Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/ZJAetK2RLh1WPdOHS7gRE1JDkQ4.roa
File: ZJAetK2RLh1WPdOHS7gRE1JDkQ4.roa (raw, json)
Hash identifier: RVhAiKNNbx07UlAP/ZiuLUueHNNiM03bYtUqI29qIOI=
Subject key identifier: 64:90:1E:B4:AD:91:2E:1D:56:3D:D3:87:4B:B8:11:13:52:43:91:0E
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 018CC3489605AB7E677F4017F9A8A39A2985
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/ZJAetK2RLh1WPdOHS7gRE1JDkQ4.roa
Signing time: Mon 01 Jan 2024 04:29:23 +0000
ROA not before: Mon 01 Jan 2024 04:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.171.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:96:05:ab:7e:67:7f:40:17:f9:a8:a3:9a:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jan 1 04:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64901eb4ad912e1d563dd3874bb811135243910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:05:a1:49:e2:0b:db:46:0d:81:e3:b0:0d:
0d:be:b9:6e:fa:8b:9f:b2:77:ca:0c:03:da:b0:4f:
d5:af:13:81:82:6e:40:57:88:c1:1b:ff:71:d9:02:
e2:f1:f9:c4:20:1f:1a:66:7e:bb:a6:62:c7:43:34:
ef:32:d5:a5:cf:93:b4:a0:0b:66:ee:51:3c:4c:cf:
84:6d:2c:d1:ce:0e:8a:5a:20:00:66:3b:9b:dc:03:
2d:96:52:18:66:73:09:8e:f4:c3:64:51:9f:17:8f:
cf:04:0e:01:7a:b7:17:2d:40:2e:5a:42:c1:4b:1e:
cf:1b:3d:e3:48:7a:b1:24:40:17:54:f9:0f:0e:e8:
63:31:ef:fd:0b:e7:ec:3a:d0:ad:33:57:d8:9e:8c:
59:58:1e:01:1c:49:c2:e1:5c:e6:b4:f4:72:65:41:
60:16:0c:8d:82:1c:28:5d:9c:31:9e:c0:cf:cf:70:
60:2b:f2:0c:0a:da:11:3d:d0:eb:91:c5:5b:14:13:
25:ec:e7:24:a9:95:3b:6f:08:d3:9d:30:88:58:50:
1f:54:dc:72:03:60:d0:bb:09:5f:a5:b4:3a:44:ad:
f0:ca:af:13:c4:7a:38:92:d3:d8:a9:1b:7b:cc:0a:
87:91:74:18:64:7f:65:5d:f9:5e:aa:7f:bb:78:c3:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:1E:B4:AD:91:2E:1D:56:3D:D3:87:4B:B8:11:13:52:43:91:0E
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/ZJAetK2RLh1WPdOHS7gRE1JDkQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.161.0/24
Signature Algorithm: sha256WithRSAEncryption
89:70:7b:2a:b5:d0:17:be:43:7e:94:37:38:12:1c:d9:c9:cc:
c7:0e:b7:f3:8b:59:4d:f6:2f:a0:7b:95:32:ad:ee:1a:6c:01:
99:d2:e6:d9:1c:5b:0e:b4:cc:c3:44:c4:b9:f2:9a:4f:52:e3:
88:ef:5b:2f:43:31:f4:af:3e:72:10:08:c6:47:8c:75:38:62:
94:24:64:5d:28:c7:1c:22:05:fe:19:03:27:41:d1:43:d4:12:
24:c9:cf:5b:dc:74:69:de:36:18:61:0c:0d:8c:61:b8:7e:46:
c4:dc:97:ae:21:9e:4a:d6:47:be:09:5a:96:2e:68:f2:7c:45:
43:bf:6a:56:6c:e8:e8:4f:c0:09:91:52:a9:06:64:d5:11:b5:
fb:b3:a4:da:bc:ca:0c:aa:6f:a1:b3:3b:17:55:b1:90:25:7d:
7c:00:0d:1e:a7:8f:31:cb:95:ad:9c:23:a7:5d:16:97:3e:9e:
32:3e:47:9e:4a:0a:0d:7f:c5:5a:2e:72:e9:c7:32:25:f7:97:
7b:c8:ce:a2:ed:df:0c:0e:f7:28:20:61:5a:96:0a:57:1e:a2:
66:93:8e:50:ab:da:ed:a1:a7:5c:39:66:fe:49:19:ee:21:3f:
b0:dc:8b:4e:e6:95:0e:8b:c2:f1:9d:6c:96:4d:8d:36:ce:2c:
8e:89:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:32:20 2024 by rpki-client on console-fra.rpki-client.org