Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/ZamqP1ip1FXfMzoBGsBUQJFl5Hs.roa
File: ZamqP1ip1FXfMzoBGsBUQJFl5Hs.roa (raw, json)
Hash identifier: VtU6mnl9H4NWdNwsoyUoYeN3NKr9hoiiuaRhOOOXNnw=
Subject key identifier: 65:A9:AA:3F:58:A9:D4:55:DF:33:3A:01:1A:C0:54:40:91:65:E4:7B
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 018E2CF2F526D9365CFC1AD6E494FE8CE43D
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/ZamqP1ip1FXfMzoBGsBUQJFl5Hs.roa
Signing time: Mon 11 Mar 2024 09:58:23 +0000
ROA not before: Mon 11 Mar 2024 09:58:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30857
IP address blocks: 86.111.192.0/22 maxlen: 22
86.111.192.0/24 maxlen: 24
86.111.193.0/24 maxlen: 24
86.111.194.0/24 maxlen: 24
86.111.195.0/24 maxlen: 24
86.111.196.0/23 maxlen: 23
86.111.196.0/24 maxlen: 24
86.111.197.0/24 maxlen: 24
2001:67c:130::/48 maxlen: 48
2001:67c:18c8::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:f2:f5:26:d9:36:5c:fc:1a:d6:e4:94:fe:8c:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Mar 11 09:58:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65a9aa3f58a9d455df333a011ac054409165e47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:12:69:f3:3a:01:b8:54:7a:32:6f:5e:da:
a7:ea:9c:68:da:39:9c:00:e7:6b:d3:60:86:4e:13:
17:8e:67:d5:ec:95:e0:7d:3b:00:07:ea:ce:d3:ff:
f6:40:85:50:41:8e:2d:02:d0:81:96:31:5b:e7:51:
c1:06:50:72:e6:7e:8a:55:28:13:8b:30:84:ac:d5:
00:00:f9:98:f6:27:67:45:5a:89:71:6c:20:89:d9:
b6:83:74:d9:9c:e6:c5:19:85:d3:20:a4:f1:22:8c:
c0:e3:0a:0a:8a:f3:26:42:53:11:03:dc:e6:8f:ef:
5a:75:15:98:93:2f:ee:37:0a:63:0c:b2:b0:7f:6d:
81:23:5b:3d:44:a1:f3:1e:b0:a8:4b:d0:cd:ed:04:
21:39:59:8d:62:17:76:19:f6:74:bf:a0:ec:81:ed:
f8:81:ba:17:6b:da:e3:59:0b:d7:47:70:a5:5f:27:
0f:00:e0:d7:ae:0e:1e:28:1b:d0:af:01:36:96:94:
6c:f8:ef:c5:06:c7:c1:21:92:5b:90:ff:a3:cb:ea:
d5:36:6c:a6:48:42:da:69:59:30:e1:1e:69:8a:97:
cf:e3:af:c9:d0:e0:92:aa:61:ca:55:28:ad:12:c6:
35:85:85:f5:9b:b5:13:07:8b:cf:90:04:70:22:32:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:AA:3F:58:A9:D4:55:DF:33:3A:01:1A:C0:54:40:91:65:E4:7B
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/ZamqP1ip1FXfMzoBGsBUQJFl5Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.192.0-86.111.197.255
IPv6:
2001:67c:130::/48
2001:67c:18c8::/47
Signature Algorithm: sha256WithRSAEncryption
3a:04:a0:a7:57:46:eb:a7:17:d5:b7:51:e6:98:32:22:1b:5d:
44:f2:dc:75:b5:34:e5:30:d2:0f:d2:1b:c1:bf:60:5c:39:98:
9b:28:03:d6:8c:8d:77:ac:5e:74:58:1c:0a:7e:56:30:5c:4d:
11:d1:0e:4c:f9:9b:16:c6:f1:31:ca:c2:d8:1e:4d:78:fc:7c:
8e:6a:f4:c8:fe:80:55:31:90:97:65:d1:3d:23:cd:10:d1:89:
c1:82:06:98:13:5c:d9:10:39:8c:fb:93:46:8c:a7:1b:3c:5c:
e7:68:2e:f3:2e:c7:fe:e5:0d:79:e3:71:89:5e:d4:c0:ee:e3:
fd:ec:9f:10:68:82:9a:fa:00:45:d2:db:34:44:9a:fb:4a:a5:
5c:db:80:90:53:16:ee:a2:17:43:0e:14:8a:3f:6d:b0:82:b5:
19:26:e9:d3:30:7a:38:b5:2f:29:81:fe:b5:6a:04:34:55:60:
79:66:eb:07:b3:f2:a9:14:4b:72:65:c6:a6:f6:6b:d2:fa:3c:
14:60:bf:06:7e:49:5c:ff:89:cf:0d:77:ae:69:03:ca:7b:05:
70:1b:8a:36:6b:81:05:1c:88:96:90:a0:79:6a:96:92:d4:34:
05:7f:af:3a:90:e7:67:8a:7f:ae:1c:47:29:40:d5:7f:e5:56:
f2:28:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:27:36 2024 by rpki-client on console-ams.rpki-client.org