Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zz-r-PF2DytCgcjR39zKCqKQZQY.roa
File: zz-r-PF2DytCgcjR39zKCqKQZQY.roa (raw, json)
Hash identifier: C8ugx/qMDCIAX8Yc79P/CeVDI2v5BeKXAYjWUSiGSEo=
Subject key identifier: CF:3F:AB:F8:F1:76:0F:2B:42:81:C8:D1:DF:DC:CA:0A:A2:90:65:06
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018DC972CC1B83B7E741C1974F8177B451C9
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zz-r-PF2DytCgcjR39zKCqKQZQY.roa
Signing time: Wed 21 Feb 2024 02:16:00 +0000
ROA not before: Wed 21 Feb 2024 02:16:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.128.144.0/24 maxlen: 24
45.128.145.0/24 maxlen: 24
45.131.176.0/24 maxlen: 24
45.131.177.0/24 maxlen: 24
45.132.236.0/24 maxlen: 24
45.132.237.0/24 maxlen: 24
45.137.8.0/24 maxlen: 24
45.137.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c9:72:cc:1b:83:b7:e7:41:c1:97:4f:81:77:b4:51:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Feb 21 02:16:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf3fabf8f1760f2b4281c8d1dfdcca0aa2906506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:c3:8a:fa:7b:8c:67:55:95:02:dc:c9:e4:
55:05:99:2f:45:93:5f:79:42:df:dc:17:8f:95:70:
69:d9:e8:67:b4:d4:47:c2:72:b9:4f:19:41:99:e6:
66:3b:c1:4a:0a:e3:8e:e0:59:78:f1:07:40:88:17:
be:27:99:b0:2b:a5:3e:94:2c:2d:1c:67:64:19:77:
61:31:56:ec:54:6a:b6:53:87:12:28:dd:43:e4:97:
9f:5a:9b:24:a5:7c:8c:8a:29:80:8f:c2:36:11:d5:
3a:3f:cb:f7:34:90:11:85:f5:ef:0b:45:5c:bb:44:
b6:36:62:87:cb:6e:c5:61:13:fb:f7:53:47:03:d9:
05:83:78:01:6f:64:68:f2:1f:b6:89:0a:1d:8b:68:
8e:d6:1e:db:18:cd:3c:86:e4:1f:0e:c6:6e:74:04:
c8:54:d0:0a:98:12:08:53:b2:12:60:0d:58:52:9b:
7f:e0:e0:3b:12:f1:be:c9:59:2d:8b:41:cd:28:fb:
10:ad:26:2d:b7:f2:32:f6:9a:c7:e9:2c:a0:c7:0a:
4e:f6:e9:8b:12:ff:dd:b9:42:85:17:94:23:95:4f:
4a:01:6b:26:ba:88:fe:33:0f:00:55:0d:26:dc:66:
c9:05:5e:0a:2d:60:6d:18:2d:f5:fe:f9:0d:15:ad:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3F:AB:F8:F1:76:0F:2B:42:81:C8:D1:DF:DC:CA:0A:A2:90:65:06
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/zz-r-PF2DytCgcjR39zKCqKQZQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.144.0/23
45.131.176.0/23
45.132.236.0/23
45.137.8.0/23
Signature Algorithm: sha256WithRSAEncryption
90:ae:4f:7b:55:17:1f:6e:c5:82:50:a1:91:1b:dd:bc:f4:69:
1b:2b:74:ef:4b:3f:92:81:ae:92:15:88:9e:99:b4:d1:91:f5:
3c:48:0f:83:94:69:83:fd:0c:69:2e:5d:71:44:44:1d:7e:5a:
54:6a:d4:05:48:ab:6b:07:98:ba:a8:4c:08:ac:fe:69:e9:01:
58:2b:f1:e0:77:fe:bb:29:4a:5b:05:76:4b:85:99:9e:2a:72:
05:a6:d2:bd:08:11:b5:80:bc:da:27:ff:d7:45:f5:2b:18:ba:
6d:33:b5:3a:f3:b3:2a:0d:59:6b:d9:e8:d8:06:51:2d:98:93:
d2:a9:30:b8:5a:12:9a:26:f3:40:21:ef:91:8f:1a:73:db:4c:
b1:1a:46:0d:ce:0d:97:ce:e8:84:71:f7:4b:f8:11:d8:74:bb:
21:fe:a5:47:cb:99:79:78:b4:6c:69:09:25:34:86:73:d5:0b:
8d:31:47:4e:76:98:a7:00:f5:ec:ea:dd:1d:95:3e:b6:2a:c6:
eb:6b:bd:b8:bd:21:9c:fa:0c:3e:d6:03:e2:f1:34:f4:e3:f3:
70:54:83:1a:ef:0b:dd:18:64:a4:cb:22:08:cc:d0:b2:e7:b8:
53:82:73:d9:52:47:0d:35:00:1c:74:be:ae:67:9b:fd:ed:13:
b1:38:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:46:36 2024 by rpki-client on console-ams.rpki-client.org