Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa
File: Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa (raw, json)
Hash identifier: ouRcbVePhBEi1sg0DekWBBPqZw1Z5xT00z5zL5JP3jU=
Subject key identifier: 66:1B:3C:8B:51:4C:3A:9B:32:AF:E3:25:9D:9C:6C:FC:B2:86:37:3B
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 018CC725998B1C389443B46B851972458994
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa
Signing time: Mon 01 Jan 2024 22:29:39 +0000
ROA not before: Mon 01 Jan 2024 22:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29119
IP address blocks: 185.145.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:99:8b:1c:38:94:43:b4:6b:85:19:72:45:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jan 1 22:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=661b3c8b514c3a9b32afe3259d9c6cfcb286373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:22:dc:03:16:2a:c7:ee:bf:4d:e2:28:5e:
4c:f7:43:0b:88:a2:eb:f0:4d:ea:fc:6d:79:eb:e3:
7c:f1:b8:f6:48:f8:a8:fd:f6:a3:2e:1b:38:09:9f:
cf:8d:f4:29:6c:f4:68:0f:cd:44:0c:d7:05:20:ad:
86:4e:d1:76:e8:f8:91:22:eb:ca:a5:3c:c9:67:9a:
bd:00:11:a4:50:76:c0:09:d5:12:da:09:e5:54:12:
15:91:dc:be:9d:dc:b3:c3:5d:24:b9:68:a1:1f:c5:
e6:ce:0e:3a:7a:43:8d:b6:e0:51:0b:1c:a7:e0:46:
cb:5f:e9:98:ab:3e:32:ee:6c:c7:cc:63:36:92:a8:
a3:87:66:2b:e2:92:61:3b:29:48:d3:45:58:75:8b:
0e:3f:0a:af:40:39:f6:7c:00:3f:71:af:30:b7:5c:
fc:0e:c1:bb:8a:44:58:99:8f:75:5d:b6:ac:5a:1b:
ab:ca:ba:3b:e8:d1:1f:64:bc:f8:01:db:8d:4b:60:
b8:06:62:e5:6e:3f:c8:07:e0:58:cd:e1:7c:bc:1c:
d2:f8:0d:24:43:c6:50:97:24:4a:d4:05:2d:0a:4a:
7e:0f:fd:9b:5b:d6:fc:e6:5a:a0:6e:21:eb:54:e9:
0a:6a:7c:fe:bc:8d:8c:03:74:41:b2:11:04:04:03:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:3C:8B:51:4C:3A:9B:32:AF:E3:25:9D:9C:6C:FC:B2:86:37:3B
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/Zhs8i1FMOpsyr-MlnZxs_LKGNzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.178.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:2d:90:4f:31:01:1c:95:43:a2:39:7b:8b:3b:63:40:bd:6b:
54:15:06:52:79:f9:67:bf:81:5b:85:1f:ee:03:ee:b1:f2:a2:
61:68:96:9a:7b:69:c4:36:f1:8e:df:09:7f:5e:bd:18:fd:8c:
90:8f:1f:79:d9:19:a3:c3:c1:4d:d4:31:46:95:db:3f:c3:d7:
0b:72:87:a9:42:2b:a1:a2:03:6e:89:5a:27:b0:fe:3d:d5:95:
48:4f:f5:71:52:42:96:e0:de:30:e2:fb:c2:c6:74:9c:70:e8:
76:11:9e:c4:eb:f2:d7:22:97:cd:30:3b:76:65:a7:61:d5:89:
fe:4c:41:07:88:5a:5e:e0:79:cc:68:11:e1:07:91:b2:dd:c0:
bf:31:92:e7:09:d6:95:83:a6:ea:ac:56:8b:33:a9:41:84:c6:
c6:a2:6a:fc:9b:97:75:a1:3e:8c:a9:af:86:f3:aa:7e:af:4e:
41:10:61:d3:ff:e4:e5:45:ab:e7:bf:e6:89:cf:8e:c7:82:f7:
2c:a5:63:27:ca:79:ff:89:85:e8:29:5f:29:e6:26:ed:f6:fa:
40:be:ce:5d:e2:b4:59:51:a5:5f:fd:2e:cd:55:8f:17:48:ea:
09:a3:66:2e:fe:ad:e9:67:aa:8e:81:f0:00:e8:42:4d:67:04:
a2:48:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:05 2024 by rpki-client on console-ams.rpki-client.org