Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/ZiI1BYVFrPfXMpiVwze06f6KRLc.roa
File: ZiI1BYVFrPfXMpiVwze06f6KRLc.roa (raw, json)
Hash identifier: uViVBIZAjUi9UaHsCykuk8POQbmAoHUQlRbNiYWE46Y=
Subject key identifier: 66:22:35:05:85:45:AC:F7:D7:32:98:95:C3:37:B4:E9:FE:8A:44:B7
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 018E5AEA8E79F2F837D1B28B7685AFADE59D
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/ZiI1BYVFrPfXMpiVwze06f6KRLc.roa
Signing time: Wed 20 Mar 2024 08:11:45 +0000
ROA not before: Wed 20 Mar 2024 08:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.9.128.0/24 maxlen: 24
45.9.129.0/24 maxlen: 24
45.9.130.0/24 maxlen: 24
45.9.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5a:ea:8e:79:f2:f8:37:d1:b2:8b:76:85:af:ad:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 20 08:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662235058545acf7d7329895c337b4e9fe8a44b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:d0:7b:37:26:fe:6c:c5:e7:7c:5b:1b:48:
7f:09:ee:54:6b:46:01:f4:b4:3c:2d:b6:1f:af:b6:
28:79:82:a0:3c:58:67:ba:33:6b:ad:38:65:dd:9f:
92:41:8f:c1:90:88:f2:fb:3c:fb:15:9e:9a:d7:c8:
a0:37:76:46:9d:5e:98:b5:6f:5e:2b:4a:7e:7e:1a:
d0:20:b3:89:82:32:f3:40:2d:35:e7:e2:de:a9:43:
b4:88:7c:aa:99:a3:4a:1c:19:3c:93:e1:aa:81:cd:
19:a3:78:7c:51:96:fb:52:90:6c:c9:10:d2:6a:dc:
56:b7:25:fa:6b:74:6d:ba:20:38:40:d4:22:85:3f:
1d:a9:52:cf:cc:a6:be:a8:69:34:4b:2c:2f:2a:ac:
a7:34:ae:3b:72:73:dd:98:86:58:0c:52:4d:68:86:
ea:a5:43:5a:e1:32:8d:b1:d8:cf:53:f4:07:70:43:
50:a5:e8:0b:ea:52:c7:30:71:ad:f9:84:6c:b0:25:
39:c4:45:22:d6:6e:a6:1c:27:01:b8:70:2d:7e:df:
54:f8:13:24:b8:e1:1d:a6:f8:9a:d9:9f:7e:93:9d:
b7:69:23:12:b7:4e:7c:8a:7f:4c:47:45:5c:9a:14:
da:0a:05:a9:8c:b3:44:d6:a6:89:14:35:53:37:95:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:35:05:85:45:AC:F7:D7:32:98:95:C3:37:B4:E9:FE:8A:44:B7
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/ZiI1BYVFrPfXMpiVwze06f6KRLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/22
Signature Algorithm: sha256WithRSAEncryption
62:af:78:df:48:12:dd:b6:d7:68:13:14:e3:da:df:49:d2:71:
61:02:d2:67:7c:16:d7:c1:b9:b2:cc:90:98:c1:af:dd:a2:0b:
2e:dd:ce:e4:54:e3:16:4f:21:3f:a4:74:79:8e:fe:91:04:fd:
3b:b0:22:3f:58:02:e9:ec:1a:03:9d:ee:36:03:3e:0b:49:22:
5d:05:23:10:db:26:f0:39:6b:3a:b8:26:23:b3:15:a5:36:df:
33:8e:e7:6f:c1:35:77:db:a0:ac:97:4a:11:66:5f:c9:d2:70:
9f:d3:cd:75:59:0c:31:96:2e:52:96:f8:23:92:a0:11:f8:ed:
08:b6:19:52:ee:45:c3:a4:ef:d3:3b:d5:1b:7c:20:1f:d7:b1:
a4:b5:09:68:6e:ac:a7:aa:d4:24:30:18:d7:57:97:33:2a:db:
2e:ba:f5:88:c3:f8:b2:dc:73:de:ea:e9:c6:2b:b0:2a:e0:cf:
28:d9:5f:a5:a5:6f:80:a8:ad:b8:be:30:8b:92:03:24:e1:d2:
5d:4a:e6:a5:8e:dc:7e:7a:dd:7d:24:c9:ad:b0:46:94:ef:c8:
c1:73:6b:27:f6:0f:1d:87:aa:7a:1a:26:f1:b8:22:72:be:53:
fc:35:72:be:2e:ad:25:6e:36:10:78:ad:bb:5f:69:3c:36:1d:
a3:c3:8f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:33:20 2024 by rpki-client on console-fra.rpki-client.org