Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/3a0ZIiEmKdFGHFiZvM0gEM0X1LY.roa
File: 3a0ZIiEmKdFGHFiZvM0gEM0X1LY.roa (raw, json)
Hash identifier: jv235UZxdE/5byfef5FnuCc5ND7yTFYp4qkogAzihOw=
Subject key identifier: DD:AD:19:22:21:26:29:D1:46:1C:58:99:BC:CD:20:10:CD:17:D4:B6
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 018CC86F13A28552160F899B6B40AF34D7E7
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/3a0ZIiEmKdFGHFiZvM0gEM0X1LY.roa
Signing time: Tue 02 Jan 2024 04:29:31 +0000
ROA not before: Tue 02 Jan 2024 04:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212017
IP address blocks: 185.159.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:13:a2:85:52:16:0f:89:9b:6b:40:af:34:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 2 04:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddad1922212629d1461c5899bccd2010cd17d4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:1d:12:2b:7c:d9:86:89:25:4c:21:7a:4f:
b1:38:7a:2d:fb:a4:85:e6:bd:dd:fc:cd:13:86:c7:
af:b0:58:a4:3d:99:5a:65:04:28:c0:b6:0c:25:70:
82:52:0a:22:4e:42:33:dd:3d:4d:59:84:83:ce:64:
08:3e:21:76:81:99:e7:76:90:c7:73:43:77:42:17:
1e:a0:15:3f:54:b4:d0:53:79:f4:b3:51:99:c8:a2:
d9:f3:1b:7e:25:a1:e5:e1:50:a3:4e:e6:17:7d:22:
1c:f9:cc:47:be:a8:22:12:5a:da:cb:9e:c0:30:be:
2d:78:a0:db:de:92:96:a3:be:3e:c2:d4:58:b7:7e:
3a:78:0d:94:cc:aa:4f:38:b7:d6:19:86:a8:97:0a:
d9:9b:eb:10:f2:f8:cd:47:e6:bc:78:f5:6b:c2:08:
ad:e2:84:cf:db:4c:a9:2f:6f:5e:21:df:44:7e:5a:
53:99:ba:17:a2:2b:1f:c9:78:04:b3:20:e2:df:f1:
8e:0e:1f:33:13:a6:44:5a:46:00:85:d3:39:91:cc:
7b:b7:ca:78:66:d1:83:cf:2b:5e:38:09:53:4b:2c:
33:ac:7e:3e:79:28:6b:fe:0e:3f:9c:76:b3:5e:37:
92:5d:7c:df:c9:7f:64:dc:17:25:09:80:30:37:d8:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:19:22:21:26:29:D1:46:1C:58:99:BC:CD:20:10:CD:17:D4:B6
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/3a0ZIiEmKdFGHFiZvM0gEM0X1LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.40.0/22
Signature Algorithm: sha256WithRSAEncryption
81:8b:59:01:72:ef:9f:43:04:17:ed:04:38:48:5f:ff:e5:9f:
43:00:e1:31:6a:a8:a5:c7:36:cb:a8:a1:c3:73:5b:52:4e:74:
13:ad:1e:74:95:5e:9c:5b:5d:ed:32:17:88:8f:89:8c:3a:d9:
c8:bb:a7:72:e0:e7:03:33:3d:22:a1:35:65:2e:26:34:42:f0:
50:84:c0:d6:e2:82:f6:89:fb:61:93:04:b6:9c:91:ee:6f:40:
8b:47:f8:b7:71:1f:7a:96:59:99:9e:d5:f8:56:d6:35:8a:a1:
c9:7c:9f:ee:82:e2:37:6a:d0:26:ed:c7:4e:6a:3f:99:32:f5:
4e:d7:f5:f2:04:8f:20:c4:87:e1:ec:60:ac:19:77:62:8b:19:
4d:82:14:d6:ce:18:b9:8a:0a:41:b3:2c:3e:ed:c0:ab:0f:07:
ce:74:4f:a1:e4:49:95:9f:6f:ba:ec:0a:ac:d2:42:55:de:ac:
06:63:a2:c8:f6:03:7b:7d:e1:6d:dc:98:d4:c1:39:c2:e8:25:
44:c5:2a:d5:5f:34:53:c5:0f:b4:c4:69:5b:57:cd:74:82:3e:
ba:7e:a1:8d:93:0f:02:c2:d2:29:a0:89:51:c3:4a:50:3f:fa:
dd:60:2c:15:00:16:19:a4:f0:51:f8:5b:97:18:e3:83:6a:ab:
d0:9f:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:26 2024 by rpki-client on console-fra.rpki-client.org