Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/zPPIG3kIcFDfaGdaujUdqYlQP9A.roa
File: zPPIG3kIcFDfaGdaujUdqYlQP9A.roa (raw, json)
Hash identifier: ypsf+EMkUHwJwGmNPIvsaygz4+ir1EUK7I+FwimD2c0=
Subject key identifier: CC:F3:C8:1B:79:08:70:50:DF:68:67:5A:BA:35:1D:A9:89:50:3F:D0
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 018CC26D2F015ACA6B8DD4F42D3DB993CD4C
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/zPPIG3kIcFDfaGdaujUdqYlQP9A.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20676
IP address blocks: 185.39.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2f:01:5a:ca:6b:8d:d4:f4:2d:3d:b9:93:cd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf3c81b79087050df68675aba351da989503fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b7:24:fe:87:10:15:76:7b:89:f1:9a:5b:01:
7a:1a:f1:90:74:16:42:ca:8f:38:0e:0c:b6:eb:de:
a3:9e:75:58:70:62:18:92:ac:27:1a:c3:36:6a:41:
d4:13:14:8a:ac:fa:0e:55:5a:c3:26:fc:5a:13:44:
44:1f:8f:06:cd:db:44:02:13:d9:52:ac:b0:3f:30:
b8:62:ee:55:a1:4e:1b:e8:2f:9c:3e:38:f9:cd:68:
20:0d:2b:b9:6b:08:d8:ac:5d:6f:d9:95:c3:e5:75:
fc:e3:ca:73:d6:57:01:65:e8:40:78:f3:fd:cb:52:
2b:5a:ce:79:30:5c:8e:c1:56:72:c4:11:e8:9e:e8:
e1:60:ec:5c:12:f8:3b:05:9a:b3:87:cc:94:a2:71:
7d:9f:02:9a:9b:20:1f:99:fa:1f:62:d5:dd:74:54:
fc:cf:45:b1:c6:de:e4:92:c2:70:52:4d:06:ab:7a:
0a:b3:73:ab:a8:2f:20:d7:af:ae:0d:b2:67:44:22:
ef:cf:0b:bc:54:c6:7d:4b:08:4f:e3:20:1f:6b:5f:
e4:29:9a:36:55:fc:24:08:62:09:2f:69:37:8f:0a:
d4:d8:76:db:4f:8d:d7:b9:fa:24:20:5b:47:71:f0:
2c:4f:00:93:80:94:26:22:0f:80:a0:fb:6c:27:af:
5f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F3:C8:1B:79:08:70:50:DF:68:67:5A:BA:35:1D:A9:89:50:3F:D0
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/zPPIG3kIcFDfaGdaujUdqYlQP9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:01:6b:ad:fb:09:63:e9:2b:25:98:e8:98:ac:45:86:43:ba:
6f:30:7d:3c:29:37:14:6a:56:00:0c:02:d4:05:08:0f:dc:e6:
12:81:b7:65:bb:59:23:94:27:52:55:d4:39:c8:1e:55:f6:38:
19:76:98:30:55:68:db:b4:0c:71:c3:7a:14:01:57:a8:ed:ad:
e6:f7:51:59:5b:65:36:f6:76:37:7e:28:49:a3:c7:75:86:43:
0c:88:81:3e:db:76:a4:98:26:e8:87:4d:c2:83:e4:f6:76:3e:
fa:c4:7a:81:aa:f1:73:7e:36:b2:28:80:d0:51:32:86:4b:ad:
3b:1b:fb:2d:0e:03:bd:25:06:57:97:8d:c1:4b:a9:b1:1f:a0:
a5:c0:ca:9c:32:f8:c2:be:4b:9a:6d:04:e5:9a:d4:d1:bd:1e:
bb:d1:da:2e:e4:4f:d7:60:b3:9d:e0:b7:3e:2d:10:78:cd:0e:
b7:1e:48:e0:01:96:e4:c5:3e:b4:36:65:2e:1f:aa:cf:8b:b1:
f3:f5:1c:fa:c0:7a:15:89:fd:d0:f4:b6:aa:25:e3:3c:47:d6:
ec:da:83:05:05:89:9d:10:c3:2c:6b:77:50:0a:02:22:be:19:
be:33:57:be:ae:59:b1:7b:8a:7a:b4:cb:f3:61:48:a9:5a:cd:
6c:2b:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:11:17 2024 by rpki-client on console-fra.rpki-client.org