Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zYI7k90b0bVShXcOAXd952gcaVM.roa
File: zYI7k90b0bVShXcOAXd952gcaVM.roa (raw, json)
Hash identifier: r4OS0Bnuz8aAYpyQUqzOJZaC2Y+TLiIagVk9XPW6YMY=
Subject key identifier: CD:82:3B:93:DD:1B:D1:B5:52:85:77:0E:01:77:7D:E7:68:1C:69:53
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E42DB88B1DD8A133E1547222F66F6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zYI7k90b0bVShXcOAXd952gcaVM.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:42:db:88:b1:dd:8a:13:3e:15:47:22:2f:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd823b93dd1bd1b55285770e01777de7681c6953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:48:3b:cd:14:fb:78:89:6d:77:3c:93:73:
03:2e:aa:13:cf:e6:05:e8:ed:45:ec:df:21:57:7c:
c7:8c:af:09:e9:e9:0f:6d:13:f8:f2:db:9c:fc:15:
b0:65:23:a7:01:ff:63:1c:12:82:be:c8:2d:20:29:
13:4f:e2:d8:a2:a2:41:e3:60:57:68:63:9f:ff:c2:
1f:21:06:b2:83:a8:9a:4c:89:dd:ec:aa:88:9c:54:
a3:ef:53:22:21:2b:61:e2:35:77:51:21:35:e1:4b:
25:54:db:92:fc:8c:e7:64:13:8a:08:5e:94:cd:ed:
9d:d3:56:5d:f0:a8:b4:4d:80:76:85:05:65:c7:9e:
9a:c5:21:af:0a:84:f9:6e:a9:fd:40:02:79:03:3c:
29:14:6f:27:2f:b3:9b:52:79:8c:09:d4:a8:04:16:
bc:4b:51:d0:87:3a:31:94:cf:2e:3d:2e:b2:1b:b9:
60:5e:ae:1f:fd:79:b0:a8:d6:f9:4c:b6:1b:23:9f:
73:fe:b4:39:3d:2e:29:df:3f:88:ba:79:a5:61:8a:
b4:35:db:5b:de:13:25:3d:7a:24:47:bc:0c:42:d2:
22:e2:63:92:dd:49:f2:8f:8f:b0:df:79:63:6c:e9:
02:94:1e:1b:75:1b:6b:79:5c:2e:f2:9d:15:6a:de:
fe:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:82:3B:93:DD:1B:D1:B5:52:85:77:0E:01:77:7D:E7:68:1C:69:53
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zYI7k90b0bVShXcOAXd952gcaVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0-2.58.202.255
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ff:c6:69:2d:e8:be:7b:17:7f:72:bf:82:58:1b:a4:7e:60:
60:40:3d:2d:08:70:62:a8:b5:4d:93:24:18:9f:e6:88:59:9e:
8d:33:f0:5d:ca:e3:f1:2f:64:05:52:18:4e:57:6b:4a:fd:e9:
61:33:b1:0c:84:c3:05:20:40:a8:47:33:e5:d7:39:3a:05:10:
70:f6:73:af:86:c1:60:d1:df:5a:48:e1:51:e6:5a:4d:fc:c1:
d2:fa:9d:9d:b9:07:29:f3:77:6f:6a:b1:62:9f:9a:8e:69:4f:
5f:3b:37:f8:27:43:2e:c5:da:83:bb:3b:1c:1b:d7:df:03:77:
cf:be:64:d8:8a:4d:4b:58:70:c5:6e:31:58:3a:08:3d:72:fb:
e7:1f:25:c5:a1:f1:41:af:06:43:08:fa:34:95:b9:e8:d9:96:
e2:81:36:16:3c:61:03:37:98:54:dd:62:3f:0e:0d:85:6b:94:
32:43:36:8c:3a:5d:86:52:c7:a5:12:4e:e7:42:62:e0:a1:19:
a7:ad:5a:27:db:4f:15:b4:6e:a3:29:cf:1a:bf:e2:9f:88:29:
33:d6:6c:ee:a9:7c:f5:72:85:a5:c0:4f:46:de:df:85:07:0d:
d3:7f:2d:92:b8:a4:f4:66:42:4c:fa:06:bc:f9:38:94:b7:e1:
58:c2:b1:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:01:45 2024 by rpki-client on console-ams.rpki-client.org