Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ZfSWRVaYuKMAv3eWMQk70empqMg.roa
File: ZfSWRVaYuKMAv3eWMQk70empqMg.roa (raw, json)
Hash identifier: HMPMcvQGrvZ6iw8MSsQRZk57eabvBAZomLk8GSIikuM=
Subject key identifier: 65:F4:96:45:56:98:B8:A3:00:BF:77:96:31:09:3B:D1:E9:A9:A8:C8
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 018CC500C3BD8C5EEA99730E6E3308677852
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ZfSWRVaYuKMAv3eWMQk70empqMg.roa
Signing time: Mon 01 Jan 2024 12:30:10 +0000
ROA not before: Mon 01 Jan 2024 12:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c3:bd:8c:5e:ea:99:73:0e:6e:33:08:67:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f496455698b8a300bf779631093bd1e9a9a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:59:43:99:04:d2:36:cd:aa:7b:6b:b8:88:
86:47:9b:22:10:6c:17:62:ec:43:33:20:fd:d0:e8:
b1:88:3b:1c:d2:02:1f:b3:8e:00:4b:76:d6:35:d7:
8d:ab:92:d4:c4:09:5f:b2:a3:bd:68:5a:6e:b9:e4:
23:5f:4d:17:db:30:b3:ab:c3:3f:fe:db:df:67:9f:
88:0a:66:be:1f:05:df:5f:b0:d9:27:35:f8:06:13:
d7:72:f4:af:6d:b2:7f:66:78:c6:cb:61:a8:a1:4b:
44:f1:f4:94:0f:8b:9a:69:e9:09:0e:1d:57:38:c4:
49:71:e9:70:4b:3d:f2:95:f8:7b:ba:76:fa:a6:55:
2d:4e:cf:46:39:d1:15:e7:0f:e1:a4:bd:48:a8:ce:
15:06:dc:bc:03:84:ca:78:8c:67:0e:4e:8a:e4:90:
7a:17:f5:18:75:39:9a:56:93:ba:18:47:82:2c:f4:
79:ed:b6:95:f7:6b:60:5a:34:c0:34:9a:1c:df:c7:
5a:48:57:58:5f:14:9c:f3:18:d0:ee:8a:5d:69:66:
96:3c:1e:0e:e6:a6:fd:7b:20:19:22:b6:f0:5a:16:
92:e5:fe:2e:4c:77:2d:f1:bb:56:2c:cf:f4:54:40:
a0:f2:ea:92:c9:6a:73:c9:8c:6b:ff:94:32:0c:9d:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:96:45:56:98:B8:A3:00:BF:77:96:31:09:3B:D1:E9:A9:A8:C8
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/ZfSWRVaYuKMAv3eWMQk70empqMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:61:26:1c:25:74:81:d5:df:85:38:10:c8:a5:af:b1:e8:01:
83:9b:82:fc:18:a0:70:e7:5b:d8:9d:c2:1b:e2:79:ce:4a:f8:
e5:18:a9:05:2f:61:99:6d:1b:33:78:02:67:03:ee:d0:5c:10:
0b:b6:08:d9:d9:ec:e7:4b:25:8d:2b:0d:58:c0:8d:01:91:f0:
eb:ba:cd:8f:d1:b6:42:63:63:45:94:5f:d1:46:ea:3f:62:09:
34:c0:a5:3a:59:12:d0:90:7d:82:15:60:df:ae:6a:85:34:78:
47:9f:31:3e:f3:c9:f8:24:f4:7d:2d:c8:35:b3:f0:40:6e:61:
66:63:a7:d1:c0:64:7d:50:10:3c:0c:df:4a:f1:3c:d4:e3:69:
57:24:7c:8f:40:4a:d2:50:7d:c5:5a:e4:18:b0:e5:de:61:9d:
ab:d7:a3:1f:73:c7:51:83:e4:e5:6d:bc:67:1e:7a:81:42:dc:
67:19:83:72:67:df:02:65:26:2c:43:4b:d2:76:c0:04:a5:44:
52:c4:25:62:ba:77:73:44:52:28:eb:fe:f6:7e:c4:4c:27:a4:
48:87:09:93:ee:56:9c:76:fb:14:23:d6:c0:7f:51:f6:4e:b5:
e2:7d:47:12:65:9c:8f:98:45:8d:46:d4:c0:50:d1:db:60:be:
72:a4:a0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:16:26 2024 by rpki-client on console-fra.rpki-client.org