Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/zQkZqMPCozZVfQhFsgbo786mBHw.roa
File: zQkZqMPCozZVfQhFsgbo786mBHw.roa (raw, json)
Hash identifier: F0CtGv5xgfX+56kjCInJvA2bZ+gcdLYbSJbaNDuGYrA=
Subject key identifier: CD:09:19:A8:C3:C2:A3:36:55:7D:08:45:B2:06:E8:EF:CE:A6:04:7C
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 018CC94E4F5C18ADF157171242A4F66C850E
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/zQkZqMPCozZVfQhFsgbo786mBHw.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48149
IP address blocks: 94.253.80.0/20 maxlen: 20
2a01:4207::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4f:5c:18:ad:f1:57:17:12:42:a4:f6:6c:85:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd0919a8c3c2a336557d0845b206e8efcea6047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:e1:bc:96:61:7a:c2:ea:00:c7:70:5b:97:
9f:17:af:30:08:e9:60:c9:3a:7d:a8:54:0f:ec:98:
f8:12:90:ff:d4:b7:81:57:38:bc:ca:79:ae:80:6c:
3a:99:67:d0:aa:e9:01:75:1a:ee:69:2e:59:09:1d:
86:63:41:b6:c4:8e:ff:18:30:08:a1:f8:1f:58:98:
7f:66:9f:25:f5:df:19:fc:6d:8b:aa:9a:5d:45:b2:
14:e5:0e:a8:9c:d8:33:41:76:f9:18:1b:62:c8:a5:
d6:9f:f2:97:98:c2:06:30:4f:cb:18:ec:ee:81:91:
44:10:34:f7:d3:4c:70:c9:a2:2e:7e:d2:d3:f8:fa:
f0:97:85:40:c8:36:bb:7d:a4:d1:24:0b:72:74:d8:
d4:9e:89:08:9d:72:2c:b3:aa:68:07:2d:82:02:b0:
ab:73:3d:e9:43:c7:63:2e:f5:f3:c4:d0:2c:32:07:
c7:f8:6a:88:54:46:ee:a5:c0:b2:9f:b0:bd:4d:ef:
a4:38:de:41:0b:5a:56:0a:86:d8:f9:c0:10:93:2b:
38:db:f9:0a:22:ea:09:f1:6f:cb:22:3e:cc:f4:ba:
ca:07:22:77:31:ff:da:50:3b:3b:eb:81:d3:bc:da:
1b:e4:33:00:66:9e:a5:2e:8a:93:88:72:ad:eb:fb:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:19:A8:C3:C2:A3:36:55:7D:08:45:B2:06:E8:EF:CE:A6:04:7C
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/zQkZqMPCozZVfQhFsgbo786mBHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.253.80.0/20
IPv6:
2a01:4207::/48
Signature Algorithm: sha256WithRSAEncryption
54:63:e8:9f:5d:1c:33:0a:53:05:3d:e3:9d:43:b1:26:85:34:
5b:cd:10:5b:42:5c:6c:7c:04:cb:80:17:a6:43:54:17:20:c6:
36:44:10:8c:2f:13:54:ee:57:e9:5c:35:7c:2a:d7:4b:68:59:
16:20:fa:b0:76:42:64:1d:c2:bf:f8:5e:98:77:89:23:96:73:
a6:f9:ad:27:bb:b6:b5:6b:38:12:c0:d1:2e:92:31:99:25:4a:
c7:9c:e1:ee:15:52:fc:a2:be:a1:36:ed:71:63:bb:bb:df:81:
4e:96:21:bc:b1:eb:4f:86:30:48:80:49:70:a2:cf:d6:c5:17:
57:9a:86:91:84:7c:68:be:13:fe:f3:42:28:05:0d:3b:21:0a:
9c:43:24:d0:58:6f:90:68:40:0f:43:f4:7b:9b:e6:f4:52:b1:
71:0f:46:68:78:02:f1:a9:26:9e:ff:43:fc:6e:c4:16:ab:82:
c1:84:90:1a:e3:24:f8:72:0b:c7:8d:5a:e8:ab:f8:fb:43:cc:
1e:fb:c0:f8:79:c7:1b:5c:88:15:85:92:84:c1:86:bd:44:76:
c1:97:a8:7e:8a:7c:fb:93:d1:10:25:76:ef:b0:8c:b2:d4:36:
82:05:ea:b4:7d:32:29:f8:07:ad:07:bb:68:1d:c9:15:2e:6f:
f2:23:47:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:11 2024 by rpki-client on console-ams.rpki-client.org