Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/ZBwxdcYhRyEf8bQ9YZRZTHhxVmI.roa
File: ZBwxdcYhRyEf8bQ9YZRZTHhxVmI.roa (raw, json)
Hash identifier: U0xtwBJQItl+mgO83MSRH9zOBprLi0DCngC8ftI/+4c=
Subject key identifier: 64:1C:31:75:C6:21:47:21:1F:F1:B4:3D:61:94:59:4C:78:71:56:62
Certificate issuer: /CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Certificate serial: 018CC26D1AC16E3B9BD75A2DFB4AEAC7ABD1
Authority key identifier: 8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/ZBwxdcYhRyEf8bQ9YZRZTHhxVmI.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203201
IP address blocks: 185.142.152.0/24 maxlen: 24
185.142.152.0/22 maxlen: 22
185.142.152.0/23 maxlen: 23
185.142.153.0/24 maxlen: 24
185.142.154.0/23 maxlen: 23
185.142.154.0/24 maxlen: 24
185.142.155.0/24 maxlen: 24
185.145.192.0/24 maxlen: 24
185.145.192.0/22 maxlen: 24
185.145.192.0/23 maxlen: 23
185.145.194.0/23 maxlen: 23
80.80.239.0/24 maxlen: 24
185.145.193.0/24 maxlen: 24
185.145.194.0/24 maxlen: 24
185.145.195.0/24 maxlen: 24
78.142.240.0/24 maxlen: 24
2a07:2e80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 16:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1a:c1:6e:3b:9b:d7:5a:2d:fb:4a:ea:c7:ab:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=641c3175c62147211ff1b43d6194594c78715662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:21:f1:ff:75:a8:48:e6:04:aa:71:5c:e3:
e9:b6:51:80:60:12:b3:05:0b:e4:e3:57:d7:5e:ad:
4f:27:b3:4d:6d:99:8a:5c:ff:92:81:87:ff:ed:1e:
34:ba:50:e9:dd:a6:cf:9a:df:01:2c:a2:31:e6:f2:
66:06:ed:90:54:d5:1b:5d:31:7a:c7:e5:e2:cb:bd:
90:39:6f:cd:fb:e9:03:41:26:94:93:a2:36:1f:73:
7e:ee:1c:a6:72:92:ee:d2:19:61:53:11:b6:de:f0:
04:23:af:9a:34:2c:f9:6d:0f:97:62:d6:f6:8c:39:
7a:de:86:c6:90:12:6c:aa:60:96:d9:c6:21:df:03:
da:59:09:20:47:1c:32:13:85:3e:97:56:18:6f:95:
79:93:13:17:dd:5b:f6:48:f8:eb:2e:37:17:41:5d:
32:b9:d3:19:ad:9b:22:92:71:97:a5:83:87:bc:8d:
78:ba:0c:eb:76:8b:5c:bb:92:f9:86:fa:8a:08:62:
11:27:e1:f2:ca:f2:a3:c7:57:b5:db:34:b4:17:9e:
f5:c5:1c:ea:f8:12:cf:4c:01:42:31:62:18:79:a9:
08:fa:ae:dd:47:6b:28:24:49:81:57:41:24:91:5a:
73:95:8a:ec:43:c6:5a:bf:2f:9f:23:2a:4d:b3:d6:
ef:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:31:75:C6:21:47:21:1F:F1:B4:3D:61:94:59:4C:78:71:56:62
X509v3 Authority Key Identifier:
keyid:8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/ZBwxdcYhRyEf8bQ9YZRZTHhxVmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.240.0/24
80.80.239.0/24
185.142.152.0/22
185.145.192.0/22
IPv6:
2a07:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
42:a9:39:46:4b:a3:0a:6e:00:d4:3f:91:92:72:5e:cb:c9:0e:
fb:ef:5a:1e:82:3d:80:f3:e7:d9:42:57:30:aa:ff:e9:84:87:
ef:a3:ec:f2:c4:67:5a:22:e9:b4:fd:e4:27:e1:57:f4:31:57:
c9:41:56:2b:cc:37:c2:4d:49:7f:ed:04:07:fa:13:40:8d:c1:
51:75:8f:c2:fd:03:37:7d:4a:ee:61:21:cd:dd:da:ef:cb:02:
a8:e8:56:76:d9:1e:d2:09:88:7a:8b:b8:c2:99:0a:6f:ec:44:
f7:04:2e:c4:3f:7e:69:84:5c:d0:27:af:16:b1:06:a7:25:9d:
0d:21:91:d8:14:08:4c:72:2c:57:62:cb:fc:f6:f4:90:80:9b:
0b:ab:3a:0a:cf:9b:32:52:47:ec:0d:3e:e2:90:d1:6b:63:86:
0c:ff:e2:bb:5c:d1:d2:6c:6c:52:ca:fc:53:8b:e9:7c:bf:db:
76:c0:0c:49:b3:4c:cc:a9:b5:6f:4a:7d:70:27:bc:44:cd:a4:
15:7d:8e:a8:81:7e:63:50:5a:91:9b:b2:63:e0:87:4a:69:cd:
31:94:56:c8:48:49:ec:3d:ca:4b:ab:ae:e1:47:f7:d4:a2:b1:
5d:0a:79:53:5b:4a:ce:95:3e:9a:54:9a:e2:14:0d:e5:d9:05:
7f:4c:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 21:54:49 2024 by rpki-client on console-ams.rpki-client.org