Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZDpLum3c_E7WQ1-8KaWsiHex3u0.roa
File: ZDpLum3c_E7WQ1-8KaWsiHex3u0.roa (raw, json)
Hash identifier: R10RuhwF9TUbAkAlaPI0uWzaKVvkAERJrTwnqfr8d+w=
Subject key identifier: 64:3A:4B:BA:6D:DC:FC:4E:D6:43:5F:BC:29:A5:AC:88:77:B1:DE:ED
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E411BDA0BEEE931E45ABCAB296C53
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZDpLum3c_E7WQ1-8KaWsiHex3u0.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210793
IP address blocks: 45.81.248.0/22 maxlen: 22
45.95.120.0/22 maxlen: 22
45.86.88.0/22 maxlen: 22
147.78.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:41:1b:da:0b:ee:e9:31:e4:5a:bc:ab:29:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=643a4bba6ddcfc4ed6435fbc29a5ac8877b1deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:13:28:c7:65:84:13:79:12:82:9a:f7:44:
87:c2:24:b8:8e:75:f4:43:f5:c9:73:7a:29:2f:bd:
bc:39:50:d5:0f:05:0a:05:a6:01:81:b3:c6:80:94:
a0:d8:a2:38:c5:f4:bc:8c:a7:09:c5:5d:1c:09:73:
c5:2a:0a:cb:d3:f6:3b:0d:23:f4:ee:64:e0:16:04:
55:4b:d8:1d:98:1d:ed:8a:e6:cd:4c:c1:de:11:a9:
50:59:d8:1b:61:06:34:86:1d:e8:4e:04:22:79:be:
e3:57:ed:01:ca:9a:85:5a:7e:70:1d:a6:db:76:6d:
52:13:49:34:44:40:ba:d2:4d:cf:cc:53:9e:8c:c7:
13:04:cc:20:45:07:40:c7:03:d2:8b:67:a0:0d:21:
bc:cb:1f:c0:13:a7:a0:38:1d:d0:2f:27:67:5c:06:
8a:c7:b5:c4:d5:5f:66:9c:a0:78:62:25:f4:7f:48:
15:19:47:19:a3:ba:72:75:23:99:93:8e:89:f4:60:
06:3f:78:74:b4:3a:ab:08:7e:06:78:85:30:73:69:
93:e6:82:be:89:fd:b9:04:ce:b2:32:40:e9:dd:1d:
b3:72:5b:2d:5e:52:13:ce:72:7f:6f:66:f0:a2:4e:
c3:4d:f2:44:10:d4:7a:cf:c3:f3:0b:5a:bd:87:55:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3A:4B:BA:6D:DC:FC:4E:D6:43:5F:BC:29:A5:AC:88:77:B1:DE:ED
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ZDpLum3c_E7WQ1-8KaWsiHex3u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.248.0/22
45.86.88.0/22
45.95.120.0/22
147.78.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c8:e1:71:b6:e9:9d:09:62:78:b8:11:38:43:b0:cf:18:81:
4d:2a:9f:dd:40:49:23:82:11:70:f6:cb:ee:86:b2:69:6a:81:
e1:48:fa:54:b0:3e:3f:e3:e5:c5:f4:08:f3:2d:37:87:dd:7d:
fe:bb:a4:1b:ba:0b:dc:66:7a:bb:26:b9:fe:00:ce:2c:12:0a:
e9:24:60:44:92:b0:03:cb:20:69:b5:d9:5d:65:2b:ac:1c:78:
a2:b9:e6:39:14:9f:e4:44:87:d9:90:b5:c0:7c:e3:13:84:97:
c6:0d:f7:e9:5d:68:fe:27:99:87:4c:16:c9:23:71:c9:1d:87:
f7:91:7e:c6:08:27:c5:f8:f8:cb:41:0c:0d:cc:8f:8b:cc:7f:
95:66:5d:7f:5e:9a:02:d3:f1:90:d8:97:cb:06:85:84:34:bb:
d6:bc:75:c4:01:65:ea:0b:11:88:f1:46:60:bd:cf:c2:5c:01:
8c:7b:54:49:b2:df:4e:5f:da:41:b6:c2:8d:d1:23:0f:a1:bd:
4d:dc:e6:ce:46:38:df:62:99:f8:fd:3b:16:22:ad:08:a1:65:
49:d1:0b:b1:f5:26:8c:d1:2f:69:10:14:69:2c:5f:fe:25:57:
54:43:e2:87:83:5c:f7:03:79:80:92:f1:2f:05:36:ef:75:0d:
cd:80:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:47:09 2024 by rpki-client on console-ams.rpki-client.org