Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/oWAfZ_dyQR7grXYxWxK4dzZZZjA.roa
File: oWAfZ_dyQR7grXYxWxK4dzZZZjA.roa (raw, json)
Hash identifier: Z5MmmFPdImsKdnBYzK05/L84xSSA1nBHzYJwpyNyKCc=
Subject key identifier: A1:60:1F:67:F7:72:41:1E:E0:AD:76:31:5B:12:B8:77:36:59:66:30
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 018E84839818CA91A4E7AA7D8D16849435C8
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/oWAfZ_dyQR7grXYxWxK4dzZZZjA.roa
Signing time: Thu 28 Mar 2024 10:03:20 +0000
ROA not before: Thu 28 Mar 2024 10:03:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 185.72.164.0/22 maxlen: 22
2a05:3b80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:83:98:18:ca:91:a4:e7:aa:7d:8d:16:84:94:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: Mar 28 10:03:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1601f67f772411ee0ad76315b12b87736596630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:0c:cd:39:25:db:e4:cf:ba:43:9b:75:85:
d2:c5:aa:88:bd:d7:d8:bf:fe:37:50:1c:d1:23:93:
61:ab:d1:4c:d4:5a:f5:fc:d2:6b:a7:f8:c0:c2:94:
4f:b1:3e:27:98:94:51:16:ec:29:a1:3b:5f:04:b9:
0d:0b:4f:3a:24:56:ed:34:4a:1e:40:b2:91:45:ef:
76:0f:1a:b1:2d:e9:d4:33:37:cb:0f:e6:42:34:c3:
09:95:d2:7e:7a:20:3f:dd:4f:f8:aa:0b:bd:ee:a9:
ad:5f:23:e0:07:08:72:87:81:b2:a0:d5:35:d4:e8:
07:f9:3a:91:1f:2e:f8:8f:83:27:37:73:76:ba:f8:
68:7e:1f:26:7f:89:70:bf:3b:51:2c:9f:49:5b:0b:
ed:f8:af:99:7d:3f:92:33:3d:35:6d:cf:b5:5d:f8:
fe:bf:82:ab:d0:b2:09:84:1a:08:63:01:49:32:57:
dd:97:aa:4e:e2:6a:aa:bc:2b:4b:1b:24:e2:09:b8:
6e:12:f8:3d:23:d8:33:f7:92:30:97:75:6e:73:13:
b0:92:d5:22:d6:3e:42:35:56:b6:b2:73:c9:a3:31:
c0:5e:0b:2b:4a:2a:2d:ae:db:63:33:fc:79:3f:85:
5b:19:e3:94:0c:6e:eb:d5:6a:37:a6:cd:ac:21:48:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:60:1F:67:F7:72:41:1E:E0:AD:76:31:5B:12:B8:77:36:59:66:30
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/oWAfZ_dyQR7grXYxWxK4dzZZZjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.164.0/22
IPv6:
2a05:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
67:c7:f3:82:44:c6:e1:c2:0a:5f:c0:fd:19:23:e9:cf:85:77:
a2:c6:a2:28:b0:33:77:cc:b0:c8:d5:03:83:3e:11:70:81:30:
3b:33:7a:5a:be:1a:e0:60:5d:da:45:4b:8e:5b:28:42:51:4c:
9e:13:e4:f0:12:b1:c2:05:cd:f7:43:12:34:ac:59:34:44:8c:
4f:22:8e:0d:c7:e9:1c:ec:c0:d8:cc:88:21:1b:96:4d:28:6b:
33:95:4e:2c:34:80:87:e8:b8:ac:48:c3:08:89:d1:76:a3:07:
f6:ba:1d:e9:8b:8e:bc:a5:f2:20:81:53:4c:ee:b5:cc:a9:34:
8f:2e:7e:2b:55:6b:99:7b:d9:53:db:04:f7:20:38:8e:1e:4d:
50:58:73:70:62:a7:73:03:d3:c0:f0:e1:d0:3c:25:16:16:f4:
52:06:f8:58:88:c9:c0:60:bb:97:cb:86:88:5c:12:37:e7:9c:
c6:68:a0:36:16:87:f4:49:f8:51:50:38:23:37:e5:3c:75:50:
bb:07:30:fe:23:1b:7d:29:fb:cd:ba:2a:b9:82:00:4a:85:60:
a0:81:95:97:91:a2:ea:dd:ab:31:28:a6:ae:9a:0b:e8:94:65:
87:dc:89:71:4e:d4:cb:39:84:f2:2c:ce:a9:73:fe:f5:e5:83:
e1:16:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:22:13 2024 by rpki-client on console-ams.rpki-client.org