Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zpf__rS82IMXee9KofOf228bbSo.roa
File: zpf__rS82IMXee9KofOf228bbSo.roa (raw, json)
Hash identifier: 2Ls5HAGz5B2I2C/n6Jr0Ut/cTpBuICjp2BTOkQy5Pcc=
Subject key identifier: CE:97:FF:FE:B4:BC:D8:83:17:79:EF:4A:A1:F3:9F:DB:6F:1B:6D:2A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018CC50150DE54F790F581DE6A10DED428C3
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zpf__rS82IMXee9KofOf228bbSo.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49612
IP address blocks: 45.140.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:50:de:54:f7:90:f5:81:de:6a:10:de:d4:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce97fffeb4bcd8831779ef4aa1f39fdb6f1b6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:a9:3c:2c:cc:d6:15:b4:d3:f6:e3:89:de:
78:4b:23:1c:56:6c:f2:bc:e4:2f:ff:04:0a:85:32:
dc:76:0a:ff:3e:b1:ae:eb:93:d4:37:20:12:7f:08:
9b:0d:91:ab:30:61:32:ba:27:91:9e:6c:eb:24:10:
98:e7:76:42:47:15:12:03:b3:4f:94:c8:fd:f3:e8:
e9:fa:f2:99:38:4a:b6:40:07:a9:2d:c5:f1:60:50:
22:db:eb:36:aa:a7:99:33:fc:ba:83:76:38:02:4a:
79:ea:39:aa:1e:a9:7a:f9:22:70:d5:fc:c3:6e:b7:
c1:2e:e2:73:5f:de:b8:c0:87:d0:64:b4:85:94:fc:
90:1c:04:8d:bf:c3:7b:28:35:7f:ed:30:29:46:22:
ff:e1:48:47:48:6f:40:f2:b5:07:31:e6:b5:d8:49:
1e:40:57:87:14:fd:3b:29:96:73:25:b8:40:97:86:
4a:d7:91:32:72:66:91:81:d5:1c:1b:1b:e9:f7:e9:
5d:4f:a2:d0:d7:37:ec:cf:1e:d0:fe:4b:c8:dc:51:
97:d4:68:26:4f:1e:e9:81:16:b4:34:21:c2:97:be:
8c:ba:bd:69:f5:ad:37:fe:c3:2d:a1:80:21:32:d4:
a5:f4:10:eb:7e:aa:0a:51:76:55:af:73:4a:1c:2e:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:FF:FE:B4:BC:D8:83:17:79:EF:4A:A1:F3:9F:DB:6F:1B:6D:2A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zpf__rS82IMXee9KofOf228bbSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:60:f6:ed:37:2d:f5:d3:7d:a9:5b:ea:02:5b:98:54:93:1b:
2b:da:5c:88:75:43:43:32:f4:aa:aa:45:bf:2e:19:9a:01:85:
d5:4d:b4:20:78:e6:51:7f:0f:4d:11:0c:29:b8:ef:c5:b4:f7:
9f:96:f0:a6:0a:da:d6:11:8b:6e:31:e9:b0:c9:dd:b3:a3:2c:
c0:99:7e:f8:f0:4b:53:43:67:24:3c:69:92:39:65:1b:20:c8:
6d:cd:96:47:f2:7f:12:38:f1:44:4e:38:fb:aa:0f:e2:4a:50:
6d:e1:13:b2:68:6a:d3:39:a5:21:bc:66:18:3a:5b:09:07:78:
41:70:5e:cb:b2:4e:d5:3a:46:ae:8d:92:80:77:fa:56:a7:f5:
9d:38:30:9d:c7:01:3d:83:a7:d8:32:fb:73:a4:42:db:bf:c7:
a9:25:08:48:e2:2b:89:1d:c0:01:34:aa:de:9f:27:58:ef:9c:
bf:71:91:b0:fd:52:84:c8:61:74:8d:49:19:1d:d7:f3:67:23:
15:3c:a7:72:5e:e0:c9:df:3a:3f:5f:48:d0:0f:e4:ef:3f:33:
d8:b9:00:75:32:01:a1:90:7c:1a:99:63:fc:70:12:fa:9f:99:
0e:a6:1b:90:e2:ab:da:b9:7a:c4:18:19:e3:24:cb:1f:f3:52:
0a:bd:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:24:43 2024 by rpki-client on console-fra.rpki-client.org