Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ZONyg8OM3t--uctbjqMgZ6B3hXs.roa
File: ZONyg8OM3t--uctbjqMgZ6B3hXs.roa (raw, json)
Hash identifier: YivsHcnBm7JBVxNFX+vZn5/kp0lFzmCAKPYRpVz6yDU=
Subject key identifier: 64:E3:72:83:C3:8C:DE:DF:BE:B9:CB:5B:8E:A3:20:67:A0:77:85:7B
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 018CC3B6D6348FD663D3336E560568001809
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ZONyg8OM3t--uctbjqMgZ6B3hXs.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199397
IP address blocks: 84.14.245.0/24 maxlen: 24
84.14.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 22:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d6:34:8f:d6:63:d3:33:6e:56:05:68:00:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64e37283c38cdedfbeb9cb5b8ea32067a077857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:2c:74:e3:8d:4a:0f:8d:32:47:29:32:d8:
f9:28:ae:98:d2:d0:45:f8:9b:f8:29:f2:fb:5b:57:
6d:aa:c0:11:31:5f:37:c9:66:ca:b8:99:08:cc:a7:
b1:ff:86:59:57:7b:86:04:b0:79:0e:92:c9:b0:91:
3a:54:e2:ef:43:4e:a3:bf:a8:a0:5b:db:10:97:6b:
0b:9e:28:b8:3e:63:13:c3:b2:7e:af:8e:53:b2:3b:
02:fa:94:37:0a:59:db:22:e9:59:bd:7a:fd:12:87:
b2:26:2f:a5:21:af:ff:be:8c:97:5e:4d:d3:9a:36:
94:b2:8f:61:b5:1b:9c:72:68:82:30:fa:d2:cc:3a:
4f:25:63:9c:61:d0:74:93:19:f5:8a:9f:63:de:dc:
a9:9e:0f:c0:f7:e4:08:8d:70:09:dc:06:5a:0a:56:
ba:bc:f8:ca:b2:d5:d0:d7:71:0c:49:2c:5b:38:37:
7e:86:5e:1d:4a:54:2f:af:c3:45:8d:39:af:74:f0:
cc:ab:62:51:1f:6b:3a:15:53:27:29:20:bc:01:e3:
de:a5:bc:63:9f:00:91:9f:7d:9e:da:a1:e4:67:fc:
9a:a4:90:ff:95:48:b2:73:88:64:0e:5e:49:6a:e5:
67:fa:11:88:91:b9:84:62:ab:93:ec:8d:67:e6:d5:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E3:72:83:C3:8C:DE:DF:BE:B9:CB:5B:8E:A3:20:67:A0:77:85:7B
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/ZONyg8OM3t--uctbjqMgZ6B3hXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.14.149.0/24
84.14.245.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1a:33:44:b3:ec:d2:df:dc:77:68:b4:e7:c8:10:42:a3:4b:
c4:de:45:af:b8:65:71:ce:d0:1a:8f:fa:d6:f9:6b:5b:f1:de:
38:7c:48:13:86:8d:8e:a9:85:15:5a:42:dc:8a:80:0e:e9:21:
d8:13:f8:ef:af:8c:29:d9:18:81:c2:ef:b5:b8:8e:a4:a9:3b:
c5:f4:54:ae:0f:37:5e:e5:78:f3:ef:90:b7:e5:e6:ba:45:f7:
5b:76:1a:22:b0:2a:82:d5:e7:44:d0:11:b1:89:3b:fe:71:89:
60:3d:3b:98:a3:19:e8:3c:3a:12:73:a3:60:fd:e4:9e:fc:db:
cc:19:35:d8:f4:fd:9e:bd:d3:35:08:18:ec:a3:18:94:2c:fe:
8c:fb:64:e6:22:0a:b0:71:c6:a2:96:37:d1:5c:62:04:ce:87:
49:16:18:b6:15:38:fd:ca:5c:33:21:77:7d:2e:da:80:64:d5:
52:92:8e:e2:d4:2d:67:34:da:f8:e4:48:b6:40:fb:05:54:e9:
07:f2:3c:da:ed:f0:2b:d5:3b:91:e6:0f:4c:04:24:45:b2:32:
1e:b5:3f:f9:d9:d2:9f:60:c0:20:9b:02:22:ef:48:d6:9e:aa:
47:78:7b:76:73:36:e8:08:b3:b6:37:ca:52:6e:ac:2e:ac:52:
40:f3:62:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 02:48:35 2024 by rpki-client on console-fra.rpki-client.org