Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/zhlJm_scD_0hjwbX10VvY2fOzlg.roa
File: zhlJm_scD_0hjwbX10VvY2fOzlg.roa (raw, json)
Hash identifier: jViCG08LP38mcyfK33HHSQt3ZWGzanK/5Aj7UGfCCkI=
Subject key identifier: CE:19:49:9B:FB:1C:0F:FD:21:8F:06:D7:D7:45:6F:63:67:CE:CE:58
Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Certificate serial: 018CC500F278D14708C58A8EC6D877328FE9
Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/zhlJm_scD_0hjwbX10VvY2fOzlg.roa
Signing time: Mon 01 Jan 2024 12:30:22 +0000
ROA not before: Mon 01 Jan 2024 12:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210028
IP address blocks: 194.12.56.0/24 maxlen: 24
194.12.57.0/24 maxlen: 24
194.12.58.0/24 maxlen: 24
194.12.59.0/24 maxlen: 24
194.12.60.0/24 maxlen: 24
185.89.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f2:78:d1:47:08:c5:8a:8e:c6:d8:77:32:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3
Validity
Not Before: Jan 1 12:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce19499bfb1c0ffd218f06d7d7456f6367cece58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:b1:f9:36:18:a5:47:be:a4:56:57:50:ac:
83:48:ca:ff:b3:ef:1f:a5:a1:89:90:c5:04:1d:d2:
14:da:97:30:66:d3:1f:85:83:d9:d1:62:fd:ba:f4:
2b:1a:5f:8d:02:67:1d:98:4d:ce:38:3d:90:13:09:
71:45:5c:4c:fd:07:43:3f:d4:08:5e:2b:e3:d0:6e:
ed:89:86:ed:6d:15:72:ea:3c:ed:d6:74:4c:e6:d6:
97:f1:4a:0b:f1:5a:dd:98:84:8f:2e:58:b1:3e:25:
03:5e:5d:02:8a:04:a9:32:34:eb:8a:3c:cc:9b:21:
73:8a:ec:47:6d:8c:7c:ef:e0:27:c8:64:af:c9:31:
85:88:18:b7:7c:3d:47:9b:ae:57:58:e6:c7:94:dc:
53:6f:95:1e:2b:8c:3c:7f:51:2b:27:e0:5e:ed:04:
e6:73:ec:0c:ac:5d:6b:8b:c7:65:84:aa:09:82:ef:
0a:9e:f5:08:a1:91:6f:8b:7a:66:11:3b:bf:cf:6b:
e1:8b:f8:8d:d5:01:6e:fb:12:a4:03:68:4d:92:00:
19:76:03:bc:e9:68:8a:96:09:c3:13:fd:ec:76:09:
83:4e:40:58:35:69:b4:e1:d7:b3:ed:9b:6d:50:cf:
0b:46:80:65:0f:e4:06:83:3d:0c:79:ec:35:2b:0b:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:19:49:9B:FB:1C:0F:FD:21:8F:06:D7:D7:45:6F:63:67:CE:CE:58
X509v3 Authority Key Identifier:
keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/zhlJm_scD_0hjwbX10VvY2fOzlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.99.0/24
194.12.56.0-194.12.60.255
Signature Algorithm: sha256WithRSAEncryption
b0:22:1c:3d:fa:2f:c4:94:2a:1e:f0:1b:1d:be:bd:59:30:7a:
35:6f:9c:80:7b:80:a4:42:25:b2:f1:ac:a8:2c:e7:99:70:e7:
4d:77:93:f9:64:b0:05:37:9b:17:17:fa:1b:cb:41:a8:e6:df:
f2:05:cf:16:95:d6:ce:bb:bc:ab:aa:b9:f9:fc:06:1e:f1:0f:
3d:7e:c6:71:f1:44:6b:de:20:41:6a:70:f3:11:f8:c4:13:11:
a4:8f:10:60:68:fd:24:8e:1c:94:96:f3:37:db:71:2e:fe:eb:
ee:33:2b:b6:d6:fe:a9:51:2e:11:9e:c3:3e:44:40:a6:5f:ec:
29:c4:87:5c:17:44:fa:56:d2:f9:6b:8f:4f:aa:0e:d5:80:35:
61:36:1b:82:6c:49:6d:89:31:a4:c9:da:13:f7:57:1f:86:95:
f1:2c:56:25:4d:bd:dd:e2:61:36:b2:43:8f:46:b2:82:fd:6a:
f3:bd:b6:45:d9:ab:75:34:ae:fa:78:a3:0c:35:1a:3c:c9:fc:
20:f5:3a:97:9b:55:b8:12:a9:72:59:f6:bc:63:78:ce:6d:29:
8f:1d:cd:60:c3:97:6f:e7:51:d6:bc:ee:b4:51:0c:12:48:62:
32:cc:45:e3:3c:f3:da:3e:a5:80:34:9f:de:97:71:2d:05:d5:
45:8a:d6:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 22 07:11:01 2024 by rpki-client on console-fra.rpki-client.org