Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Zdk8eoDX-vo8Li_z5Tv7WXP8fJ4.roa
File: Zdk8eoDX-vo8Li_z5Tv7WXP8fJ4.roa (raw, json)
Hash identifier: WiuUr0iaUFE7sB0UL9ZosdAItIKr11RXPQKKBpFm/t8=
Subject key identifier: 65:D9:3C:7A:80:D7:FA:FA:3C:2E:2F:F3:E5:3B:FB:59:73:FC:7C:9E
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018E861D35CE9556A991A283D9AFEE41C212
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Zdk8eoDX-vo8Li_z5Tv7WXP8fJ4.roa
Signing time: Thu 28 Mar 2024 17:30:44 +0000
ROA not before: Thu 28 Mar 2024 17:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 84.54.0.0/23 maxlen: 23
84.54.2.0/23 maxlen: 23
85.8.144.0/23 maxlen: 23
85.8.146.0/23 maxlen: 23
85.8.160.0/23 maxlen: 23
85.8.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:1d:35:ce:95:56:a9:91:a2:83:d9:af:ee:41:c2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 28 17:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65d93c7a80d7fafa3c2e2ff3e53bfb5973fc7c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:57:ae:6f:15:7b:23:d2:6f:a7:2e:07:df:
15:76:5c:f3:17:65:d6:b8:6b:70:b9:46:3a:bc:3f:
b2:49:f9:62:69:b8:24:62:4c:b7:c3:55:ee:55:63:
f1:85:41:82:c2:9e:80:97:0b:b7:49:8c:bf:81:ce:
9c:f7:9c:47:52:06:42:78:75:10:de:65:2f:34:1f:
10:92:0f:49:6c:54:2c:28:c0:6c:6d:e9:78:bc:9a:
f8:e9:f8:bf:af:d2:0d:9b:f7:28:4c:27:34:00:b2:
8b:5a:de:ae:2b:a8:ef:84:5e:8d:d7:b9:2f:a5:94:
ab:6f:96:df:db:b9:b2:26:f8:a3:8d:94:d2:ca:a0:
a7:03:d9:a6:37:33:98:3e:19:97:7c:b5:93:02:1e:
ff:53:a5:c1:60:3b:ce:99:0d:34:a2:9b:c3:42:87:
e2:b5:6b:59:59:43:ae:e8:40:cc:c4:24:2c:a9:b8:
9e:1b:82:32:5b:63:93:54:a6:6b:4c:85:71:8f:19:
96:b5:de:bf:ef:1e:88:44:45:81:10:d6:98:14:48:
2a:c0:ad:9c:f4:c2:77:3e:61:e7:b4:a1:ca:3f:ed:
61:20:a6:ce:27:71:40:ed:36:05:ea:e2:f3:1a:6d:
bd:01:fe:27:e3:4c:b1:97:44:35:16:3c:a9:11:5e:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D9:3C:7A:80:D7:FA:FA:3C:2E:2F:F3:E5:3B:FB:59:73:FC:7C:9E
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/Zdk8eoDX-vo8Li_z5Tv7WXP8fJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/22
85.8.144.0/22
85.8.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:48:35:ef:10:61:43:d9:ca:a9:0e:dd:05:fd:03:9b:6f:30:
fe:aa:9f:5b:f7:ec:ed:cd:d8:90:6e:ed:5c:4a:cf:b5:d1:e5:
d7:5b:74:1d:73:b0:e5:ea:1f:c4:37:43:d6:d7:c5:48:64:87:
fa:78:6b:dc:6e:9c:5a:47:4d:6c:30:03:eb:c8:7c:8e:0d:d8:
62:6b:6f:d5:ab:21:5d:5f:28:78:46:b5:c7:71:8e:77:ef:db:
1b:e1:c3:8e:22:85:f8:13:06:e0:b6:ff:03:33:49:ec:14:5e:
c3:85:b3:ab:6b:0e:76:4d:af:25:3a:76:cd:ce:5d:29:d4:f9:
e8:01:da:6e:e9:8a:e8:6a:fd:32:32:c9:57:57:68:4b:57:28:
57:39:69:22:48:dc:00:60:88:0d:ad:71:21:c3:c3:96:c0:50:
ca:7f:35:31:a3:40:33:10:82:53:f6:58:b4:03:3c:5e:b5:1f:
72:e1:fa:13:39:61:cf:60:22:41:85:d5:77:3a:a0:03:f8:a8:
19:a0:d8:2a:52:f8:14:2a:36:95:53:91:01:ee:5f:15:b7:3d:
7f:f2:fc:39:ad:18:54:99:17:bf:bf:d6:b9:1d:26:48:be:da:
b0:81:0c:ac:39:a9:58:67:0c:ca:55:9e:91:79:71:d1:d0:b6:
af:33:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 13:34:36 2024 by rpki-client on console-fra.rpki-client.org