Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/1-zAQrbY5WEmS-hcGPhopoNT3oHY.roa
File: 1-zAQrbY5WEmS-hcGPhopoNT3oHY.roa (raw, json)
Hash identifier: PwJiOXo7BNk0E6flfVEGHsrxVYIDdxXOBZVSUeW2NYg=
Subject key identifier: FB:30:10:AD:B6:39:58:49:92:FA:17:06:3E:1A:29:A0:D4:F7:A0:76
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 018CC42460E7A32B179B6C6E9FEA8835A2CF
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/1-zAQrbY5WEmS-hcGPhopoNT3oHY.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207937
IP address blocks: 45.66.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:e7:a3:2b:17:9b:6c:6e:9f:ea:88:35:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb3010adb639584992fa17063e1a29a0d4f7a076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d8:53:f7:cd:2a:c9:b5:de:da:24:d3:5a:76:
35:2a:6e:2e:ba:93:ea:2d:0c:2d:4d:fd:65:8b:d6:
9c:01:8d:8e:be:a3:03:a8:29:06:ec:9c:e2:01:c3:
da:01:8d:09:04:0e:5e:67:51:4b:a5:9e:03:eb:c5:
36:f9:41:26:43:46:c7:7e:37:44:81:67:b4:9d:7e:
27:cf:0b:bd:a7:15:c0:3d:8e:3b:4f:b5:a5:fe:bf:
54:7f:30:57:c3:5b:e7:8c:16:26:5a:51:c6:f6:e9:
aa:ca:64:6c:cb:94:49:7a:2a:a8:93:70:f2:31:36:
66:fe:e5:29:3c:71:37:e3:77:15:32:de:bf:ae:c4:
c1:a9:a1:df:6e:40:0f:83:cd:60:ce:ca:f4:3a:5b:
bd:bf:6c:da:b5:eb:73:43:c2:8e:cb:31:ce:fa:6a:
b1:d7:83:c3:6c:66:41:1f:78:a8:a6:4f:f7:c9:f0:
16:67:d1:ef:6f:45:8e:88:37:0b:0e:10:4c:ec:c0:
f7:43:33:da:8f:58:d6:1b:0d:97:a1:bb:bb:3a:9a:
6f:cd:0a:a2:19:08:20:72:fd:d8:30:79:d3:d4:d2:
af:ae:21:43:5f:a5:36:e8:be:1b:bc:0a:78:e6:dc:
17:16:35:f0:c3:90:ab:e9:90:35:f2:6d:f2:a5:5c:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:10:AD:B6:39:58:49:92:FA:17:06:3E:1A:29:A0:D4:F7:A0:76
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/1-zAQrbY5WEmS-hcGPhopoNT3oHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:c2:87:75:08:71:94:2c:81:35:2c:b1:91:78:c1:7a:de:97:
bf:fe:0c:67:41:f6:6a:be:62:15:f9:56:47:1c:93:89:9a:7f:
2c:0c:a6:77:f4:4d:89:c0:5f:a6:18:fe:b4:df:a6:85:ee:b1:
f1:27:1e:d2:ea:ea:8f:be:49:5a:c2:2d:d9:79:57:7e:d1:9f:
d1:d9:74:cf:b4:55:a4:ef:5d:f1:bf:36:68:f6:9f:e4:06:11:
38:42:47:45:79:cb:d4:b9:7a:57:2d:1f:9b:fd:c3:49:8e:b9:
45:94:46:00:c4:5c:2d:15:21:ff:43:67:03:ab:a9:ac:23:06:
44:e7:d4:ec:8d:de:ac:5c:b7:93:01:e4:6e:94:76:49:1c:31:
cf:c1:89:ea:fa:19:43:7d:10:98:cd:c9:b4:cf:5d:23:31:40:
1e:38:d7:63:ed:f5:4e:20:b1:35:a9:a1:3a:0a:77:49:6d:a0:
4e:e6:3d:ca:e7:1f:7d:07:ec:50:36:25:7a:0e:b2:db:f3:9b:
70:b6:62:cd:0a:72:92:c9:9c:bd:28:6d:46:75:fc:59:2c:4d:
54:41:8f:58:23:b7:8a:1a:61:47:9c:68:99:b6:4e:84:0c:f9:
cb:f7:6d:de:4b:34:00:4e:6f:98:b3:ba:59:11:b7:05:ae:60:
b6:cc:f1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:54:52 2024 by rpki-client on console-fra.rpki-client.org