Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/dzKE-3ZTmZhR6DSkdg3Cm3lOuwQ.roa
File: dzKE-3ZTmZhR6DSkdg3Cm3lOuwQ.roa (raw, json)
Hash identifier: izvr1OILE9OoBHFUr+Jj9//woDKqzaVk7Hzv1OONtHA=
Subject key identifier: 77:32:84:FB:76:53:99:98:51:E8:34:A4:76:0D:C2:9B:79:4E:BB:04
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 018CC8715D7B7BF4CC82A9A6D0E63A8AB152
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/dzKE-3ZTmZhR6DSkdg3Cm3lOuwQ.roa
Signing time: Tue 02 Jan 2024 04:32:01 +0000
ROA not before: Tue 02 Jan 2024 04:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200435
IP address blocks: 185.63.172.0/22 maxlen: 24
185.63.172.0/24 maxlen: 24
185.63.175.0/24 maxlen: 24
185.63.173.0/24 maxlen: 24
185.63.174.0/24 maxlen: 24
2a04:f600:4454::/48 maxlen: 48
2a04:f600::/29 maxlen: 48
2a04:f600:4455::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 20:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5d:7b:7b:f4:cc:82:a9:a6:d0:e6:3a:8a:b1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Jan 2 04:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773284fb7653999851e834a4760dc29b794ebb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:3d:9d:26:08:3d:27:03:d6:93:11:6f:71:
5e:4d:ea:36:5d:ed:cc:b8:ab:0c:25:74:84:f5:c2:
a0:ae:74:3e:25:89:09:b5:24:2c:db:82:58:0c:09:
a6:47:2a:0d:64:1d:ed:0b:c5:bc:1c:c4:af:11:88:
46:52:3e:53:99:2e:8e:05:89:73:1a:6d:1f:2e:57:
8c:ca:1e:43:38:fe:d6:07:5b:67:55:32:99:cd:8d:
84:d5:4a:a0:41:c2:87:f9:59:c7:e5:5a:a8:6f:28:
87:2b:e8:69:6d:a1:2e:a0:fc:96:1d:67:be:1e:55:
95:c3:a5:c9:10:f7:f0:f4:6b:6f:d9:4a:0b:54:12:
6d:d6:d3:66:62:ac:51:cd:04:31:ae:5f:39:d0:d3:
f5:c1:bd:c6:59:87:6d:58:52:06:6e:68:8a:c2:8c:
db:12:76:90:1b:60:cb:17:2f:0d:a1:f7:69:39:2e:
7c:7e:5b:fb:38:0a:f9:f2:95:08:60:79:b5:c8:c0:
8b:9c:15:5e:ac:86:bd:7a:4b:77:a7:39:b8:45:a7:
f6:24:30:eb:70:6d:6b:2b:e8:9d:77:5e:86:e0:20:
ab:db:a3:73:62:2e:5b:f8:1e:72:e9:e3:e1:bf:61:
64:d3:fd:81:d6:9e:21:0a:32:87:aa:75:5a:dc:da:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:84:FB:76:53:99:98:51:E8:34:A4:76:0D:C2:9B:79:4E:BB:04
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/dzKE-3ZTmZhR6DSkdg3Cm3lOuwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.172.0/22
IPv6:
2a04:f600::/29
Signature Algorithm: sha256WithRSAEncryption
c8:52:6b:bf:48:de:d8:64:f1:28:97:5e:8c:25:cb:3b:af:ed:
89:af:24:e5:c9:da:b8:0f:a3:45:09:b3:26:52:e7:0f:32:9f:
d6:06:d1:37:30:a3:87:ce:86:ce:82:c8:ca:0e:7e:5c:3f:38:
39:96:e3:b7:a5:d0:04:07:25:43:a5:64:c7:70:b3:d2:aa:dd:
3e:0d:35:18:d9:57:eb:dd:a4:b4:84:83:ca:e3:43:2b:2f:02:
f8:7f:77:28:32:8b:4d:e3:88:ca:09:40:2d:85:6d:6c:26:ef:
44:67:c2:f6:b4:80:03:27:eb:54:13:59:26:9d:05:2f:a8:70:
74:82:47:d6:4f:ad:19:6e:4c:30:4e:a9:ae:b4:1b:13:05:7d:
c4:f8:98:b4:04:dc:5c:02:bd:d7:ee:6b:aa:8c:1a:57:87:f0:
eb:d7:59:6e:56:de:4c:61:84:fa:ed:a1:ce:70:42:4b:73:e1:
fc:5a:a8:3e:19:95:88:47:82:c6:28:cc:1a:3b:19:51:c0:78:
e0:ff:ef:24:59:f3:47:2e:49:0e:74:a1:5d:21:2f:33:61:1f:
9b:b5:6a:15:52:bc:4c:e1:82:03:9c:c7:65:06:9e:0c:d7:84:
e3:b5:7e:e2:4c:c2:3b:20:ea:e3:43:61:d5:e7:b5:b8:04:9b:
51:30:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 01:55:08 2024 by rpki-client on console-fra.rpki-client.org