Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zlamTACZtcuy7qN_hwNeewkha-c.roa
File: zlamTACZtcuy7qN_hwNeewkha-c.roa (raw, json)
Hash identifier: 6b5E7XDhrcjPM+jaAXtYgCgEoL4pKHLY0vvJ7DhuL9Q=
Subject key identifier: CE:56:A6:4C:00:99:B5:CB:B2:EE:A3:7F:87:03:5E:7B:09:21:6B:E7
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC49381B33A8D33928B61FE79E83C7BF7
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zlamTACZtcuy7qN_hwNeewkha-c.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 185.253.123.0/24 maxlen: 24
185.161.191.0/24 maxlen: 24
147.78.204.0/24 maxlen: 24
185.208.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:81:b3:3a:8d:33:92:8b:61:fe:79:e8:3c:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce56a64c0099b5cbb2eea37f87035e7b09216be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:33:18:cf:84:90:50:28:c4:eb:1b:a0:bd:
18:af:63:03:0d:8f:d2:0d:a3:5e:b5:66:d3:3c:f0:
c5:91:d6:17:53:9d:57:7a:fe:65:73:65:f4:9e:92:
73:9d:74:95:87:f5:17:ad:9a:e3:8b:53:5b:00:60:
d2:ff:c5:ef:25:e2:76:3a:93:ab:e7:bf:cb:e4:1c:
8b:07:40:1b:82:66:80:32:d1:62:f9:ed:28:73:46:
9f:23:f5:b9:23:17:75:13:17:40:59:bf:f7:dc:da:
cc:9b:a2:e4:bd:ae:24:45:9d:6a:5f:67:e0:b6:09:
4e:ea:94:ff:f0:45:68:ea:04:58:8c:72:d6:76:d8:
b3:af:e0:84:13:40:d8:d9:bd:e6:12:63:b9:19:75:
e2:6d:84:e2:9f:9b:7e:e2:c7:7d:ab:69:67:2c:3c:
e9:c0:e8:a0:ad:7f:14:2d:3a:e8:da:c4:a1:e3:07:
19:02:49:96:41:d5:86:ab:d6:91:18:6b:3f:d3:f3:
9b:e4:33:e1:ff:3c:27:57:26:6f:6b:d4:2f:ad:6b:
de:af:91:6b:cd:25:36:b3:d3:db:84:42:2e:8d:d5:
7a:ff:a6:7e:55:33:82:95:4b:01:a6:a3:a0:a8:32:
5e:40:3d:47:3a:b5:d8:5a:16:68:76:e8:6f:45:b7:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:A6:4C:00:99:B5:CB:B2:EE:A3:7F:87:03:5E:7B:09:21:6B:E7
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/zlamTACZtcuy7qN_hwNeewkha-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.204.0/24
185.161.191.0/24
185.208.155.0/24
185.253.123.0/24
Signature Algorithm: sha256WithRSAEncryption
10:73:75:2a:ff:05:3c:96:1a:87:e3:d6:e8:30:66:44:03:70:
0f:3a:df:86:d2:7a:87:89:79:1b:37:66:05:d9:19:1e:4f:10:
69:67:89:63:ff:e1:85:40:10:6e:f6:36:b0:b7:1f:dd:d3:98:
6c:fa:c1:89:df:61:6e:d0:86:c7:2d:1d:1a:b2:67:ef:22:df:
b7:a2:5b:ca:66:63:12:be:5d:2b:80:22:09:31:2d:6b:38:6b:
60:96:3f:49:8f:33:67:92:49:20:8c:d2:98:35:07:bd:db:d5:
47:f4:3e:e5:d1:64:61:a7:73:ca:cd:c6:d4:7c:17:e2:e3:7d:
92:f5:ea:bf:74:52:da:e4:93:72:fa:1c:b6:9d:54:99:63:1b:
44:8d:57:13:c0:5f:d6:5a:2a:44:cf:09:61:95:62:b1:fe:43:
98:1a:35:e4:e6:6f:3d:d6:3e:c1:c6:94:a0:dc:31:1c:b2:36:
f1:fb:5c:3b:94:86:b4:cd:51:79:30:69:ef:a4:26:47:c1:9a:
45:52:8c:fe:a8:b0:30:62:72:bb:bd:4f:2b:df:65:b3:eb:ac:
7d:ba:17:6d:3c:4a:73:2e:e9:c8:50:fc:cd:f3:36:c1:a3:ff:
08:99:66:60:1c:00:54:17:3c:42:b4:a9:a5:71:bb:7e:02:6b:
c3:72:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:52:57 2024 by rpki-client on console-fra.rpki-client.org