Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa
File: zziDkMaXBGRtnOb_y4T_mFNgZew.roa (raw, json)
Hash identifier: LKs1/ivZDjadSdc7464BjABkW/PVVLqZSZHy0oLnC4U=
Subject key identifier: CF:38:83:90:C6:97:04:64:6D:9C:E6:FF:CB:84:FF:98:53:60:65:EC
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5D274F2F03B4CD8E5126C6029702
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa
Signing time: Tue 02 Jan 2024 12:33:43 +0000
ROA not before: Tue 02 Jan 2024 12:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213151
IP address blocks: 185.197.135.0/24 maxlen: 24
2a06:e881:7300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5d:27:4f:2f:03:b4:cd:8e:51:26:c6:02:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf388390c69704646d9ce6ffcb84ff98536065ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:21:19:b2:de:f8:ba:93:99:71:2e:c8:7a:c9:
c4:a5:70:00:ff:08:75:e9:76:16:ed:34:eb:c3:8d:
71:3e:5b:39:43:9a:11:a3:f4:32:77:f3:5b:94:7e:
89:02:6f:c5:00:c6:b2:b8:a0:01:65:e2:b3:e1:a2:
07:12:53:44:95:9c:59:77:94:18:d7:68:bd:db:03:
af:01:48:c8:8a:72:d9:89:61:e0:99:5e:f4:59:cf:
62:84:74:30:d1:1b:c4:25:ba:c0:7f:2b:3d:02:90:
bb:38:41:08:6e:13:5d:9c:dd:dc:c4:19:e7:e2:86:
d9:66:b2:7c:cf:aa:b6:20:f6:70:0c:cb:b5:a4:e4:
37:79:ad:51:b6:24:ab:af:5f:4b:96:4e:50:ac:fa:
e9:0e:95:7d:61:45:fc:d4:4c:f1:6c:b2:e7:60:33:
21:47:df:74:60:74:22:82:f7:c0:8b:02:8b:9c:2e:
d0:9b:c8:38:bb:fe:2b:47:4d:20:a7:fb:75:f7:b9:
53:1d:cd:18:75:1a:18:05:2d:94:14:93:fe:ca:66:
d8:dd:66:4d:ae:f8:b2:6f:5b:1b:d5:ad:ac:31:9f:
5c:8b:d8:fe:ab:5d:8c:fa:b9:e1:59:63:7e:3c:b3:
9d:98:c9:bf:5b:2b:34:2b:31:d8:19:a4:cd:b3:1d:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:38:83:90:C6:97:04:64:6D:9C:E6:FF:CB:84:FF:98:53:60:65:EC
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.135.0/24
IPv6:
2a06:e881:7300::/40
Signature Algorithm: sha256WithRSAEncryption
51:e3:ae:b1:73:96:49:8e:c2:73:b4:d0:b9:92:99:10:bd:ec:
da:4a:ef:56:60:c0:6e:95:e9:8c:4a:43:43:63:6f:e6:b9:71:
37:7f:4e:f6:28:17:e5:2d:06:8f:93:fa:e2:5f:7d:80:bd:2e:
9e:5d:82:ef:98:bd:26:0b:f0:2a:ba:22:fe:cd:b0:48:a6:b3:
01:db:bc:eb:5d:af:3f:de:78:16:8a:57:c4:83:7e:ac:09:9f:
1a:eb:2c:99:7d:a8:9d:01:11:f8:93:46:96:b3:75:cc:0f:29:
fd:bd:1f:d8:e5:7a:d8:0d:b9:11:c8:cd:1c:6d:12:38:ae:2e:
92:93:f1:47:1d:97:62:14:9e:8c:24:3e:d8:82:3f:2b:a3:59:
6e:e0:c1:02:a0:5b:e5:a8:26:24:91:4a:73:df:6d:a3:6f:c2:
9a:6f:c4:ca:d3:99:00:3d:59:b6:92:10:eb:2c:02:81:23:a6:
7c:ec:fb:90:23:08:24:3b:52:b9:bb:e7:4d:90:a0:82:f1:e8:
de:20:bd:7c:5c:1b:16:33:66:92:2f:28:7c:0c:b3:02:af:6b:
ac:7e:88:f3:d4:1d:12:1f:95:94:d1:ea:a2:de:5c:06:75:71:
c1:6e:a8:32:17:7b:5d:d7:93:79:15:d4:b6:28:a9:70:8f:73:
35:c1:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:37 2024 by rpki-client on console-fra.rpki-client.org