Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/zikW0Lemf_XSV0Qm5fooGyzzfls.roa
File: zikW0Lemf_XSV0Qm5fooGyzzfls.roa (raw, json)
Hash identifier: vCN1lWjOIGrip2fHnrz1HpklhEMCBo8doyd59FYuKdk=
Subject key identifier: CE:29:16:D0:B7:A6:7F:F5:D2:57:44:26:E5:FA:28:1B:2C:F3:7E:5B
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 018CC2DB4ACBA43BA851D1E41E5BD4A3B118
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/zikW0Lemf_XSV0Qm5fooGyzzfls.roa
Signing time: Mon 01 Jan 2024 02:30:00 +0000
ROA not before: Mon 01 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201709
IP address blocks: 45.153.112.0/22 maxlen: 24
2a12:c380::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4a:cb:a4:3b:a8:51:d1:e4:1e:5b:d4:a3:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jan 1 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce2916d0b7a67ff5d2574426e5fa281b2cf37e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:e0:b0:6d:da:c3:33:bb:94:55:62:9f:bf:
cf:55:63:b6:5f:0f:a7:71:31:55:90:3b:05:59:fa:
12:7d:1b:ac:2c:59:26:ae:7f:e0:c9:25:c0:df:dd:
db:54:1b:95:bf:be:d2:65:ad:62:bd:14:15:59:f3:
8d:10:22:6a:c8:c5:12:ce:f6:4e:2f:1d:3f:30:18:
1f:85:71:f6:f2:d7:9e:8b:54:61:98:ae:ec:7d:05:
3e:4d:4c:81:bd:3e:0f:17:2e:c3:16:a6:2f:ac:22:
f3:a0:fb:bf:01:3d:2c:f7:02:8b:d0:93:eb:30:eb:
da:44:32:59:5c:6d:b2:06:da:43:88:29:22:30:e7:
05:6d:db:7d:23:93:bc:53:84:df:d9:f4:0f:1c:c0:
4c:24:b4:78:6b:ac:0b:32:d9:c2:fe:0b:1b:df:5b:
66:15:5a:6b:aa:4d:30:dc:9b:24:75:0a:af:85:85:
89:94:f2:46:e1:d7:8d:e1:c3:06:e8:12:e1:c7:80:
8d:4c:a0:84:2a:31:64:9f:48:ab:68:02:05:b8:ef:
be:34:65:ef:1c:42:a7:cd:d9:88:d4:1e:fe:f9:66:
45:d0:8b:8d:21:a2:6c:92:04:7e:f2:53:db:90:32:
9e:84:8e:54:ae:41:7d:fa:34:a1:1e:6e:7d:4e:07:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:16:D0:B7:A6:7F:F5:D2:57:44:26:E5:FA:28:1B:2C:F3:7E:5B
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/zikW0Lemf_XSV0Qm5fooGyzzfls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.112.0/22
IPv6:
2a12:c380::/29
Signature Algorithm: sha256WithRSAEncryption
5d:eb:e5:f6:0d:88:54:ec:45:33:5b:ea:cd:15:7f:41:e0:9e:
72:05:da:e6:bb:52:e5:49:28:f2:2a:2a:60:d8:52:dd:47:19:
9b:8b:b3:0e:04:83:f5:4f:29:dd:79:0a:8d:18:ce:a7:1f:d7:
5e:7d:68:25:b3:85:a3:3a:85:ef:4a:e7:44:3f:bb:c9:01:50:
07:48:71:6b:c9:e7:6c:33:dc:ca:b1:46:a2:99:0e:f3:3d:ce:
cd:b1:3a:4b:a6:64:e5:6a:c7:78:7c:60:ac:b9:b1:03:52:cf:
f1:fa:d9:fa:f9:1a:b0:35:0f:77:5e:70:ea:69:b6:8e:e4:4e:
45:8c:d6:73:fa:c5:ef:86:24:7c:dd:a0:97:64:7d:90:3d:77:
8e:7b:c7:4f:e6:f3:aa:5e:a3:4a:e1:0e:be:81:a5:66:13:3d:
9c:a1:67:76:df:f4:b7:db:a7:58:c8:1e:f1:77:9b:14:02:19:
e7:0c:a6:dd:5f:cf:35:6a:13:54:b1:88:35:aa:8a:c8:f1:72:
3b:32:4e:0d:e6:6c:82:58:39:ee:5a:a5:f2:f8:4c:75:69:3f:
2e:c1:c1:fe:65:e6:2a:92:95:91:91:02:b0:a7:88:8e:2f:45:
4a:29:65:dc:16:07:25:79:ce:e1:25:15:c0:1d:35:96:e2:b2:
00:f7:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:30:05 2024 by rpki-client on console-ams.rpki-client.org