Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZIZ5-O72qjeNEWmeqS9oclaiibE.roa
File: ZIZ5-O72qjeNEWmeqS9oclaiibE.roa (raw, json)
Hash identifier: wB5TLQ275PD5tzdwIioy3Zx2QXoe0C+RWntSxgixtfg=
Subject key identifier: 64:86:79:F8:EE:F6:AA:37:8D:11:69:9E:A9:2F:68:72:56:A2:89:B1
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 018CC4933AF3D9A40803B5EF515DD3981D0C
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZIZ5-O72qjeNEWmeqS9oclaiibE.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 89.43.52.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
193.239.140.0/23 maxlen: 23
91.212.52.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
45.86.144.0/22 maxlen: 22
91.229.186.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
93.113.145.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.148.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.40.227.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:f3:d9:a4:08:03:b5:ef:51:5d:d3:98:1d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=648679f8eef6aa378d11699ea92f687256a289b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:27:25:80:49:4c:ca:c5:dc:d0:1c:79:4d:
f2:00:c5:2e:77:53:ab:47:16:70:7d:a7:d8:ee:95:
be:34:c1:b6:e6:8e:6a:a2:91:c0:37:63:a3:c3:94:
b7:4e:85:66:d7:37:5b:50:f5:8e:0e:64:ea:2c:79:
ad:91:28:c6:e4:31:c7:fc:43:df:33:44:63:11:4e:
09:18:79:9a:02:d0:05:50:08:cf:da:d5:e0:60:76:
ce:88:d3:af:5c:c4:94:e1:51:57:74:70:ee:ec:92:
fa:49:07:fb:7f:20:ef:c2:fd:0b:9f:99:81:36:7f:
b3:d6:c0:79:67:99:30:ed:0a:08:09:19:d8:a1:60:
10:b6:4d:f6:5c:46:1f:5e:dc:84:28:92:a6:b3:67:
1b:a3:88:0c:a0:c1:80:e8:c6:b4:55:47:ec:f8:bb:
42:0e:e7:28:bb:c7:a8:02:73:16:31:ec:53:2d:5a:
0c:8e:59:91:1e:10:7e:76:1c:ed:33:7f:c3:a2:18:
8a:e9:92:42:4c:a7:a4:27:ce:15:a9:d8:27:e8:27:
58:5d:79:c8:2d:ac:ac:78:32:19:67:56:c5:d1:8c:
4e:22:05:0a:fa:80:d1:a0:d4:02:28:35:2f:0b:92:
35:14:89:cb:6d:cd:fb:33:92:b0:c7:f0:dd:ca:e0:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:86:79:F8:EE:F6:AA:37:8D:11:69:9E:A9:2F:68:72:56:A2:89:B1
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZIZ5-O72qjeNEWmeqS9oclaiibE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.35.0/24
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.48.0/23
185.184.240.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.240.228.0/23
193.239.140.0/23
Signature Algorithm: sha256WithRSAEncryption
83:dc:80:1d:62:1d:da:62:24:f8:ea:a0:7a:f4:49:36:8f:8a:
c6:b2:45:c7:ad:b0:9d:9a:55:6c:47:18:25:b0:f3:80:82:df:
b7:42:70:fe:47:0f:4a:cf:ac:63:be:e8:77:c4:8e:21:b9:3c:
52:3e:94:85:2e:db:9f:dc:01:a3:a5:85:7d:73:d0:e9:a2:27:
6f:bb:be:08:85:7b:b1:2e:2e:b0:d4:2a:ad:58:71:8b:a7:b8:
22:3d:f5:f9:7e:45:27:56:4d:ba:37:01:a4:42:32:46:64:12:
df:a0:b7:ac:af:4b:4d:22:4c:99:43:bb:fc:87:07:28:53:dc:
a8:a8:e3:e1:8f:ab:92:11:e5:4f:46:08:1c:5f:86:e6:00:b0:
40:91:49:fe:ce:f5:d9:d7:6f:18:a8:bc:16:60:6d:20:b0:95:
45:d2:86:59:76:fd:80:ae:95:a4:22:a3:98:fd:cd:a5:91:94:
2a:2e:22:fa:f6:2d:87:9c:58:a4:32:89:88:2b:10:06:f8:cb:
9d:69:35:2d:b1:6c:ba:40:4e:25:cc:0d:a1:75:d2:b8:85:56:
01:d1:6e:1a:7d:83:01:bc:8b:41:30:8e:31:41:63:51:50:50:
0e:42:22:80:69:d9:28:74:1e:c8:94:25:17:c1:bd:dd:17:c7:
4a:54:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:30:33 2024 by rpki-client on console-ams.rpki-client.org