Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/O7ZImWljWdeJXEnYWz7rEF5NaJY.roa
File: O7ZImWljWdeJXEnYWz7rEF5NaJY.roa (raw, json)
Hash identifier: /KsmAMTcMOXho4qwXR0YspzF0E6bHPIwiq9v6UPmLz0=
Subject key identifier: 3B:B6:48:99:69:63:59:D7:89:5C:49:D8:5B:3E:EB:10:5E:4D:68:96
Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial: 018CC3B6906C9F2F645E1A41EA99189194DF
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/O7ZImWljWdeJXEnYWz7rEF5NaJY.roa
Signing time: Mon 01 Jan 2024 06:29:30 +0000
ROA not before: Mon 01 Jan 2024 06:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50754
IP address blocks: 185.134.76.0/22 maxlen: 24
2a06:ebc0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:90:6c:9f:2f:64:5e:1a:41:ea:99:18:91:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
Validity
Not Before: Jan 1 06:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bb64899696359d7895c49d85b3eeb105e4d6896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:92:4a:71:b0:aa:00:b9:db:71:52:6c:c2:
5b:6f:d9:70:1a:78:eb:04:65:fa:86:6b:ee:dc:3c:
4b:6e:4b:41:ab:66:28:00:56:ef:00:f6:71:c8:33:
74:c4:1d:ac:b4:17:8c:29:a7:19:4f:6c:c4:a3:ae:
de:f6:cd:c4:1f:67:56:37:58:a0:20:1d:95:cd:7f:
24:c6:78:b5:4a:aa:65:2d:f5:38:a3:8c:5b:1f:ef:
fd:df:5c:b4:d1:12:e3:23:f3:b1:23:3f:4b:7f:82:
20:e8:eb:2b:42:02:1e:f6:0a:6e:f3:a9:82:ce:aa:
70:f9:b1:12:05:b7:57:4b:7f:0d:6f:65:fa:e6:0a:
bc:99:4b:de:fa:75:1c:ed:a6:7a:01:be:d5:ea:61:
ea:c3:2d:c0:d0:5a:65:e6:21:3e:f5:71:51:18:7a:
92:8e:44:0f:d8:5e:02:5d:c6:3f:9b:14:11:6c:b6:
c7:f4:69:8f:43:d9:f1:5e:62:5f:2b:fc:3e:6e:29:
f3:fa:5f:a7:ad:dd:dc:ce:71:0f:4a:61:cc:de:29:
32:a4:01:da:fc:09:95:05:ad:76:c5:85:50:fc:28:
48:0c:13:9b:cd:2f:ec:4c:74:d8:4f:08:80:50:8c:
cb:24:31:b9:a8:3e:3a:08:f7:dc:fc:5d:59:80:cd:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B6:48:99:69:63:59:D7:89:5C:49:D8:5B:3E:EB:10:5E:4D:68:96
X509v3 Authority Key Identifier:
keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/O7ZImWljWdeJXEnYWz7rEF5NaJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.76.0/22
IPv6:
2a06:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:c9:1c:fc:69:7c:1a:8a:ce:80:42:c6:83:70:2f:1f:c7:a1:
5a:2f:1e:5c:de:5b:1a:b6:93:6a:60:2c:fe:9a:9b:4a:38:0c:
c9:64:c8:a3:12:43:bd:5a:67:88:2c:16:2f:64:8d:14:8e:53:
48:18:2e:78:b6:d0:d0:52:d3:5a:e1:72:f7:bd:87:1a:31:87:
de:3e:d3:3d:a8:7e:22:c6:86:a5:15:9c:e5:82:dc:4e:37:e2:
71:15:62:ed:7f:3f:e3:7e:2a:4f:ca:2a:7e:20:5a:1d:f0:e4:
4d:9c:55:4b:c1:6e:c2:82:83:a7:16:71:a7:66:ee:23:58:49:
d4:7c:5e:ba:b3:c5:35:2c:54:cd:22:a4:5d:77:9b:e7:0a:8f:
0a:9d:b8:9b:5c:95:80:9f:d4:c4:e0:84:71:26:9a:56:16:9b:
fb:f1:66:36:b2:38:05:09:db:30:2c:66:a4:40:35:ba:0d:82:
cb:b2:e2:88:01:a6:0d:c4:1b:3d:d9:8e:2c:85:e7:a3:41:1f:
8a:45:81:10:64:e8:ca:23:88:dc:8a:95:c0:25:1e:87:12:6f:
ae:b5:5f:e1:32:a1:50:8a:5d:b6:3c:f2:74:ea:d9:49:72:ec:
f4:01:4c:40:b1:ca:4d:2b:ee:16:08:aa:d5:c6:dd:18:5a:8b:
61:63:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:33:31 2024 by rpki-client on console-ams.rpki-client.org