40:A5:ED:06:66:BB:E6:4F:9C:5F
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018CC94E1B05DB3185C92682A6BDB2548441
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/grN9nAu5ZZSKJUCl7QZmu-ZPnF8.roa
Signing time: Tue 02 Jan 2024 08:33:08 +0000
ROA not before: Tue 02 Jan 2024 08:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199364
IP address blocks: 185.31.120.0/22 maxlen: 22
45.84.192.0/24 maxlen: 24
2a00:af60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:1b:05:db:31:85:c9:26:82:a6:bd:b2:54:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 2 08:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82b37d9c0bb965948a2540a5ed0666bbe64f9c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:03:86:9a:7b:a7:71:f8:67:e4:84:d6:73:
d4:c1:78:e9:ca:4d:b8:24:3e:73:cc:a3:f0:81:d4:
c3:d6:03:0e:ea:f7:37:ca:09:8e:12:4b:37:7e:94:
ee:96:88:c1:dd:2d:07:f3:8c:73:ec:d7:19:a3:fd:
e9:de:f7:b5:de:0d:c6:03:1d:c1:8d:1c:f9:91:df:
a9:90:76:f1:ba:cf:dc:f0:69:67:9a:af:76:62:ed:
a4:f2:36:64:d0:85:47:44:79:f6:d9:dd:cd:0f:6d:
7a:33:04:1e:bd:49:d7:df:ab:b3:9b:6f:fc:f8:4d:
cf:81:80:e3:76:1a:05:c4:c6:99:60:f1:e4:23:f1:
35:b0:e1:9c:43:eb:26:7a:e3:ce:b5:ff:bf:9f:1a:
59:20:a6:e8:ac:4e:16:fd:f6:bf:6b:1f:27:10:5a:
bf:44:71:62:53:e1:85:56:cc:da:cf:90:ed:02:67:
93:99:c1:28:10:20:ea:db:40:a4:ed:51:3d:f8:b0:
b7:4f:69:50:fc:4e:db:09:4d:c9:ab:65:69:6d:38:
98:62:64:a0:70:f4:e9:6b:4f:2b:d8:f2:1a:de:75:
5d:83:a3:dd:29:da:9a:da:34:c0:82:38:67:66:08:
fb:ee:a2:80:2f:97:3f:49:81:05:24:12:2f:b6:0c:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B3:7D:9C:0B:B9:65:94:8A:25:40:A5:ED:06:66:BB:E6:4F:9C:5F
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/grN9nAu5ZZSKJUCl7QZmu-ZPnF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0/24
185.31.120.0/22
IPv6:
2a00:af60::/32
Signature Algorithm: sha256WithRSAEncryption
a4:8c:db:3e:f8:ff:08:e8:39:7b:55:30:a0:e3:b4:c5:8d:71:
05:a1:65:17:5a:9f:04:f8:0a:c7:f5:99:d9:87:6b:9f:84:88:
5a:f7:7c:f6:74:44:a0:1e:de:e5:d8:97:31:6d:02:1d:46:48:
02:de:a0:46:7b:41:b4:73:3e:f9:5c:ea:27:9b:62:33:3d:ab:
4f:c5:79:f9:01:7d:c0:b3:7b:4a:c7:a2:e4:1d:5b:06:61:ab:
1d:87:c9:dd:9d:25:51:d6:e8:7b:72:39:89:82:a0:0d:37:3c:
79:17:f2:b7:05:82:7d:70:fc:8c:e7:ed:8d:c7:c5:04:94:d0:
1e:60:07:05:b7:fd:f5:15:0a:b6:8c:1c:b2:ac:ba:d5:cf:32:
ab:99:33:7b:59:93:71:05:00:57:39:2d:aa:cf:52:3e:98:52:
e8:e4:ec:34:16:b9:d4:05:79:2f:46:8d:75:d4:b4:8b:1c:af:
60:67:61:63:40:4d:32:bd:6e:83:3e:21:0c:95:40:17:d0:83:
da:0a:5c:28:c0:9f:95:56:4f:56:7f:bb:42:50:cc:c1:9c:db:
49:e1:6f:f4:fa:29:73:48:d0:be:a3:6d:34:08:ef:08:1f:91:
23:d4:1d:63:fe:9f:43:f9:9d:79:8e:93:97:b2:1c:ee:8f:17:
10:45:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:09:54 2024 by rpki-client on console-ams.rpki-client.org