Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/Zbax72lHDvEreFynAYzSo49toXo.roa
File: Zbax72lHDvEreFynAYzSo49toXo.roa (raw, json)
Hash identifier: c9Mh22d8cLtizyKudqyzKSaPEaGolgOLYPxYm6dUsxc=
Subject key identifier: 65:B6:B1:EF:69:47:0E:F1:2B:78:5C:A7:01:8C:D2:A3:8F:6D:A1:7A
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 018CCA2B350285B2D5409332C176143DBFFF
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/Zbax72lHDvEreFynAYzSo49toXo.roa
Signing time: Tue 02 Jan 2024 12:34:38 +0000
ROA not before: Tue 02 Jan 2024 12:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198682
IP address blocks: 185.140.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:35:02:85:b2:d5:40:93:32:c1:76:14:3d:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Jan 2 12:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b6b1ef69470ef12b785ca7018cd2a38f6da17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:47:91:89:6c:f3:fc:aa:ec:5d:46:1e:48:
80:55:d3:1e:af:08:ad:ed:d3:5e:bf:32:52:4d:5d:
f7:4f:7f:48:40:0a:2a:4a:3c:6a:83:f4:f4:ca:e0:
b0:c6:da:74:a2:08:d7:78:8b:37:65:6f:ad:aa:f8:
35:75:93:a7:94:bf:b9:0d:6d:b0:01:06:b3:b2:be:
ec:d7:01:dd:2f:1a:e6:42:b8:d8:7e:6e:d2:27:cf:
ef:1f:e0:d7:2b:fc:58:80:b6:00:1a:75:ed:f5:d8:
d4:15:8e:02:52:11:4e:61:96:bd:f8:11:6d:df:ee:
b9:ae:d1:2a:56:2c:20:45:b3:09:1c:04:75:00:18:
21:5e:e5:3e:31:4c:16:6c:65:80:eb:10:0b:73:e0:
6e:e9:66:81:b9:e0:80:3c:fc:5c:6d:e7:2b:2c:db:
8d:9b:7f:0b:e8:ae:f6:a9:2e:b1:f5:7f:b7:a6:38:
df:8c:1a:53:32:06:e5:87:fc:16:93:2f:0e:b0:d8:
4a:d9:0d:63:63:9e:00:16:8a:57:4d:50:82:18:a5:
77:48:4f:c6:1b:29:67:e0:90:1a:c7:7b:90:b4:4c:
f6:dc:dd:ad:58:48:a4:c2:cd:57:9f:52:89:1f:41:
7f:1e:12:49:41:cc:fe:18:b0:52:9c:84:05:c2:1d:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:B1:EF:69:47:0E:F1:2B:78:5C:A7:01:8C:D2:A3:8F:6D:A1:7A
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/Zbax72lHDvEreFynAYzSo49toXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.136.0/22
Signature Algorithm: sha256WithRSAEncryption
32:82:6b:1b:5f:6c:a5:4a:9a:23:f8:6b:80:97:83:a7:69:f5:
a2:1d:49:0a:0a:2f:c2:e3:b1:ba:09:95:c4:13:50:f4:b4:21:
fc:0f:20:f9:3d:7e:84:1f:f9:34:1d:75:a1:17:8a:e0:b2:be:
94:84:b6:ee:a6:92:92:54:dc:a6:21:5f:48:40:1a:c3:32:02:
1a:2d:67:22:e1:be:7a:07:67:00:f9:7f:79:00:66:4b:79:3d:
b0:7c:03:d5:3c:e8:75:b5:b9:66:f6:00:57:6c:aa:5f:f4:f6:
f5:65:9c:e6:9e:ab:7f:e8:b3:79:c9:9e:ff:47:38:84:de:ff:
39:71:aa:ca:da:05:48:41:b6:47:b6:85:13:d9:60:88:58:23:
66:bb:b2:d2:a2:6a:87:43:53:5b:dd:6f:af:84:10:cc:17:61:
e5:14:db:61:00:70:a6:22:31:53:96:90:99:48:a5:50:19:1e:
8e:d2:d7:bb:4c:ac:28:36:a7:0e:10:6f:64:ed:f6:d2:73:a4:
a8:67:21:d4:40:e7:9a:30:26:72:d8:bf:12:37:d4:08:67:fd:
27:af:86:63:84:2a:ec:95:d9:14:36:3d:a9:13:e7:cb:d1:78:
70:3c:83:d8:68:47:f0:59:07:15:75:b5:1a:66:cc:3e:c5:ca:
00:2d:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:05:11 2024 by rpki-client on console-fra.rpki-client.org