Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zn4rPPPh0FkO7_ZWe1Az6qxqPHY.roa
File: zn4rPPPh0FkO7_ZWe1Az6qxqPHY.roa (raw, json)
Hash identifier: V/w6NjwFhS8MXwL9Ukrh7qokUTYLwWQeGLcEC6GShl4=
Subject key identifier: CE:7E:2B:3C:F3:E1:D0:59:0E:EF:F6:56:7B:50:33:EA:AC:6A:3C:76
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01912CBD42A71C8D324411B4D96C8352F2C0
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zn4rPPPh0FkO7_ZWe1Az6qxqPHY.roa
Signing time: Wed 07 Aug 2024 12:08:06 +0000
ROA not before: Wed 07 Aug 2024 12:08:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204427
IP address blocks: 37.148.169.0/24 maxlen: 24
37.148.170.0/24 maxlen: 24
37.148.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:bd:42:a7:1c:8d:32:44:11:b4:d9:6c:83:52:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Aug 7 12:08:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce7e2b3cf3e1d0590eeff6567b5033eaac6a3c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:29:09:16:95:59:f0:dd:b9:7e:53:a4:80:
e5:60:3c:5a:59:1b:ac:00:c1:4b:1a:5d:dc:a7:3a:
6b:0b:a4:40:48:7a:0b:16:39:7c:7f:1b:dc:ec:0c:
3a:be:7f:0d:9c:47:8c:3e:21:5a:c0:bf:8b:7b:f1:
43:cc:b6:2f:82:69:9d:11:18:99:22:24:80:4f:1a:
cc:cb:b0:e4:52:86:3a:46:c9:6f:a0:d3:6d:c8:2e:
d7:ae:cb:5d:3c:e3:c7:c6:3c:03:f1:d8:2c:f5:27:
44:d7:fe:96:99:4c:78:7a:c8:d0:c6:72:ae:b1:b7:
43:da:2e:1a:c6:de:fe:12:e6:33:6f:a7:28:98:58:
cb:0a:0f:42:8b:0f:be:fc:89:a3:27:1d:22:ca:fd:
4a:bd:ab:18:1e:62:e6:40:c7:dc:ec:b0:d2:90:f2:
c9:27:80:33:35:6d:00:c9:09:cc:90:2d:6a:b5:98:
27:0c:2c:bf:9c:02:ec:28:0c:69:59:4c:a2:5b:a0:
8b:6e:92:e9:56:1e:ab:4d:d9:6f:97:c3:0b:90:6d:
12:e4:e3:61:6e:27:20:3f:21:94:28:26:4e:7e:bf:
9e:df:e7:c4:93:f8:52:39:4e:f2:4c:67:0d:48:4a:
1c:b0:dc:43:50:8a:cd:a4:c0:1c:85:0e:76:32:fa:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7E:2B:3C:F3:E1:D0:59:0E:EF:F6:56:7B:50:33:EA:AC:6A:3C:76
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/zn4rPPPh0FkO7_ZWe1Az6qxqPHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.169.0-37.148.171.255
Signature Algorithm: sha256WithRSAEncryption
13:d1:c8:f7:a0:61:5e:39:69:71:70:3a:02:07:17:79:38:3f:
fb:cc:c9:5f:51:58:fc:3e:a7:49:27:7f:e8:b4:af:1b:17:ca:
d6:92:df:7e:1f:33:52:9f:a7:9c:90:fe:bd:d2:fd:10:02:1b:
6b:e5:79:f7:a2:99:d4:d2:da:ce:9d:6d:b3:d8:1d:d3:a4:a4:
7a:b4:bc:27:5d:5c:08:da:5c:61:46:04:fe:b6:68:d0:54:80:
77:62:48:ed:78:21:bd:0c:40:7d:60:e2:3f:e1:86:89:d2:18:
71:40:d1:77:18:db:ea:21:7a:43:cf:68:9e:62:32:16:7b:96:
48:76:f5:58:38:fa:28:bc:37:44:df:3d:bc:a4:17:bf:fc:b5:
52:d3:0e:03:4c:aa:3e:d2:88:0b:3b:b3:b8:f8:d4:6e:33:09:
3e:cb:3f:c1:21:02:02:9a:6b:37:ed:70:9d:f6:32:e8:8f:00:
88:ac:30:e6:94:c6:86:e2:f9:d2:4b:dd:3a:76:ad:ec:4e:62:
0f:ed:bc:af:46:7b:eb:ac:b8:25:33:22:5f:b5:2f:55:08:1c:
da:ef:52:84:ba:dd:69:3a:1e:cb:42:1d:d4:d9:f5:a9:21:65:
bd:41:48:7a:ef:da:5b:9b:79:89:9f:21:97:47:a7:f1:a0:c6:
83:32:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:39:32 2024 by rpki-client on console-fra.rpki-client.org