Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/PZ8VGfD8dCKgtMNCKeMwzFS1a5A.roa
File: PZ8VGfD8dCKgtMNCKeMwzFS1a5A.roa (raw, json)
Hash identifier: W28bhgFIvYygM2f5SidrBKkrsrCcqLhgIicQPmpu7qA=
Subject key identifier: 3D:9F:15:19:F0:FC:74:22:A0:B4:C3:42:29:E3:30:CC:54:B5:6B:90
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 0190EA4E6687FA7986955FCA32DF4B72F9A0
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/PZ8VGfD8dCKgtMNCKeMwzFS1a5A.roa
Signing time: Thu 25 Jul 2024 14:32:04 +0000
ROA not before: Thu 25 Jul 2024 14:32:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51616
IP address blocks: 45.9.224.0/22 maxlen: 22
185.61.180.0/22 maxlen: 22
185.149.32.0/22 maxlen: 22
185.149.32.0/23 maxlen: 23
185.149.34.0/24 maxlen: 24
195.95.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ea:4e:66:87:fa:79:86:95:5f:ca:32:df:4b:72:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Jul 25 14:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d9f1519f0fc7422a0b4c34229e330cc54b56b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:86:6e:8c:a7:c0:0f:81:30:15:53:40:7a:
15:2e:bf:ce:51:76:74:5f:64:8d:d9:ff:cf:44:64:
2d:41:ec:e0:b0:82:53:42:fa:69:0e:af:bd:75:47:
80:a1:e5:5f:09:a9:98:78:c0:e1:cf:a6:6f:95:d0:
d3:10:4b:fd:3d:8a:55:9c:38:a5:bc:64:98:3e:ff:
cf:53:fe:15:c6:81:4d:f0:8e:9d:33:fd:6f:46:18:
43:11:d7:51:29:7a:41:84:4e:62:16:68:fd:09:2a:
31:cf:bf:89:fb:5c:7b:3f:61:ee:20:a6:f7:ce:9e:
d9:9c:52:9a:17:eb:af:6f:7b:6e:79:de:00:a4:bc:
26:df:6e:c9:4d:a8:df:50:29:c3:ae:f2:ec:4e:30:
7e:35:50:24:68:fc:82:c9:a6:2d:82:7f:33:b0:94:
45:20:b5:23:02:a7:ea:87:a8:d6:b3:e1:9d:a4:7e:
2d:09:58:02:f3:c6:d7:b5:84:19:7b:df:5d:27:e0:
b3:85:eb:71:0c:04:e8:6e:1c:dc:56:e5:54:90:74:
48:f9:dd:81:9b:72:ed:25:ec:82:74:84:a4:93:4e:
97:22:f7:31:e1:fa:b4:1c:d3:2f:d6:79:16:b1:4c:
04:ca:e7:b5:ee:a1:2e:be:de:95:75:62:db:df:c3:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9F:15:19:F0:FC:74:22:A0:B4:C3:42:29:E3:30:CC:54:B5:6B:90
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/PZ8VGfD8dCKgtMNCKeMwzFS1a5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.224.0/22
185.61.180.0/22
185.149.32.0/22
195.95.230.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:e2:6a:d9:2a:f9:0b:4b:f5:f8:08:a2:da:e4:d0:0c:8e:eb:
40:29:34:eb:fe:64:e9:08:e9:e1:8a:e9:15:44:3d:74:30:7a:
82:9b:d0:f1:6a:f7:9f:14:07:41:1c:9b:00:3b:70:2b:4d:78:
12:9b:d4:4e:02:ea:90:2d:77:64:75:3f:5f:a2:28:20:fa:bf:
41:a7:80:f9:b8:b5:c9:73:d8:2c:98:e7:e7:0e:b1:15:90:27:
c5:ab:09:a5:65:57:94:60:9e:f3:7f:e7:ba:12:e3:0e:81:83:
69:bf:6d:af:38:dc:47:7c:5e:e6:71:ae:43:ed:a3:a8:c9:71:
63:95:5d:cd:97:07:30:b3:34:a6:c8:86:3a:94:28:07:7a:0d:
2f:54:e0:bd:f9:93:34:c7:64:17:37:e3:41:5b:a8:36:38:5f:
d6:a3:ed:85:c1:4c:a4:ce:0e:fc:95:9d:96:88:b4:1e:2c:62:
98:54:25:14:e5:09:bd:93:de:79:1c:1d:f6:ed:9d:ae:ed:0b:
60:1f:41:b4:ab:79:d4:d9:9f:4d:d6:2d:42:6d:91:cd:aa:26:
b3:58:29:04:be:66:8a:fc:25:63:30:02:1d:12:15:84:7e:be:
c1:fd:ed:49:1f:75:c4:64:57:80:fe:94:7d:10:0d:5e:e2:38:
35:b8:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:16:23 2024 by rpki-client on console-fra.rpki-client.org