Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/zBMTpdA1gq4ZMQdkb-pniMa2Uwk.roa
File: zBMTpdA1gq4ZMQdkb-pniMa2Uwk.roa (raw, json)
Hash identifier: +ex7NU52M7cJNgCzeWWG7z3N3w1MSSnyr5hFZpoLlbI=
Subject key identifier: CC:13:13:A5:D0:35:82:AE:19:31:07:64:6F:EA:67:88:C6:B6:53:09
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 018CC8DE17357E6AB04D6E62B0422DC84F05
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/zBMTpdA1gq4ZMQdkb-pniMa2Uwk.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207876
IP address blocks: 192.109.210.0/24 maxlen: 24
192.109.219.0/24 maxlen: 24
192.109.217.0/24 maxlen: 24
192.109.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:17:35:7e:6a:b0:4d:6e:62:b0:42:2d:c8:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc1313a5d03582ae193107646fea6788c6b65309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:2c:ee:f2:9e:4b:a8:25:0e:f6:b7:0a:6d:
83:94:d7:2e:54:52:5d:00:df:97:2f:82:ed:48:42:
10:3c:be:79:62:e0:06:4d:c3:dd:5b:af:32:fc:65:
1a:6b:c4:28:de:e9:f6:18:c8:27:27:d0:67:fe:98:
6a:e5:c0:9c:1e:cb:46:16:c9:dc:f5:c9:2d:6b:9a:
c0:f6:e1:24:4e:f9:78:b0:7b:5c:d3:83:1f:9e:85:
01:20:b9:e0:91:9b:81:61:fd:cc:6b:76:b9:da:4a:
55:c5:de:0d:66:a1:a5:1b:50:3d:4f:8d:76:b8:3a:
f3:26:27:f4:ec:9e:5a:e9:0d:14:55:64:c3:a6:25:
57:df:f6:e8:09:7a:64:f5:2e:9e:b4:39:43:dd:9f:
ac:22:1c:45:bc:c7:b3:1d:d5:d4:d5:91:5c:b8:ad:
80:25:0b:d0:2c:cc:e1:c8:85:f2:33:db:78:32:fe:
dc:fc:74:90:d1:2d:a6:7b:71:16:ce:b5:75:8c:0d:
93:11:c7:7a:ef:78:6e:7e:af:b5:8e:f2:2e:80:cd:
98:f6:32:93:f8:60:c3:23:22:5e:4a:93:a0:72:3b:
55:32:19:7b:a2:45:9e:60:de:4a:2e:68:e3:b5:89:
fc:26:84:93:c7:97:ec:a6:a8:2b:62:5c:2a:70:b6:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:13:A5:D0:35:82:AE:19:31:07:64:6F:EA:67:88:C6:B6:53:09
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/zBMTpdA1gq4ZMQdkb-pniMa2Uwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.210.0/24
192.109.217.0/24
192.109.219.0-192.109.220.255
Signature Algorithm: sha256WithRSAEncryption
7c:80:30:d4:88:09:a9:17:2d:49:29:e1:67:b2:2d:c7:0d:10:
f8:b6:c1:6c:2d:a3:78:5e:a2:fe:06:35:c6:5a:89:b2:7a:70:
83:c7:60:7f:5a:a2:e8:56:31:d2:79:fe:9a:98:29:68:9c:08:
78:fd:ac:7c:da:e2:d4:d1:e3:d5:32:90:46:b0:41:8b:7a:64:
52:a3:c9:8d:c4:ee:6a:f1:5f:ed:03:e7:80:78:1f:e7:7a:32:
ac:65:7d:81:d7:cb:5d:3a:56:4a:68:8c:17:08:39:9e:ef:92:
2a:1d:d7:7c:f4:f0:86:cb:59:bc:48:1a:6c:ee:ec:3a:f9:12:
6a:28:5e:b6:13:26:af:c6:3a:74:67:01:c8:e5:5e:54:1f:13:
b4:7a:80:8e:59:4a:68:5b:34:bd:97:90:a8:70:de:65:f0:36:
0e:24:80:29:19:f8:1d:75:80:0e:a3:56:a0:37:8a:93:cb:9c:
f7:05:4d:00:88:9f:b0:5e:d0:ed:36:03:46:a1:4f:f9:57:b6:
e3:9a:a2:58:28:e3:ed:5e:3f:65:e6:f3:3f:64:d2:bc:36:2d:
1c:1e:21:6e:93:63:dc:2c:0a:3c:d0:f4:9f:7f:ba:41:ea:94:
b4:4f:dd:2a:e1:ea:e6:ae:03:8a:68:41:84:f8:5d:33:a1:a3:
19:ae:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:00 2024 by rpki-client on console-ams.rpki-client.org