Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZW0HJEzkgHdPvVafP8hTXXITydk.roa
File: ZW0HJEzkgHdPvVafP8hTXXITydk.roa (raw, json)
Hash identifier: TS57gHooW6S6nlk6HVEY8Yc747W78NYKRdB3ataxVGE=
Subject key identifier: 65:6D:07:24:4C:E4:80:77:4F:BD:56:9F:3F:C8:53:5D:72:13:C9:D9
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018E588F38C4F207EE3B8B04D7D5AFE107DF
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZW0HJEzkgHdPvVafP8hTXXITydk.roa
Signing time: Tue 19 Mar 2024 21:12:44 +0000
ROA not before: Tue 19 Mar 2024 21:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 5.42.72.0/21 maxlen: 21
5.42.80.0/21 maxlen: 21
5.42.94.0/23 maxlen: 23
5.42.99.0/24 maxlen: 24
5.42.100.0/23 maxlen: 23
5.42.102.0/23 maxlen: 23
5.42.104.0/23 maxlen: 23
5.42.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:58:8f:38:c4:f2:07:ee:3b:8b:04:d7:d5:af:e1:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 19 21:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656d07244ce480774fbd569f3fc8535d7213c9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:b9:94:f9:f4:3e:48:41:d0:f5:cd:3b:a2:
e7:ee:9b:46:fa:ee:eb:1b:a8:0d:c1:b3:73:0c:7d:
c5:5d:91:28:b5:4d:f4:04:c8:27:30:dc:db:df:10:
74:35:4e:1f:d4:6c:f1:20:ac:ce:89:19:f7:ae:9f:
49:ce:18:18:36:ff:09:bc:8a:7e:ac:b6:a7:c3:f7:
b2:6d:df:97:e2:5c:15:c8:29:b9:12:03:57:45:0b:
45:4a:be:63:a5:59:ec:5a:ba:c9:f3:07:cd:c6:9f:
76:fa:b7:78:53:ea:36:c9:6f:bf:f0:bb:df:60:94:
03:50:ca:98:86:b7:9b:fb:0f:20:a4:8f:cd:2b:33:
40:6e:f5:ff:00:ad:c5:5a:54:5f:dc:f0:d1:e1:8a:
72:90:54:df:00:8a:58:ce:e7:d5:b2:51:e5:e0:a8:
d3:4e:01:fd:0a:e1:e1:3a:99:9b:07:57:37:ea:02:
5b:bc:ad:24:95:d1:73:9a:83:7a:9f:b9:35:0c:2c:
ed:8c:5c:28:89:4a:ff:39:5f:03:e1:b1:5b:5e:7d:
ba:d3:fe:f1:c2:f2:38:a3:3d:56:d5:8f:e5:54:78:
04:61:34:55:0b:74:db:16:2c:ca:33:59:4c:a6:ca:
63:43:44:6c:dd:5a:08:90:b4:3c:d7:29:b6:47:ee:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:07:24:4C:E4:80:77:4F:BD:56:9F:3F:C8:53:5D:72:13:C9:D9
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/ZW0HJEzkgHdPvVafP8hTXXITydk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.72.0-5.42.87.255
5.42.94.0/23
5.42.99.0-5.42.107.255
Signature Algorithm: sha256WithRSAEncryption
61:c7:cc:b0:9a:ac:93:f2:63:10:5e:b4:b2:37:df:a9:90:8c:
4d:07:fc:a4:1b:66:d4:00:4f:2e:db:83:13:0e:86:a7:64:7e:
a5:68:25:81:ad:ba:f3:62:a5:b7:81:2f:4d:19:08:aa:dd:72:
7c:da:c6:00:07:4a:21:95:13:d3:0b:ca:b7:24:bb:18:ce:33:
a8:10:d1:62:d4:bc:0f:28:a7:46:c4:ab:0a:72:22:65:21:53:
08:c4:1f:da:f0:3a:9e:bb:2a:7a:f6:1a:aa:77:a8:45:ca:9f:
6e:63:d1:29:78:61:0c:89:de:e5:d1:8f:40:b4:3d:be:0d:08:
cd:02:b9:e2:2e:47:44:4f:4d:5b:a5:33:f0:1f:6a:2c:1a:95:
f7:73:05:3b:e1:83:56:4c:ae:b7:30:f5:40:7d:fb:21:37:ff:
0d:df:00:5a:cc:04:37:d6:de:09:61:ef:c1:e9:99:22:4f:0b:
e9:05:ea:30:20:11:75:8e:b8:27:3a:8e:87:5a:9b:75:bd:cf:
6c:2e:5b:8f:07:3f:4c:92:47:38:4d:49:6a:1a:98:35:f0:d0:
27:f0:7b:3b:3d:86:a3:b8:61:69:f9:86:44:03:40:ae:5f:c2:
48:2b:84:7b:fd:da:8a:80:4b:b0:f1:ce:bd:ff:e2:00:a9:43:
61:b3:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 12:22:22 2024 by rpki-client on console-ams.rpki-client.org