Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa
File: N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa (raw, json)
Hash identifier: qZQrpyn6aWSV4kQaR+O5PVRIYSKD899TM8gSvZMHSU4=
Subject key identifier: 37:66:44:3C:94:FD:AE:85:5B:9A:ED:30:A3:E3:CF:65:AF:57:BB:27
Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial: 018CC34965F63EB3A374310E220A8D6BD60C
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201551
IP address blocks: 5.149.157.0/24 maxlen: 24
5.149.156.0/24 maxlen: 24
5.149.156.0/23 maxlen: 23
5.149.155.0/24 maxlen: 24
2a02:1710:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:65:f6:3e:b3:a3:74:31:0e:22:0a:8d:6b:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3766443c94fdae855b9aed30a3e3cf65af57bb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:c9:7d:84:ca:f6:9e:21:63:ae:64:b3:03:
29:9c:01:c8:02:1b:53:bf:04:b1:ef:c9:f2:36:bb:
63:f4:94:a6:62:ff:dc:f0:ea:20:52:d1:30:48:15:
ba:cb:7f:a8:0a:59:c5:83:ae:3a:09:3b:14:38:21:
7e:1b:f8:4d:7a:b9:18:74:bb:56:9f:ec:f9:a2:d9:
f6:55:57:72:3e:e5:60:62:e5:bc:7c:32:83:56:82:
a8:90:d7:8d:7a:c5:8a:c9:98:39:48:05:8d:77:94:
60:cd:3c:14:89:77:d1:8e:db:2b:b0:58:30:33:f9:
60:7e:a7:d6:cf:24:66:3d:b1:60:37:b3:0d:be:59:
0d:06:2e:c9:be:63:e1:32:c4:08:90:f1:6e:99:20:
77:a9:20:61:c3:95:0e:9d:3b:68:d6:7f:04:1b:6d:
93:e0:1d:6c:7c:31:a2:1d:8d:c3:e0:3f:a0:bd:20:
b4:61:59:82:60:58:a0:a2:c8:09:fc:ff:fa:d8:cc:
4b:a4:24:cb:6a:36:62:74:f3:81:15:2e:1f:56:3f:
9e:e5:48:dc:c2:ac:07:34:4d:cd:3d:39:df:40:6b:
2e:54:3a:ac:55:65:a0:48:3f:34:f3:0e:7b:81:52:
22:d3:7d:5b:c2:09:09:97:fd:eb:6d:ed:64:89:2a:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:44:3C:94:FD:AE:85:5B:9A:ED:30:A3:E3:CF:65:AF:57:BB:27
X509v3 Authority Key Identifier:
keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/N2ZEPJT9roVbmu0wo-PPZa9Xuyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.155.0-5.149.157.255
IPv6:
2a02:1710:6::/48
Signature Algorithm: sha256WithRSAEncryption
84:0c:7b:93:66:48:33:87:13:40:39:0b:d5:44:36:f6:a9:7d:
54:36:81:7e:d0:be:f9:c7:40:b3:22:43:a5:5c:b8:01:9f:07:
0f:8d:58:00:a8:1e:59:4d:48:b3:a2:71:d5:ce:02:44:b3:33:
a1:c8:9f:40:01:5a:5c:97:33:75:2f:b0:1b:ac:99:2a:09:1d:
bc:ac:a2:aa:b6:cd:37:06:c7:28:8d:a0:16:bb:dd:08:a7:cc:
5f:21:2b:f5:a6:ca:45:b2:c3:08:c1:85:f7:17:e2:e2:a4:5e:
9e:5d:03:dc:c0:ca:9c:73:ec:94:35:9c:4c:33:f2:0d:6c:4a:
11:3d:5f:9d:2a:1a:30:55:bc:02:9b:d4:d9:57:84:0e:75:cc:
9f:aa:76:9e:9c:ce:1a:d0:fb:2e:8f:62:ce:a5:e2:eb:da:31:
a5:31:b4:b2:a2:64:8e:36:8a:ef:6e:51:d3:1a:1a:19:d1:65:
1e:fe:dc:5a:95:09:d1:a8:95:87:09:13:18:ed:ca:d7:77:9c:
8e:1c:19:4c:20:de:0d:56:a8:fc:4f:20:44:c8:45:83:52:f1:
b0:29:d4:ef:af:80:9d:7e:86:02:c7:9a:58:fb:50:9e:93:bb:
ab:29:07:bf:23:81:ef:e2:ed:15:85:05:2f:ed:62:9d:50:1a:
48:24:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:17:25 2024 by rpki-client on console-ams.rpki-client.org