Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/z0BeOKz6B9B6D83ZbpEDp2ZUq-g.roa
File: z0BeOKz6B9B6D83ZbpEDp2ZUq-g.roa (raw, json)
Hash identifier: qnR15DPOwgmNlFZQoSVYrpjQKxA4AgCUAPA0aA8RsIk=
Subject key identifier: CF:40:5E:38:AC:FA:07:D0:7A:0F:CD:D9:6E:91:03:A7:66:54:AB:E8
Certificate issuer: /CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Certificate serial: 018F55454FBFF6510460B4BF3F82EC1B11AB
Authority key identifier: 92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/z0BeOKz6B9B6D83ZbpEDp2ZUq-g.roa
Signing time: Tue 07 May 2024 22:55:56 +0000
ROA not before: Tue 07 May 2024 22:55:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395403
IP address blocks: 185.103.35.0/24 maxlen: 24
2a00:edc0:1007::/48 maxlen: 48
2a00:edc0:7ffe::/48 maxlen: 48
2a00:edc0:7fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:55:45:4f:bf:f6:51:04:60:b4:bf:3f:82:ec:1b:11:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92319bcd9b09a984b070e2ef588ffcfa8b73c8a2
Validity
Not Before: May 7 22:55:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf405e38acfa07d07a0fcdd96e9103a76654abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:31:0e:a9:d0:9a:a1:46:b8:cc:e0:99:80:
f0:6c:0a:50:a0:3e:ec:2b:ca:e5:50:e5:30:d3:67:
63:e2:06:97:cc:36:c4:fc:1b:c5:b9:20:18:e7:6a:
ee:e5:70:95:67:4a:d3:bc:73:62:5b:98:31:d8:65:
e4:9d:d8:5d:7d:c5:fd:48:70:06:35:9c:0c:0b:63:
25:c0:90:4d:db:48:2c:93:32:e3:b4:26:3c:ab:01:
a3:48:a2:51:72:1e:a5:d2:5d:1f:4a:51:8b:1d:79:
30:11:37:be:27:57:05:19:64:f5:90:29:80:5b:fd:
cc:df:49:42:8d:04:a2:fa:a5:a5:0e:4d:ed:d9:2d:
d9:96:e8:8a:f4:13:3d:ee:90:a6:b7:da:7a:0b:59:
4b:48:86:54:7b:25:de:e5:a7:8b:61:6a:b0:0b:5e:
fb:44:34:27:12:b9:92:98:31:73:f0:af:18:d9:0f:
78:06:b4:5e:46:ae:26:4e:7c:de:95:08:32:47:17:
6e:a7:ab:16:5c:c9:f7:4c:f0:a2:3f:86:06:5f:36:
60:36:60:e4:d0:65:ca:90:db:53:0f:98:62:ff:54:
9e:f3:94:9e:e5:c6:80:20:3e:85:53:2d:b5:fc:a4:
f3:cc:91:ec:d7:2a:cc:0f:18:bc:6e:53:6f:0c:42:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:5E:38:AC:FA:07:D0:7A:0F:CD:D9:6E:91:03:A7:66:54:AB:E8
X509v3 Authority Key Identifier:
keyid:92:31:9B:CD:9B:09:A9:84:B0:70:E2:EF:58:8F:FC:FA:8B:73:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjGbzZsJqYSwcOLvWI_8-otzyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/z0BeOKz6B9B6D83ZbpEDp2ZUq-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b2b2c6-35ee-42f5-a268-cdbebbc652de/1/kjGbzZsJqYSwcOLvWI_8-otzyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.35.0/24
IPv6:
2a00:edc0:1007::/48
2a00:edc0:7ffe::/47
Signature Algorithm: sha256WithRSAEncryption
4d:06:62:e4:08:91:a9:f6:c8:73:63:a1:83:84:8a:22:54:a3:
7d:9b:f7:7c:38:d3:0c:3e:a7:30:6f:cb:2c:d2:20:8c:b3:af:
45:e0:73:c8:a6:70:57:45:f2:18:8f:c9:ba:3d:b1:d8:1b:37:
fc:8c:10:c3:9d:07:55:43:29:9b:3e:f6:b2:44:6d:a8:31:ed:
58:86:3a:f0:cb:a1:66:23:61:1c:0b:58:9b:1e:51:6c:ab:d2:
c8:4b:ca:4c:00:53:c0:60:c9:9e:c3:89:4e:30:01:6c:77:8e:
28:01:ad:52:f5:33:4c:18:b9:06:e3:99:98:44:d0:e6:6d:07:
c7:98:67:d8:ec:0b:6e:31:37:ca:26:59:8b:6f:87:56:db:83:
a2:72:f9:52:e1:69:2b:20:92:6c:e6:52:c7:7c:16:9a:7c:4d:
a9:a2:7a:3a:21:12:67:c3:95:55:ba:eb:9f:2c:4e:be:99:64:
cd:f0:fe:66:0b:3a:1c:2d:34:b4:5b:54:f5:32:ec:34:32:e6:
74:4c:98:ae:3b:48:f2:f7:18:b3:fa:20:c7:b0:48:f4:3b:6d:
c7:a6:f6:a4:e0:61:60:97:c9:68:9b:8d:64:58:5b:f9:69:86:
37:fb:fd:e5:5c:ac:62:30:82:58:75:46:2a:c0:de:02:66:f5:
a4:30:6a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:55 2024 by rpki-client on console-fra.rpki-client.org