Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dZEStgzfbiMQEeXZVf02POx1HqI.roa
File: dZEStgzfbiMQEeXZVf02POx1HqI.roa (raw, json)
Hash identifier: Pd/nOKPJeETbcKvNVg1KmppA1Nbt6TJqWH9KbLZGOfk=
Subject key identifier: 75:91:12:B6:0C:DF:6E:23:10:11:E5:D9:55:FD:36:3C:EC:75:1E:A2
Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial: 018CC9BB2BD9E359867D571A8F14212F9A26
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dZEStgzfbiMQEeXZVf02POx1HqI.roa
Signing time: Tue 02 Jan 2024 10:32:15 +0000
ROA not before: Tue 02 Jan 2024 10:32:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48635
IP address blocks: 185.69.232.0/22 maxlen: 22
185.84.72.0/22 maxlen: 22
185.105.204.0/22 maxlen: 22
185.105.216.0/22 maxlen: 22
2a05:a280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 20:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:2b:d9:e3:59:86:7d:57:1a:8f:14:21:2f:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Validity
Not Before: Jan 2 10:32:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=759112b60cdf6e231011e5d955fd363cec751ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:38:66:45:e8:02:df:01:02:2a:3f:48:cd:
f8:ba:74:fd:3a:22:ce:94:97:a2:31:9a:a7:ee:c9:
3a:bb:9c:85:f9:51:0a:77:c7:ff:ed:12:1d:18:f4:
74:22:8b:45:75:ed:92:24:85:e0:51:78:34:db:7b:
af:8a:67:dd:1d:af:63:af:1c:74:66:6c:17:53:17:
3e:9c:42:7b:d6:71:1a:f9:4b:9f:dd:8b:16:5a:ab:
6b:d9:4e:fc:85:3d:3f:5f:15:dc:6e:fc:48:10:66:
f5:77:9f:6a:21:8d:11:ff:e4:33:40:ff:7e:22:69:
f7:f8:3f:7b:73:d7:86:c7:19:4d:37:e3:2f:28:d3:
6c:3f:3c:e2:e0:6a:f4:bd:0d:c5:bb:cb:23:16:b0:
69:da:2c:5d:c5:0a:8e:d0:3d:f8:83:6b:77:3b:f1:
f2:61:74:5b:33:3c:37:b2:50:af:ab:86:95:43:47:
1c:77:3e:b9:de:4c:dd:eb:44:78:80:fc:c4:73:4b:
11:ef:bd:2d:01:93:47:b3:98:29:46:d3:d9:c8:2d:
4e:e7:cd:64:43:f9:ce:f1:b7:e6:a8:37:38:ba:a2:
b6:38:f9:eb:91:03:d5:4a:d2:2e:11:2f:c5:02:98:
da:13:9d:2b:0a:5e:e2:43:14:19:26:c9:eb:66:82:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:12:B6:0C:DF:6E:23:10:11:E5:D9:55:FD:36:3C:EC:75:1E:A2
X509v3 Authority Key Identifier:
keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/dZEStgzfbiMQEeXZVf02POx1HqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.232.0/22
185.84.72.0/22
185.105.204.0/22
185.105.216.0/22
IPv6:
2a05:a280::/29
Signature Algorithm: sha256WithRSAEncryption
40:0c:40:ea:15:9d:da:4a:08:02:3e:91:46:f0:ed:c8:b4:9e:
b3:c8:a2:3b:57:de:f7:39:79:75:02:e0:00:0d:34:91:9d:37:
d5:18:e6:0a:f0:71:6c:28:af:df:d0:a9:30:71:53:4b:ae:11:
b0:95:eb:a2:bb:43:18:02:7b:aa:f7:a4:5f:27:b8:58:bd:34:
31:39:63:8e:54:fe:2d:a7:84:09:de:75:22:f1:47:02:d1:33:
03:92:6c:a7:b4:ee:6b:10:ef:1f:f6:d0:fb:29:68:5a:ca:9a:
45:e4:9b:54:62:c1:86:64:52:3d:94:54:e4:ca:a4:8f:7e:42:
a0:e6:f6:7d:4a:f8:44:99:91:41:b8:c5:ee:f3:fb:13:17:e8:
23:d7:e9:57:4b:e1:f4:a6:a0:a5:36:66:28:6f:a4:85:72:4c:
88:dc:ab:14:fb:32:0b:81:eb:88:62:1a:ce:8a:15:7d:9f:8d:
3a:00:cb:c9:ef:98:5e:f7:1c:a8:a3:9e:90:fd:16:f9:f5:48:
4f:d5:97:4d:55:dc:8c:85:01:8d:08:72:2f:69:9e:55:b1:85:
c1:67:3d:40:bf:13:d6:ca:23:ba:15:43:34:e7:8a:a4:86:a8:
73:9f:ef:3a:ab:07:2b:03:8d:3f:e0:80:53:ce:11:82:f9:16:
33:1d:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:52:18 2024 by rpki-client on console-fra.rpki-client.org