Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/czrt95FNw9Pr_yn3uVa8K0b6XHQ.roa
File: czrt95FNw9Pr_yn3uVa8K0b6XHQ.roa (raw, json)
Hash identifier: eRjrm3cFWYTPDnpX4wwNx+mB5MQIBIKVkvB0QHLpZtM=
Subject key identifier: 73:3A:ED:F7:91:4D:C3:D3:EB:FF:29:F7:B9:56:BC:2B:46:FA:5C:74
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 018EA876A4754D73D3CEDBD9C77395148050
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/czrt95FNw9Pr_yn3uVa8K0b6XHQ.roa
Signing time: Thu 04 Apr 2024 09:35:31 +0000
ROA not before: Thu 04 Apr 2024 09:35:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215284
IP address blocks: 185.40.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:76:a4:75:4d:73:d3:ce:db:d9:c7:73:95:14:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Apr 4 09:35:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=733aedf7914dc3d3ebff29f7b956bc2b46fa5c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:46:b1:3b:14:50:e9:13:ab:fd:da:54:db:
ab:cd:43:d9:5b:de:ea:09:08:94:f0:c2:39:bd:40:
a1:ef:39:29:2f:49:66:07:f4:69:11:f8:47:1f:47:
2f:b8:64:df:3e:c0:46:e4:90:ec:a5:c5:43:b6:67:
88:97:54:3a:4e:83:90:54:90:74:8d:11:18:16:8b:
2f:50:9c:2b:ba:58:5b:21:5a:bd:17:ce:37:dc:bb:
65:5e:e7:b7:fb:7a:4d:bf:29:50:84:d5:4d:a3:71:
0a:d9:86:f5:5f:c7:13:21:e8:58:ed:00:75:01:88:
67:e2:fa:90:4e:0c:eb:1f:04:5b:44:99:78:f9:73:
d1:bb:13:0c:70:04:0e:98:2c:4b:d3:3c:4a:04:77:
ff:fb:55:59:21:b5:96:dc:ed:d4:a6:d4:29:81:3f:
5c:29:ec:6d:21:56:97:bb:3e:f8:70:26:14:a2:25:
54:61:e5:f5:ba:70:82:f1:ff:85:08:34:e3:1a:4f:
a4:2d:35:b9:46:ce:cc:9e:2e:53:8b:e0:59:86:2f:
75:96:47:66:e5:70:3a:f4:6a:04:d4:29:ef:a1:a9:
b7:7a:26:7d:86:a5:22:41:f7:c8:b4:fd:fc:e9:3a:
4c:05:3d:24:11:e5:d4:c9:e5:77:d5:28:32:c4:e1:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3A:ED:F7:91:4D:C3:D3:EB:FF:29:F7:B9:56:BC:2B:46:FA:5C:74
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/czrt95FNw9Pr_yn3uVa8K0b6XHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.34.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:03:e0:4e:ee:1d:c5:39:a3:e4:3c:f2:d5:4e:c3:bc:bf:94:
49:80:67:d8:bd:d7:91:29:85:9c:3d:d3:31:9b:0a:35:41:1a:
39:5c:be:62:39:0e:d4:33:c9:f4:55:e9:f0:25:c6:c2:3c:a5:
81:50:5c:f6:5f:2d:97:4a:dd:93:e6:c1:0f:29:5b:bb:f0:a0:
d2:c1:b2:e2:22:e9:c3:86:f3:94:82:7c:2d:c3:c2:78:05:8d:
a3:d1:dc:17:e5:f9:e3:63:fc:8b:34:05:a2:e5:ce:6c:28:fb:
00:56:30:48:50:d1:95:7c:62:75:b1:00:15:b9:f4:02:ed:46:
0c:71:67:74:86:31:53:28:97:43:d5:46:e3:60:bb:de:78:24:
27:21:5c:4e:c9:08:4c:88:fc:d5:62:53:73:f5:1b:e3:c3:08:
ea:f7:0b:50:8c:22:69:1a:57:70:81:e2:f0:be:aa:6d:c9:69:
29:1a:fe:66:92:b2:81:90:c5:da:b9:2a:8a:c1:65:fe:cb:a4:
0c:d9:c7:08:64:43:7d:7d:e6:73:6f:4a:4a:cb:42:ab:c7:90:
b6:5f:50:35:a1:b1:80:97:49:a1:ee:95:94:28:81:73:29:3d:
98:f6:72:35:af:b2:08:58:59:f3:4e:2c:3d:44:6e:94:88:5a:
68:e2:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:04:08 2024 by rpki-client on console-fra.rpki-client.org