Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/zMsUf6rAXX6wTKjnoj68VvY71dU.roa
File: zMsUf6rAXX6wTKjnoj68VvY71dU.roa (raw, json)
Hash identifier: +dyZQp8G+rOejzRbsuMNWeONclFU9RB94YElUqND5/k=
Subject key identifier: CC:CB:14:7F:AA:C0:5D:7E:B0:4C:A8:E7:A2:3E:BC:56:F6:3B:D5:D5
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 018D5FE067D29B5F8DA57CF6024C188821DB
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/zMsUf6rAXX6wTKjnoj68VvY71dU.roa
Signing time: Wed 31 Jan 2024 14:15:58 +0000
ROA not before: Wed 31 Jan 2024 14:15:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60876
IP address blocks: 185.166.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:e0:67:d2:9b:5f:8d:a5:7c:f6:02:4c:18:88:21:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Jan 31 14:15:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccb147faac05d7eb04ca8e7a23ebc56f63bd5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:74:72:c0:5c:5a:d8:dc:aa:a0:8d:54:d6:
17:a2:50:41:44:4a:ad:c6:a0:0f:83:5c:e5:e0:77:
1f:54:26:98:1e:df:7f:fd:79:dd:ea:92:1f:7e:75:
6b:dd:3e:d1:52:0a:5a:78:40:b6:23:4e:22:33:18:
90:17:4c:ce:ac:5f:ed:27:cc:b9:5e:2a:cd:48:39:
c7:73:3c:cf:bf:44:8d:7f:06:d7:25:af:85:ae:b9:
51:4d:31:f2:80:b5:74:68:dd:8b:a7:6c:b4:9c:da:
1c:d7:3d:0b:28:e4:22:3d:f4:1a:7f:e5:56:7c:7a:
aa:f8:17:38:6a:df:5a:cf:ed:e5:d6:03:56:b2:e3:
9b:4c:36:8a:f0:2f:a7:24:04:38:28:e9:a2:b0:d2:
57:7c:b9:67:3a:47:74:0f:0c:1e:66:b6:35:70:7c:
50:ed:c7:f1:d2:7b:7b:e1:ee:85:ed:33:42:3b:59:
53:f2:cb:2f:52:72:29:9b:a5:d9:20:12:1e:6a:c0:
6d:cf:a2:05:26:74:92:67:1c:6c:dd:3f:1b:fb:f7:
ee:b1:99:99:3f:a9:f2:c4:36:3f:72:a1:af:bc:41:
99:11:27:c2:34:34:46:f9:e7:8d:fd:60:ed:97:48:
ae:98:a4:75:b6:29:05:36:ec:ae:e6:9e:85:94:3e:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:14:7F:AA:C0:5D:7E:B0:4C:A8:E7:A2:3E:BC:56:F6:3B:D5:D5
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/zMsUf6rAXX6wTKjnoj68VvY71dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.120.0/22
Signature Algorithm: sha256WithRSAEncryption
99:b6:08:c0:4a:cc:64:35:93:ef:61:15:f8:bd:86:30:c7:d8:
0f:fb:57:0b:d5:33:2f:2e:57:3f:31:fd:d3:87:13:36:c4:0f:
ed:e9:b2:24:41:0a:b1:b3:b2:9d:8a:df:ca:86:00:c4:95:36:
18:b6:d3:54:d9:7a:36:2e:0f:ee:24:f6:c2:a3:90:bc:c8:25:
01:95:86:b0:ad:bd:cd:af:bd:bd:48:6c:d9:42:56:85:2b:c3:
01:b9:2f:10:75:91:f6:67:2e:26:7a:83:95:71:4d:3b:28:b0:
92:2e:f9:2b:95:e1:f0:96:9c:9a:cf:20:d5:21:3a:00:a1:8b:
8e:5b:d2:dc:dd:b8:55:e0:d6:6d:c7:e8:91:01:53:fa:7d:32:
4c:92:5a:90:24:44:0c:67:c9:18:f2:c5:e9:fb:13:e6:e2:a3:
00:61:5b:42:a8:62:9d:f6:18:c9:94:b7:ec:de:31:66:c1:5e:
95:f3:f0:61:7c:81:32:43:76:c6:07:eb:89:6a:45:6a:3e:7b:
aa:fd:a2:5c:a1:ea:02:f3:3b:4e:ba:ae:39:1f:8e:ea:ff:6b:
c8:fc:4b:81:9a:fa:40:b3:6a:06:63:b8:fd:da:a4:d6:6a:e9:
1b:0e:fd:56:9b:e5:07:f8:a2:68:02:c9:cb:1c:56:34:5c:93:
97:47:17:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:37:16 2024 by rpki-client on console-ams.rpki-client.org