Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zq_VdPV3dCMPnifXuIje5QxyCo0.roa
File: zq_VdPV3dCMPnifXuIje5QxyCo0.roa (raw, json)
Hash identifier: hKO5B7ShkFYTNeO9scJneS5G8jnARgJjqiQe+QhYvuo=
Subject key identifier: CE:AF:D5:74:F5:77:74:23:0F:9E:27:D7:B8:88:DE:E5:0C:72:0A:8D
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019348E52C6937AD39DDA80F834227884E08
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zq_VdPV3dCMPnifXuIje5QxyCo0.roa
Signing time: Wed 20 Nov 2024 09:26:38 +0000
ROA not before: Wed 20 Nov 2024 09:26:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.248.0/24 maxlen: 24
45.66.249.0/24 maxlen: 24
45.150.108.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:e5:2c:69:37:ad:39:dd:a8:0f:83:42:27:88:4e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Nov 20 09:26:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceafd574f57774230f9e27d7b888dee50c720a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:dc:fa:52:1d:02:69:f7:e7:a0:ed:b6:3d:
b8:c4:b5:92:1a:3d:ad:ea:33:b8:19:dc:85:6d:ba:
d0:08:76:79:4d:11:9b:fe:34:ba:b0:3b:ab:35:f4:
53:cd:92:b7:0a:49:3f:af:89:1b:83:d9:b0:b5:f6:
1b:a8:29:ab:3c:4d:56:4c:e4:be:50:b9:72:14:16:
81:1b:97:a3:61:e2:c1:d9:70:47:76:fa:7f:d3:2a:
f7:75:6a:46:16:b0:88:2a:db:31:81:d1:0a:90:0c:
47:59:01:35:1e:0a:c7:b8:cf:ac:64:10:6b:22:69:
ba:32:ad:b5:26:8e:d2:10:6f:9d:f5:6d:5d:ab:05:
2e:07:21:33:f0:d5:c1:8e:ac:36:9b:46:da:35:cd:
1d:0d:01:4d:57:ba:da:78:61:d6:6a:c8:e9:1f:82:
14:7f:51:27:b1:07:64:cf:8e:ef:79:e3:66:db:91:
19:18:66:30:63:60:b3:73:c0:e5:20:29:f1:fe:49:
02:4f:20:1e:1c:bc:5c:d7:c5:1e:d1:4b:41:1b:9a:
f7:3a:e2:7b:1b:a8:98:b2:8a:42:cf:6a:fc:21:db:
9e:9d:ae:52:43:35:d5:24:1f:ff:df:0d:8b:bf:cb:
f4:41:26:b5:06:9f:08:cf:3d:1b:77:35:5a:95:53:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:D5:74:F5:77:74:23:0F:9E:27:D7:B8:88:DE:E5:0C:72:0A:8D
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/zq_VdPV3dCMPnifXuIje5QxyCo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
45.150.108.0/23
Signature Algorithm: sha256WithRSAEncryption
03:ca:e7:e3:df:0f:52:d3:f9:94:40:d5:98:16:c7:4e:48:cf:
e5:36:06:0d:14:ab:63:c4:af:71:0f:4d:7f:3d:a1:7c:00:58:
a8:b9:e6:a5:8e:ab:08:8e:e8:d5:54:78:08:75:3a:e5:ae:7e:
a1:4b:fc:08:04:22:41:76:d2:36:09:1b:48:b5:d1:0a:88:b3:
78:7c:2d:45:42:70:c9:ef:7f:92:d7:9f:25:3d:05:af:ef:eb:
84:6c:9e:2e:64:8f:41:6e:95:c3:17:6f:17:ee:2d:29:cb:d5:
1b:a4:c4:82:47:c6:6e:24:86:16:a3:14:fe:c3:09:0b:15:e8:
e9:d5:36:ce:09:fd:17:35:90:77:08:19:96:a8:d1:c1:24:7a:
f8:66:8b:d2:41:45:22:9b:e4:5f:ee:17:f1:38:84:e4:82:1e:
86:3b:b4:73:84:5f:08:f3:e4:d3:95:bf:17:c2:88:b3:f7:1c:
d0:6b:a5:65:e1:21:6d:30:e9:90:a9:b0:69:1f:a6:34:57:52:
d1:92:2d:2b:5c:28:e8:da:7d:58:7a:e9:54:e6:27:25:09:db:
59:08:6f:11:40:44:65:e1:43:68:ef:ad:5c:40:50:90:6c:70:
80:eb:8b:f8:ca:23:00:25:b2:f5:96:4b:68:0a:f1:26:ae:5a:
a5:23:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:08 2024 by rpki-client on console-ams.rpki-client.org