Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZND_2FwhPHkEv0tzulKAh95weh0.roa
File: ZND_2FwhPHkEv0tzulKAh95weh0.roa (raw, json)
Hash identifier: 4enDTA/z9Wkd5l157w6ce6/P7hlozZkKblKd9Mz59VM=
Subject key identifier: 64:D0:FF:D8:5C:21:3C:79:04:BF:4B:73:BA:52:80:87:DE:70:7A:1D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018EF78B9E0B710C53A5308584DB1A5FBE2C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZND_2FwhPHkEv0tzulKAh95weh0.roa
Signing time: Fri 19 Apr 2024 18:08:25 +0000
ROA not before: Fri 19 Apr 2024 18:08:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 20:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f7:8b:9e:0b:71:0c:53:a5:30:85:84:db:1a:5f:be:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 19 18:08:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64d0ffd85c213c7904bf4b73ba528087de707a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:93:85:e7:5d:09:70:09:47:f0:4e:c7:73:
c7:f1:25:6f:2f:50:29:f9:e4:ac:77:f0:6b:a0:e0:
95:87:68:ec:1d:74:33:5b:de:2c:90:21:6f:a5:09:
8e:b3:93:46:5f:af:6c:8b:c0:ce:4d:f9:de:ab:3a:
a1:a5:85:7f:df:33:a1:12:77:c9:f6:34:40:b3:96:
f0:1f:9a:53:f9:ba:bd:ea:23:ca:53:33:87:fd:a3:
3d:8f:ea:15:16:30:96:af:ea:1f:03:a5:4f:45:d1:
f4:3e:56:76:a0:6a:a2:76:4c:5f:50:3c:8c:a7:c7:
4c:84:9b:cd:d9:9a:88:c6:97:61:7c:d9:9a:60:2f:
09:5c:7c:9e:01:30:ce:15:3d:a7:13:a7:12:95:25:
47:b7:47:41:c6:68:9f:13:dc:ff:68:95:a4:6f:8f:
65:5f:6e:a5:e1:5f:6a:11:79:7c:9b:57:58:3c:b4:
7b:48:b8:45:86:a5:21:27:e4:d0:a6:83:aa:5a:7c:
08:94:58:fb:88:6f:7d:ae:b8:05:0a:19:b4:8d:a0:
9f:23:78:1b:02:a6:8e:fa:57:fa:48:46:f6:c9:f0:
f6:26:3c:43:f5:06:1a:a7:e6:f7:5e:31:19:db:9b:
b6:31:89:e0:47:70:ff:2e:8e:e7:13:15:cc:1a:cb:
74:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D0:FF:D8:5C:21:3C:79:04:BF:4B:73:BA:52:80:87:DE:70:7A:1D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZND_2FwhPHkEv0tzulKAh95weh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0-185.230.14.255
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
50:66:f6:66:63:56:e4:e9:2d:af:c3:68:c6:28:20:84:85:6b:
05:05:c0:02:a6:68:b0:cf:85:cd:e1:e5:90:a2:bb:dc:e7:c3:
0b:81:dc:1c:58:5f:5c:13:b9:41:9e:4a:dd:6b:61:7f:4f:e3:
59:b0:2e:79:49:a5:21:17:7d:78:b8:e8:82:5f:64:2d:3e:fb:
c0:8a:f2:49:b9:8d:ac:09:7f:3d:6a:03:3d:89:9f:f8:5d:05:
2a:67:2e:92:1b:c4:08:51:e2:d9:97:35:20:9b:2e:55:cf:3b:
b1:da:ea:df:0d:43:ae:e7:9f:2d:00:4f:48:35:97:4c:e0:b1:
5c:a8:15:b1:a9:d0:72:91:f6:94:3c:b1:3d:0d:46:3b:19:e2:
0e:cb:ab:e4:e2:71:74:0e:b5:a3:67:35:43:35:7b:3b:18:85:
05:2e:4a:8e:4f:5a:20:80:d7:91:51:f9:ba:c4:0a:b1:42:c0:
6b:5d:f2:17:05:d6:3e:ad:86:6e:c5:b5:54:37:25:e9:1f:2a:
65:94:83:97:e2:29:e2:32:7c:da:e0:c5:93:49:9b:0c:fd:6c:
8d:a4:4e:53:26:64:40:e5:fe:77:56:04:6d:71:3e:6c:8f:1d:
17:56:6d:e8:0e:7a:fd:0c:a8:45:4b:20:d5:e9:dd:93:6f:83:
41:00:a3:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 21 04:32:06 2024 by rpki-client on console-ams.rpki-client.org