Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zm_CoNFtpY08GAejKsV_0N4u3Tw.roa
File: Zm_CoNFtpY08GAejKsV_0N4u3Tw.roa (raw, json)
Hash identifier: JoV3jtOCe7gCFh08RWJ90VCpi06AfP2GPnNkBt9yzlc=
Subject key identifier: 66:6F:C2:A0:D1:6D:A5:8D:3C:18:07:A3:2A:C5:7F:D0:DE:2E:DD:3C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0190064D687CD2678E3573D64F3676A70C81
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zm_CoNFtpY08GAejKsV_0N4u3Tw.roa
Signing time: Tue 11 Jun 2024 07:57:34 +0000
ROA not before: Tue 11 Jun 2024 07:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3399
IP address blocks: 192.36.22.0/24 maxlen: 24
192.36.208.0/24 maxlen: 24
192.165.178.0/23 maxlen: 23
193.180.23.0/24 maxlen: 24
193.180.96.0/22 maxlen: 22
193.180.164.0/23 maxlen: 23
193.181.248.0/22 maxlen: 22
193.182.111.0/24 maxlen: 24
193.183.116.0/24 maxlen: 24
194.68.170.0/23 maxlen: 23
194.68.170.0/24 maxlen: 24
194.68.171.0/24 maxlen: 24
194.68.220.0/23 maxlen: 23
194.71.216.0/23 maxlen: 23
194.71.216.0/24 maxlen: 24
194.71.217.0/24 maxlen: 24
194.103.80.0/22 maxlen: 22
194.132.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:4d:68:7c:d2:67:8e:35:73:d6:4f:36:76:a7:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 11 07:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666fc2a0d16da58d3c1807a32ac57fd0de2edd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:45:08:08:04:a6:43:b7:45:a3:ea:ee:77:
f6:12:54:c2:5b:d6:63:03:32:37:ed:19:e1:d6:eb:
69:fc:e7:48:8e:b6:84:aa:f5:e9:39:2c:54:e6:47:
29:d9:55:1a:12:27:65:aa:d0:38:99:3c:79:60:66:
fd:61:b0:9b:ba:51:4f:a7:51:47:9a:f3:9d:7c:f5:
2b:27:e2:c0:f3:47:0d:24:83:d4:a3:f4:2a:91:7e:
eb:04:4e:24:0f:04:70:c5:0e:0f:0c:a5:09:6c:3c:
9e:c1:bb:7c:bd:f3:ca:d0:be:fd:a9:16:85:dd:b5:
ae:0f:59:19:dd:8c:f4:38:68:7e:c3:89:fa:d0:13:
8b:33:60:88:2a:f6:d8:fb:5f:40:82:29:01:32:b0:
33:4e:aa:fb:57:ab:0d:f6:1c:ac:0b:db:8e:58:39:
72:74:89:f4:24:c6:f7:3f:7f:34:66:5a:eb:d6:45:
5e:13:30:46:16:fb:f1:39:a0:9b:a5:f2:df:0a:a3:
e7:23:0c:d8:6b:60:43:2e:c6:5b:f8:a7:7d:5f:88:
67:c8:1d:e3:44:f0:cf:fd:2e:16:be:91:40:d9:93:
ed:fd:f0:bb:e3:ea:3b:20:12:e6:d1:52:cc:a0:c6:
0d:ec:b3:5e:d5:12:80:68:71:8a:e7:d9:e6:ab:cd:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:C2:A0:D1:6D:A5:8D:3C:18:07:A3:2A:C5:7F:D0:DE:2E:DD:3C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zm_CoNFtpY08GAejKsV_0N4u3Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.22.0/24
192.36.208.0/24
192.165.178.0/23
193.180.23.0/24
193.180.96.0/22
193.180.164.0/23
193.181.248.0/22
193.182.111.0/24
193.183.116.0/24
194.68.170.0/23
194.68.220.0/23
194.71.216.0/23
194.103.80.0/22
194.132.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:44:f4:d9:8d:fd:1d:d8:62:e4:9d:63:c5:81:f2:f7:20:5e:
b5:03:c8:5b:b1:6c:28:57:1a:82:4b:5a:64:15:40:0c:04:ad:
42:5f:8b:e1:69:3a:35:27:d7:7d:ab:38:cc:f0:9d:93:e1:86:
24:a8:bd:3b:c5:e4:82:c0:f6:89:0a:39:98:e7:c0:62:3b:85:
f8:91:43:72:69:60:02:e2:9f:c1:98:96:03:23:8c:8f:8c:30:
ab:d8:7f:be:88:15:4e:9a:b5:5c:25:9f:17:65:cb:59:b0:36:
db:46:0d:2c:88:c8:1b:9a:55:b6:8d:5e:d3:f8:ee:9e:d1:46:
5f:79:62:e0:7a:5d:86:62:9d:e1:58:24:26:23:9b:5f:dc:6f:
50:cf:2c:78:9d:90:9d:c3:a8:ee:01:99:8c:2a:d0:b8:92:c6:
c4:3c:2e:c1:24:63:61:56:b2:bc:9d:e3:68:1f:28:bd:aa:ef:
b7:f3:7b:4a:01:51:83:e9:5f:3b:95:2b:80:89:45:11:c9:5e:
ed:94:d1:e4:ea:5f:c1:47:09:9b:9a:5a:c1:64:06:1d:30:f0:
8c:0d:61:91:48:98:86:52:67:e3:da:19:69:07:04:7c:1b:32:
33:86:af:20:d6:6b:80:71:bd:8c:7f:25:e5:c7:3f:d2:02:96:
1f:c5:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 17:52:15 2024 by rpki-client on console-ams.rpki-client.org