Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/zPDGMyFFc4Q4QnHD-8XQtoaFO04.roa
File: zPDGMyFFc4Q4QnHD-8XQtoaFO04.roa (raw, json)
Hash identifier: QErJ7aIvl2Dkv6+G9a/ryeOFVM7G3RejK1u8eEBssZo=
Subject key identifier: CC:F0:C6:33:21:45:73:84:38:42:71:C3:FB:C5:D0:B6:86:85:3B:4E
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 018CC26D064DB8A3CE70DBEAC56F16617A43
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/zPDGMyFFc4Q4QnHD-8XQtoaFO04.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204773
IP address blocks: 185.66.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:06:4d:b8:a3:ce:70:db:ea:c5:6f:16:61:7a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccf0c63321457384384271c3fbc5d0b686853b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:46:35:f1:b0:d2:e8:04:d9:5a:76:35:63:
ac:2b:42:92:bc:4d:60:89:6e:d8:bd:93:eb:5d:1a:
f3:e0:f4:00:be:c4:e9:64:47:8e:dc:05:7f:24:a7:
bf:36:8f:4a:c5:f6:41:e3:97:03:64:05:3f:83:90:
8e:5d:d3:cb:4e:66:08:f4:16:62:b5:8c:10:8c:3a:
c0:41:56:4b:7c:33:2c:73:8b:f9:61:dc:af:a6:20:
4b:f2:d5:1b:fa:ab:fc:bb:fa:3c:08:47:3c:a9:4d:
03:0d:ea:37:cf:df:c1:23:ad:af:ea:1d:59:d7:b0:
dc:8d:4a:ef:fe:d3:ce:04:e1:e6:96:e1:f3:bb:2e:
4c:7a:5e:41:35:41:26:f1:e9:1a:fd:30:0d:25:fd:
ca:81:fe:af:8e:19:e6:6c:7c:d6:2d:ae:e4:e2:e8:
22:10:52:f8:d2:05:05:53:d6:80:1c:2e:e0:2d:e9:
73:98:70:32:4f:7a:6d:55:4f:f3:62:85:66:13:ef:
28:c8:55:dd:91:fe:12:9a:aa:1d:83:6f:3d:e6:4d:
44:ba:99:e4:61:9e:56:9a:aa:ca:50:d7:e3:30:db:
2d:dd:8c:ef:cb:91:77:c7:d2:0f:67:80:78:fc:f4:
69:8e:90:97:41:58:c4:14:64:0e:bc:e6:16:b9:8c:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:C6:33:21:45:73:84:38:42:71:C3:FB:C5:D0:B6:86:85:3B:4E
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/zPDGMyFFc4Q4QnHD-8XQtoaFO04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:f5:0a:4f:31:71:9a:4e:53:06:1b:32:f6:55:bb:73:f2:e7:
93:ba:93:d8:a2:b5:2b:df:bb:18:95:1a:09:6f:11:81:66:b8:
ed:33:11:75:90:67:89:d1:cd:b6:d7:34:02:fd:e1:28:8b:a3:
73:11:0a:ba:9b:8e:a2:34:aa:ea:13:26:a8:43:ab:98:47:ba:
3a:2d:77:7c:66:f1:f4:83:8c:bd:61:6d:42:c1:4e:72:22:64:
2a:04:cb:09:31:7e:87:a1:86:e9:73:79:a0:75:20:c2:87:48:
14:d2:e6:ab:a3:ae:b5:07:3d:3c:41:90:ae:8a:99:ea:2f:87:
ee:ee:2f:bf:33:ca:b4:c0:8b:2e:e0:45:54:45:b6:f5:e1:21:
3a:14:ed:58:63:d9:3e:ff:a9:80:11:7a:c7:95:d9:7c:bd:61:
b0:c2:9b:bf:8c:34:c2:70:ab:e9:04:e1:3a:6f:af:f5:63:00:
ca:13:92:1b:35:67:e5:4a:fb:e7:e4:4a:db:df:22:bc:11:30:
8a:aa:a7:04:1f:74:08:28:b6:f7:fd:14:f6:d6:85:7b:17:36:
7c:7b:b5:62:1b:b6:7b:62:95:fa:b6:5f:c5:f0:ae:f4:61:0e:
a5:46:6a:f3:27:10:86:88:cc:6a:b1:fb:8f:b8:17:1c:5b:13:
f3:cc:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 21:48:53 2024 by rpki-client on console-ams.rpki-client.org