Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/zosyD68uq9hZU5tVU4ktw4j8Vm0.roa
File: zosyD68uq9hZU5tVU4ktw4j8Vm0.roa (raw, json)
Hash identifier: ZjeSnAuWJ2/vEgIUdYR+KBUgskDzb3oxXjorNcTaTxA=
Subject key identifier: CE:8B:32:0F:AF:2E:AB:D8:59:53:9B:55:53:89:2D:C3:88:FC:56:6D
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 018CFA12BBEA006626E7D9DE6CC7D27958C7
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/zosyD68uq9hZU5tVU4ktw4j8Vm0.roa
Signing time: Thu 11 Jan 2024 19:49:40 +0000
ROA not before: Thu 11 Jan 2024 19:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 185.113.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:12:bb:ea:00:66:26:e7:d9:de:6c:c7:d2:79:58:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 11 19:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8b320faf2eabd859539b5553892dc388fc566d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:2f:13:f2:4e:0b:c4:13:e7:ae:c8:8f:f1:
ae:00:f0:9b:45:a4:0d:98:8e:6b:19:1e:10:8b:0e:
68:d5:7a:96:f8:6c:b1:3a:cc:c1:97:8a:bc:f6:5e:
8c:61:d5:e5:be:c5:17:3f:4c:e0:ea:2b:f9:37:81:
d0:4b:0f:1a:98:f9:66:5d:aa:c6:a9:23:29:49:8c:
fc:82:fb:c3:7b:7a:7e:ad:d2:46:4a:bf:c7:fc:e7:
4d:39:c2:ba:2a:4e:90:1f:2a:22:41:d0:3b:60:42:
76:22:af:53:af:ee:95:42:4f:94:0d:7e:f1:c0:d7:
11:c6:b7:36:0c:a5:93:ad:63:dd:60:95:f0:7f:8c:
3e:0c:34:cd:45:eb:b5:91:36:ee:9d:58:bf:90:80:
2b:2c:af:72:0d:db:10:14:57:cb:6a:ae:8b:5f:ae:
70:3a:5f:01:e1:29:58:bb:c1:79:b9:c1:b2:07:6c:
bb:e5:4c:e8:a4:9a:64:5a:71:5b:13:b9:af:be:21:
3e:92:5c:3f:91:89:14:ec:49:32:ef:94:bf:1d:3e:
2e:0e:6b:f6:93:f7:88:96:d1:63:74:02:3c:68:89:
33:13:34:48:e8:0d:03:b6:2a:5f:0a:8f:6b:12:7f:
c6:d7:34:da:f8:6a:bb:07:f5:8c:c4:1d:ef:19:d9:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:32:0F:AF:2E:AB:D8:59:53:9B:55:53:89:2D:C3:88:FC:56:6D
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/zosyD68uq9hZU5tVU4ktw4j8Vm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.64.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:00:07:42:b2:ff:63:e4:3e:9d:5a:64:7c:c6:64:e6:b7:53:
c6:98:69:96:05:1f:85:a0:31:ec:b9:9f:9a:7a:a4:3f:2f:fa:
b6:30:46:e6:89:17:b8:af:76:19:2d:00:68:2c:0a:b0:11:ac:
84:e0:4a:e2:d6:10:9b:33:25:d2:5f:e5:1a:c6:ac:c5:ae:fc:
97:31:d2:6e:36:04:0d:88:76:3b:da:a8:14:ff:2d:b9:79:a4:
5f:f9:5a:bb:6b:10:4a:1c:df:59:38:c5:76:a5:97:bd:67:67:
3c:d1:40:b9:93:bf:5f:9e:ab:63:c4:7d:4b:b1:28:11:e4:1f:
bc:13:1b:e9:2d:50:ca:1f:85:5c:7d:78:4c:8c:66:3f:5a:43:
2b:2a:f5:e7:8a:d6:48:cc:27:df:17:ba:b8:2b:07:5c:fc:22:
f6:af:6b:c0:ee:73:fd:1f:76:04:be:46:8a:43:f0:e0:c4:cb:
40:6a:d9:2f:b0:cb:65:01:6b:db:66:41:e4:e6:d6:10:03:19:
df:5d:a9:81:82:c7:08:24:9d:05:ef:3c:c1:93:1e:7e:50:68:
bf:44:f7:17:d1:b1:86:1e:47:38:41:8c:c7:3a:6a:1e:1d:0c:
f3:d6:af:0c:2e:24:a6:0c:2b:f7:a6:84:39:ea:f0:18:2d:50:
8c:0b:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:31 2024 by rpki-client on console-ams.rpki-client.org