Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/ZP48IiYpdP99LWwYLKHRryB7cJg.roa
File: ZP48IiYpdP99LWwYLKHRryB7cJg.roa (raw, json)
Hash identifier: VLWXOWFfEcw9usV8wFb/l0C+PPZmI6dpdtKJPfPGv08=
Subject key identifier: 64:FE:3C:22:26:29:74:FF:7D:2D:6C:18:2C:A1:D1:AF:20:7B:70:98
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 018CC9BCB005256EFEE3CFFA394671540C2D
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/ZP48IiYpdP99LWwYLKHRryB7cJg.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51918
IP address blocks: 83.151.224.0/22 maxlen: 22
83.151.224.0/19 maxlen: 19
83.151.228.0/22 maxlen: 22
83.151.232.0/22 maxlen: 22
83.151.236.0/22 maxlen: 22
83.151.240.0/22 maxlen: 22
83.151.244.0/22 maxlen: 22
83.151.248.0/22 maxlen: 22
83.151.252.0/22 maxlen: 22
46.37.32.0/22 maxlen: 22
46.37.32.0/19 maxlen: 19
46.37.36.0/22 maxlen: 22
46.37.40.0/22 maxlen: 22
46.37.44.0/22 maxlen: 22
46.37.48.0/22 maxlen: 22
46.37.52.0/22 maxlen: 22
46.37.56.0/22 maxlen: 22
46.37.60.0/22 maxlen: 22
185.14.208.0/22 maxlen: 22
2a01:5d00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:05:25:6e:fe:e3:cf:fa:39:46:71:54:0c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64fe3c22262974ff7d2d6c182ca1d1af207b7098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:c2:b6:15:bd:be:e3:45:10:16:f6:a7:81:
57:05:d9:d9:7a:94:1d:52:26:18:8c:b3:e1:0e:05:
1c:78:81:17:1e:69:b8:30:89:5f:3e:e9:31:b9:9d:
65:76:e3:94:59:10:dd:2e:9c:31:87:4b:05:01:e0:
21:d3:05:e9:47:69:8a:51:a3:97:d4:76:1a:d8:b0:
9a:6f:50:ad:d9:fb:a4:2a:a8:cc:38:d6:b3:78:6f:
ad:ad:95:cc:f7:11:e2:cb:4c:0a:53:75:cd:3a:dd:
02:7f:db:9d:fb:c2:f0:7b:0c:d5:ee:d5:58:59:96:
d2:5a:d6:29:15:1e:fb:04:0b:8b:6b:b5:d4:0c:03:
24:9b:90:d3:d1:90:56:9c:01:aa:2d:b1:ab:a9:4c:
03:a1:36:a0:aa:17:f6:eb:82:f8:b4:a3:4a:70:e7:
9a:12:8a:9e:c9:12:70:32:fe:db:ea:21:49:30:1a:
b3:02:01:35:3c:9f:1f:2d:e1:1c:17:88:9e:28:ce:
2b:7d:34:fa:bb:cb:32:3a:41:64:4b:b2:25:3b:85:
da:02:91:7b:7a:ea:1a:7f:f3:da:57:3b:44:c2:53:
fb:a4:d3:68:c5:92:0e:0e:2c:7a:c2:54:c0:0f:8a:
8f:63:26:bb:e6:0a:d6:29:35:b7:1f:1b:73:62:56:
e5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:3C:22:26:29:74:FF:7D:2D:6C:18:2C:A1:D1:AF:20:7B:70:98
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/ZP48IiYpdP99LWwYLKHRryB7cJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.32.0/19
83.151.224.0/19
185.14.208.0/22
IPv6:
2a01:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
1f:19:93:9e:37:f4:ea:6b:c9:25:15:cc:ad:3b:6b:cb:75:08:
94:bc:14:1c:ad:f0:83:59:43:ad:ec:cc:93:cf:11:ec:57:f4:
65:df:61:68:17:01:1d:38:db:f0:13:ab:5a:dd:f1:31:0c:9c:
22:78:23:45:8b:fc:e4:58:6a:e0:3d:3f:8f:bd:85:db:45:ef:
ce:4b:28:3b:68:c7:fb:63:5a:95:17:d5:b2:19:85:0f:f7:1d:
4f:a0:bb:5f:1c:1c:32:f3:11:45:3f:67:8a:72:3c:d3:bb:c5:
19:28:bc:57:54:f7:a0:48:14:c5:cc:5a:6f:60:47:06:7e:45:
24:f8:51:98:7c:cc:82:98:09:a3:ec:b3:b1:ba:95:fb:52:5b:
75:c1:6a:87:d4:dc:2e:3e:d2:c8:c6:31:38:0a:73:50:46:e1:
f6:10:54:7a:96:09:93:00:03:56:db:88:37:af:fa:32:4a:80:
6b:34:06:f5:1c:63:b9:c7:b2:f3:63:e8:50:23:b9:d0:41:9c:
24:04:33:b7:55:1f:52:fb:15:51:17:6b:eb:ad:d5:59:84:19:
c1:36:f3:a5:3d:c7:40:af:fc:18:5c:f0:d0:ea:cf:3b:39:c4:
20:8d:57:fc:3b:94:c7:1b:bf:28:62:62:c0:27:cc:0d:32:c0:
c5:b1:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:07 2024 by rpki-client on console-fra.rpki-client.org