Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZZUrEw4FwQ3TJLzydFvH1EyTlro.roa
File: ZZUrEw4FwQ3TJLzydFvH1EyTlro.roa (raw, json)
Hash identifier: n97DSO/OhgIgs42SB1OyN/lXieV1mmKioYkG6CZRE+4=
Subject key identifier: 65:95:2B:13:0E:05:C1:0D:D3:24:BC:F2:74:5B:C7:D4:4C:93:96:BA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8027D826E762BF13857D5D07AF8845F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZZUrEw4FwQ3TJLzydFvH1EyTlro.roa
Signing time: Tue 02 Jan 2024 02:30:55 +0000
ROA not before: Tue 02 Jan 2024 02:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50338
IP address blocks: 185.226.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:7d:82:6e:76:2b:f1:38:57:d5:d0:7a:f8:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65952b130e05c10dd324bcf2745bc7d44c9396ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:ad:6d:c2:69:dd:c6:47:bf:53:f9:eb:33:
4c:7e:a9:e9:34:68:16:ed:33:b5:ee:eb:55:ed:de:
c8:43:f6:ce:aa:13:3a:a2:7c:4e:39:c0:f7:c2:27:
96:98:42:3c:f0:b1:55:a9:ff:8f:5d:82:dc:6f:0c:
cd:b9:1b:24:a2:8d:b3:ff:7e:79:c3:47:34:38:4f:
f1:03:3b:4e:68:bd:b5:8e:0c:04:f5:4a:47:2d:ce:
79:80:ef:9a:6a:47:74:16:cd:0e:76:6d:3a:29:50:
03:2e:c4:5e:ae:4a:71:2f:bf:50:bd:77:8e:b7:1f:
53:b0:f8:bb:92:95:92:15:7a:3b:10:01:02:0d:b4:
79:76:d2:7a:c1:50:1c:c5:27:e9:2e:e1:0e:9c:42:
a0:0b:0e:76:25:89:16:87:96:27:a5:fe:42:67:f2:
59:98:cc:92:06:5d:41:f0:67:e1:1a:69:3e:1a:c5:
67:1c:8c:88:0b:c7:d6:0e:78:58:1b:e2:0e:87:ae:
32:20:e3:aa:10:07:ff:4b:af:a7:21:f1:7d:1f:eb:
28:41:2a:d3:85:a5:33:09:dd:d0:cc:ba:09:9a:9d:
fc:41:6e:b8:45:fc:0d:28:c3:16:fc:b0:99:ed:3d:
02:d1:5d:0f:4f:c1:59:93:37:c5:a9:ad:ae:f1:f7:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:95:2B:13:0E:05:C1:0D:D3:24:BC:F2:74:5B:C7:D4:4C:93:96:BA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZZUrEw4FwQ3TJLzydFvH1EyTlro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.107.0/24
Signature Algorithm: sha256WithRSAEncryption
04:19:c5:21:8b:ee:55:a6:74:36:ee:4d:3f:47:bc:89:4c:ea:
16:59:c5:5c:91:3b:4d:f1:b3:92:38:ca:81:c5:20:91:fa:49:
41:0c:06:61:7e:06:13:33:7b:26:ff:f5:47:1e:72:85:d2:62:
bb:e9:5b:d4:6c:6b:53:c7:10:19:e3:a6:55:a8:1b:63:9c:eb:
3b:53:7b:a1:01:59:22:18:66:e7:18:b1:07:69:c3:a7:cf:2a:
91:f9:24:17:4b:b9:53:c6:6f:94:cc:bf:f4:3a:f7:7f:30:4e:
5f:96:76:c9:b1:58:f4:42:60:2f:74:5d:b0:85:2b:d4:bf:31:
5d:64:c7:59:51:43:9c:5b:8e:d2:00:f0:8f:4e:bf:3b:8e:fe:
d3:71:ec:ab:05:a3:b7:fa:78:d7:06:35:c3:58:db:a6:30:b6:
39:4f:49:e2:e9:4f:49:ae:24:cd:42:25:37:fa:22:ed:d9:da:
5f:d9:fd:db:0a:18:c7:fe:71:5b:31:ae:e0:26:0b:20:a8:fc:
60:5e:a8:41:75:c3:6c:02:9f:57:c9:fe:6d:ab:32:47:a9:47:
02:7f:2f:96:a7:8a:86:79:db:59:a5:b4:f6:a8:f8:b6:3d:e6:
8c:e7:4d:2a:ab:ac:6f:08:3d:dc:e4:e9:c5:4d:a3:fe:6a:3c:
53:53:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:52:48 2024 by rpki-client on console-ams.rpki-client.org