Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ZmJY3ksZFtQKxHhFTIpy3Cgh-g4.roa
File: ZmJY3ksZFtQKxHhFTIpy3Cgh-g4.roa (raw, json)
Hash identifier: NKMgDanKcuna7zm1dVoJmp0HLDz/yy+HL2KMaUmqJl0=
Subject key identifier: 66:62:58:DE:4B:19:16:D4:0A:C4:78:45:4C:8A:72:DC:28:21:FA:0E
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 018CC42482B797D64D54A9BACFA08FF4F120
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ZmJY3ksZFtQKxHhFTIpy3Cgh-g4.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42533
IP address blocks: 185.175.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 21:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:82:b7:97:d6:4d:54:a9:ba:cf:a0:8f:f4:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666258de4b1916d40ac478454c8a72dc2821fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:c9:ae:a9:b2:dd:dd:55:5f:17:86:57:39:
e4:48:4d:cf:9a:17:0d:a5:e6:14:d8:fc:c3:fe:df:
d5:57:d9:b0:ef:27:15:87:35:33:3e:13:7a:5e:b5:
8d:20:e7:77:3c:31:cc:24:82:c3:0d:a1:7f:b1:7c:
66:9b:1b:96:0c:20:1f:c2:53:0c:de:d4:d5:10:63:
cf:3d:c7:b1:14:1e:e2:ce:25:14:ad:66:14:a7:eb:
d1:14:71:80:54:37:6c:37:23:20:15:6f:6e:5e:51:
8b:f5:cf:d3:8b:2c:f9:59:dc:a3:32:59:38:4b:ad:
0f:f1:74:f4:17:71:fa:4e:83:cf:96:20:d8:cc:c3:
b8:e5:72:1b:95:78:a2:3c:7b:6b:cd:e8:73:1e:1c:
40:a7:f0:74:69:d2:e7:b1:d0:c3:8c:05:ed:5a:e9:
27:2e:d1:67:70:bd:8e:45:e0:cd:47:54:c0:c1:d6:
90:5a:ec:94:3e:73:39:78:85:39:ee:6c:32:20:ba:
14:a3:ee:de:39:c8:e2:83:67:db:a0:8e:1b:fd:38:
9a:35:f4:24:de:d3:36:52:ad:2e:fe:2d:cd:67:2d:
3e:d8:f3:20:bb:cf:08:5c:88:de:14:f4:96:86:d1:
24:77:16:b7:de:03:7a:b6:67:d9:fc:be:e4:5d:4a:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:62:58:DE:4B:19:16:D4:0A:C4:78:45:4C:8A:72:DC:28:21:FA:0E
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/ZmJY3ksZFtQKxHhFTIpy3Cgh-g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.93.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2b:df:7f:0e:18:b8:47:57:77:1d:04:4f:a3:83:5d:7a:1c:
77:cd:d1:bc:13:b4:c2:17:d1:72:41:c9:72:cc:f1:0f:c5:52:
e4:be:46:13:e8:ee:d7:56:40:19:94:e3:b8:13:87:92:06:8f:
ed:51:b9:9f:29:a6:30:69:53:98:13:7d:49:19:a3:e6:7b:5f:
3c:96:f4:8a:df:7a:4a:2f:d3:d3:9d:87:5f:c4:f0:b9:d6:a8:
5f:ef:2d:f4:aa:e0:55:03:33:a2:e6:fa:9a:41:f0:54:71:ca:
2d:81:b1:1c:23:43:e7:67:e9:a0:81:de:1f:f7:77:3a:44:7e:
51:04:da:98:7e:fb:6e:cd:8b:6e:23:d0:4a:6b:cf:bb:90:54:
e5:c2:75:9f:d8:96:ca:c9:a9:54:63:07:f0:7d:ee:06:24:d0:
fb:d3:cc:d2:d4:3e:f9:50:17:2d:8a:96:fc:2a:51:4f:e6:73:
c6:15:d0:3a:37:b5:43:3f:90:3c:cb:27:4b:a0:cb:ae:cc:12:
28:bb:82:19:fd:82:9c:be:14:fc:43:cf:ca:d9:d7:29:f9:4f:
ae:01:75:9e:71:1e:c3:2d:e3:e7:81:b4:2b:38:95:66:c2:36:
1f:60:8b:0a:d4:33:99:51:63:b0:32:bd:e4:0c:0f:07:40:2b:
f4:9d:f6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 03:54:15 2024 by rpki-client on console-fra.rpki-client.org