Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/SsGjZZjKDWWE5iCZwxGPvfYze0I.roa
File: SsGjZZjKDWWE5iCZwxGPvfYze0I.roa (raw, json)
Hash identifier: naYWekvDxtD6ItUuveQ/rgYKacj6BoLd90r/SFNKJpc=
Subject key identifier: 4A:C1:A3:65:98:CA:0D:65:84:E6:20:99:C3:11:8F:BD:F6:33:7B:42
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 018CC726AC88751FA22D77EA52B17D99D975
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/SsGjZZjKDWWE5iCZwxGPvfYze0I.roa
Signing time: Mon 01 Jan 2024 22:30:49 +0000
ROA not before: Mon 01 Jan 2024 22:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44330
IP address blocks: 185.214.92.0/24 maxlen: 24
185.214.93.0/24 maxlen: 24
2a0b:9ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ac:88:75:1f:a2:2d:77:ea:52:b1:7d:99:d9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Jan 1 22:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ac1a36598ca0d6584e62099c3118fbdf6337b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:58:dc:08:95:e8:50:ef:38:c6:d8:d5:13:
f9:34:28:a0:c2:ab:61:e5:f6:42:fe:63:8f:4c:d0:
2a:c6:69:9f:5f:ca:bb:06:71:7d:ef:22:ec:a3:e8:
0c:01:02:63:bb:64:5b:ed:1b:af:39:3c:95:ff:04:
7f:7a:4a:21:2c:54:9f:90:97:c2:32:d3:98:4e:76:
a0:14:07:64:ae:1e:fa:a3:8a:91:8b:75:53:4c:43:
2a:c9:e8:6d:b4:b3:d3:ab:51:bd:8a:4b:05:ff:b0:
25:fb:49:11:91:f2:25:7d:0f:90:cc:a9:9e:5f:dd:
54:66:39:ff:89:0f:08:e2:90:21:51:79:3a:dd:01:
93:66:63:93:10:57:9c:13:03:96:d4:56:9c:7f:82:
eb:17:c2:69:39:64:ea:5f:dd:86:26:2b:b3:6a:1c:
6f:a2:a7:24:eb:c7:ce:43:84:ed:7f:62:12:d4:7b:
02:ba:d4:58:15:2f:34:d5:d5:30:30:23:94:95:e7:
12:20:ee:cc:da:ff:52:58:b6:5c:e8:b6:f8:ba:d0:
b7:9e:9b:05:84:b7:d2:1b:79:47:46:4b:4b:3d:6c:
34:80:4e:08:0a:4d:f0:35:43:4a:98:3d:df:16:53:
18:66:e4:39:10:80:31:5b:a7:c5:49:81:01:56:f2:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:A3:65:98:CA:0D:65:84:E6:20:99:C3:11:8F:BD:F6:33:7B:42
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/SsGjZZjKDWWE5iCZwxGPvfYze0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.92.0/23
IPv6:
2a0b:9ec0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:60:fb:a9:c0:96:ca:16:e4:58:dd:cd:b4:9c:0b:26:12:41:
1b:7e:3c:68:bc:80:f1:da:a8:23:0f:8c:2f:6c:12:e3:7c:db:
ec:a0:23:36:da:ea:49:3e:8d:aa:95:1d:12:12:d1:5d:3b:58:
cc:12:8b:37:0b:1f:bc:13:0d:d9:52:56:03:6d:21:10:a9:e2:
49:f3:e2:42:6d:ea:da:41:83:ce:24:2d:cd:15:b6:ce:8e:25:
13:f6:79:63:61:99:31:14:a5:0b:d0:84:6f:75:d2:33:7f:05:
bc:b7:80:e6:59:15:61:93:78:e9:03:19:3a:91:f1:b7:88:84:
33:6f:05:2f:d6:7b:6e:b7:e2:0f:4e:c1:25:95:83:03:1f:ff:
be:e8:1f:90:4a:dd:d6:94:df:db:14:9c:98:35:a1:48:0a:1e:
98:8b:e2:13:6d:76:7a:6e:79:0d:b4:b8:88:12:b1:ac:56:ae:
a3:f7:52:cc:29:1b:f3:28:dd:ee:64:4c:48:4a:d6:1f:db:76:
48:60:0c:b9:e9:74:6f:88:18:45:aa:09:f5:78:84:8d:37:73:
20:17:ea:30:24:a5:2f:68:11:ce:c4:a4:42:36:c0:cb:68:c9:
30:53:bb:cd:18:fe:32:ca:32:b0:aa:65:27:2e:ba:9e:c9:57:
f5:72:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:19:35 2024 by rpki-client on console-ams.rpki-client.org