Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/zg8iWDnjaFCgVuIBkpxXuY2mKIQ.roa
File: zg8iWDnjaFCgVuIBkpxXuY2mKIQ.roa (raw, json)
Hash identifier: RY1GwX1UrZHg3j81XiL4Mxzv545F/bUkfn7Ka1U/jpk=
Subject key identifier: CE:0F:22:58:39:E3:68:50:A0:56:E2:01:92:9C:57:B9:8D:A6:28:84
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF74EA9F8AD0C6962570204C8E689
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/zg8iWDnjaFCgVuIBkpxXuY2mKIQ.roa
Signing time: Mon 01 Jan 2024 14:29:27 +0000
ROA not before: Mon 01 Jan 2024 14:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52125
IP address blocks: 46.19.70.0/24 maxlen: 24
185.166.198.0/24 maxlen: 24
94.198.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f7:4e:a9:f8:ad:0c:69:62:57:02:04:c8:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce0f225839e36850a056e201929c57b98da62884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:21:53:e9:f9:cb:f8:a0:70:69:7e:e4:55:
c3:6f:4b:7f:9c:e8:13:aa:52:84:18:ed:1f:8f:1f:
f1:d7:e9:ea:10:d2:1b:29:c3:1b:02:c9:9a:8b:a2:
d0:d3:e2:1b:6e:fb:6e:b0:af:c2:bf:b2:35:31:85:
c6:aa:e3:2d:a7:98:88:df:ee:88:cc:ef:f9:4a:83:
99:df:cb:1a:8b:de:04:97:2f:2c:72:b1:61:df:98:
60:0f:b9:e0:a0:5f:c1:48:5e:f4:0c:58:fe:9e:3d:
3d:9f:79:24:0a:7e:eb:24:96:27:f1:86:00:78:e0:
cb:d7:6e:73:f5:ce:d8:0e:8c:12:5c:df:7d:12:2e:
14:96:5f:d2:3b:15:b5:c8:23:7c:89:17:d7:1f:23:
6a:c5:3c:a9:07:23:6f:13:d6:15:82:f0:d4:3a:40:
8f:35:3d:3e:ea:60:f9:fa:fa:0e:95:50:a2:c2:48:
8a:29:ea:74:d0:97:ad:5e:0f:da:35:e6:fa:91:5d:
8b:0a:7e:e8:60:70:18:2b:37:36:9d:cf:e7:fd:c1:
b8:ab:83:31:b9:fd:1e:e0:a1:d3:ab:84:15:46:8b:
ae:e4:99:8b:24:fc:d0:6a:05:c2:09:46:50:ce:40:
ff:fd:e7:30:14:17:05:a8:29:26:a2:87:86:f5:1d:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:22:58:39:E3:68:50:A0:56:E2:01:92:9C:57:B9:8D:A6:28:84
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/zg8iWDnjaFCgVuIBkpxXuY2mKIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.70.0/24
94.198.222.0/24
185.166.198.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3b:92:26:ff:6e:0e:70:24:60:06:b2:a4:74:ba:e9:c5:66:
e8:fa:97:8c:2a:b5:d4:0d:4a:41:58:2a:31:0b:6f:7f:40:53:
48:ff:ab:af:03:08:8e:c2:ea:50:9b:1a:ff:01:f6:f0:55:69:
0f:d7:88:a9:81:c6:3a:e4:a4:1f:5f:fb:8b:fe:59:78:cd:5e:
3e:8b:19:53:41:56:37:2d:b4:da:fb:11:8c:26:2f:6a:e9:02:
29:63:af:29:9a:3a:85:00:2b:a2:4e:ff:40:ae:6a:82:e9:36:
7c:be:88:3a:8c:c9:d4:37:d7:48:16:8f:89:fb:c0:91:99:97:
77:e2:ef:55:3f:44:f1:bf:1a:e4:af:80:ce:1a:fe:d2:29:94:
c0:ad:2b:bd:fa:6f:c9:d0:35:b7:cf:b1:f7:e4:73:65:67:4a:
4d:00:23:95:ce:09:1b:17:2b:f5:f7:7a:29:df:7d:b8:89:4e:
09:6e:d3:25:8a:b6:24:24:ba:0b:08:77:c8:86:98:f9:8d:dd:
5f:51:91:f3:c1:7a:1a:c9:00:18:19:f4:82:f1:a0:c1:f2:73:
a8:0e:04:f1:e2:29:d6:99:46:47:c2:a0:fb:25:d7:73:a2:51:
45:55:9f:5f:6d:a7:7c:fe:79:9d:5a:34:57:ea:e3:68:40:1f:
d1:73:ba:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 19:16:23 2024 by rpki-client on console-ams.rpki-client.org