Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/ZRx7ebFWgdwSAtYEuVAdhl4WUUQ.roa
File: ZRx7ebFWgdwSAtYEuVAdhl4WUUQ.roa (raw, json)
Hash identifier: CBoykLvuQ+MIBUfD88RPiIONxLSJ58GAakJec33sjWw=
Subject key identifier: 65:1C:7B:79:B1:56:81:DC:12:02:D6:04:B9:50:1D:86:5E:16:51:44
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 018CC94CB78594D72A4B02DCDD43F4581A66
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/ZRx7ebFWgdwSAtYEuVAdhl4WUUQ.roa
Signing time: Tue 02 Jan 2024 08:31:37 +0000
ROA not before: Tue 02 Jan 2024 08:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24634
IP address blocks: 194.126.136.0/21 maxlen: 24
193.188.135.0/24 maxlen: 24
193.188.136.0/24 maxlen: 24
185.7.128.0/22 maxlen: 24
194.126.0.0/19 maxlen: 24
212.36.192.0/19 maxlen: 24
2a00:1590::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:b7:85:94:d7:2a:4b:02:dc:dd:43:f4:58:1a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 2 08:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=651c7b79b15681dc1202d604b9501d865e165144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:5e:d6:c4:f5:16:2d:7d:7c:ea:d5:d9:69:
53:7e:8d:31:ea:c0:f1:50:01:9d:d8:06:1f:44:53:
23:46:83:fa:66:e9:a9:ba:0c:c6:96:a8:9e:31:71:
55:b2:da:28:fe:66:66:b2:37:ec:cf:45:42:63:e5:
d4:5d:fe:e4:ed:fd:10:92:80:6f:35:ba:19:05:91:
a6:5b:88:ab:22:21:6b:b0:92:a4:ac:95:7b:9c:3f:
cb:d6:a3:9f:31:d8:67:81:20:c4:cc:c5:97:aa:3b:
a8:a0:52:4d:ea:77:f4:b0:a6:76:cd:1f:dc:ed:73:
50:9e:2d:a3:b3:c7:a8:40:aa:f6:80:68:34:13:53:
a9:df:f2:0e:04:47:80:9d:c5:e2:8f:9a:23:6c:d1:
63:56:8e:12:8a:79:4c:3f:a2:0a:f4:74:38:7a:28:
7f:83:19:21:e1:2d:5e:0a:d2:29:4a:64:7a:16:1e:
60:d6:72:f6:38:79:04:48:f7:83:6e:51:e9:b1:8f:
ba:32:0f:5b:9e:95:5f:16:6f:53:8f:64:60:3f:40:
cb:63:93:e2:40:22:99:02:bb:fd:a5:be:09:f3:0e:
d5:b9:43:88:4d:47:c4:74:46:d6:fc:5e:8a:e5:82:
6f:fb:c1:5e:59:a5:47:e9:20:3b:86:bd:cc:9f:29:
c9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:7B:79:B1:56:81:DC:12:02:D6:04:B9:50:1D:86:5E:16:51:44
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/ZRx7ebFWgdwSAtYEuVAdhl4WUUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/22
193.188.135.0-193.188.136.255
194.126.0.0/19
194.126.136.0/21
212.36.192.0/19
IPv6:
2a00:1590::/32
Signature Algorithm: sha256WithRSAEncryption
48:70:00:b6:c9:92:fc:17:ee:5a:0a:9d:4a:11:9f:bb:75:07:
ae:7d:13:c9:98:23:60:0c:52:04:48:1d:58:7e:7d:a0:6a:c0:
51:87:5b:44:73:3d:85:95:1e:d2:2e:24:84:9b:20:16:ee:78:
96:b9:0b:f3:78:d8:0e:1d:86:09:41:09:24:45:64:cb:c2:86:
cb:07:5c:95:89:8f:73:10:88:b1:48:de:d9:54:e1:ab:f4:d3:
e3:3c:ee:6d:11:12:42:65:d9:b1:aa:4c:3d:25:6f:61:81:61:
22:ec:8b:38:38:6d:33:dd:24:e2:b0:48:a0:c8:82:91:1d:5e:
2b:a6:7e:0c:8e:d2:7d:d9:5d:29:f5:97:16:f7:aa:3f:c5:34:
26:d2:7e:2a:1c:7e:e0:5e:a5:14:3c:73:7e:4e:0f:8a:ed:74:
90:4b:28:40:75:6f:2d:f6:54:bd:15:a7:e8:c5:8e:b3:63:70:
35:45:9d:9c:13:90:5b:ae:d9:26:a7:e9:6e:26:7d:dc:b0:14:
ce:95:9a:b0:5d:e6:07:b9:29:76:ac:03:d0:c3:5f:f6:bd:b5:
0e:ec:5b:59:cf:2b:64:46:bc:0e:de:c4:d1:77:f0:c8:ab:6f:
87:e1:b8:33:f2:51:0b:3e:0e:0d:0e:2d:7b:fd:22:63:e1:a4:
a3:7e:01:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:59 2024 by rpki-client on console-fra.rpki-client.org