Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/zBQfx1voeK8wa2S8JIcl66dlKV4.roa
File: zBQfx1voeK8wa2S8JIcl66dlKV4.roa (raw, json)
Hash identifier: xfE55xnfNDrhMBTFsDtbvUaso8pg9+6MM9RdCl5bvOI=
Subject key identifier: CC:14:1F:C7:5B:E8:78:AF:30:6B:64:BC:24:87:25:EB:A7:65:29:5E
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 018CC801A67E0BEA0FBACB10231FB9680FB8
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/zBQfx1voeK8wa2S8JIcl66dlKV4.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61121
IP address blocks: 217.73.119.0/24 maxlen: 24
217.73.117.0/24 maxlen: 24
217.73.118.0/24 maxlen: 24
217.73.116.0/23 maxlen: 23
217.73.116.0/22 maxlen: 22
217.73.118.0/23 maxlen: 23
217.73.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a6:7e:0b:ea:0f:ba:cb:10:23:1f:b9:68:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc141fc75be878af306b64bc248725eba765295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cf:36:ee:a0:a2:98:6b:ee:65:d8:0e:78:8a:
b0:c0:cf:e4:96:26:11:ab:7d:f4:42:64:4f:aa:1c:
ae:59:07:fc:73:09:13:b9:10:01:fa:c0:a3:11:7c:
58:c4:b8:ad:12:76:54:76:83:95:3e:9d:6b:97:f8:
2a:8e:ea:18:dc:ad:9c:6c:70:6a:fe:08:91:da:08:
2c:74:f2:6d:f4:42:2b:5c:f8:3c:dd:6e:89:14:b0:
91:b4:f0:6c:66:7f:8b:cf:9e:3c:12:90:0b:a9:c2:
7d:c5:0d:ab:c7:32:25:6e:ce:9b:cb:af:cb:71:c8:
32:93:7d:a8:45:64:8b:61:74:72:d2:3a:87:11:65:
f2:84:c5:97:16:d1:5e:24:2e:9c:2c:fd:2a:47:56:
fd:06:75:a3:44:23:7d:c2:aa:61:a1:5a:95:ee:64:
ed:02:3d:47:27:42:87:0a:f9:bd:33:99:70:b4:6a:
34:70:88:e8:52:96:ff:eb:f1:e9:68:76:45:82:17:
69:51:c0:1a:1c:d7:38:93:3d:d9:bc:39:5a:75:08:
9f:d5:45:89:f1:93:d8:2b:f6:aa:b2:59:eb:8f:9a:
d8:1c:9a:4e:46:71:24:74:5d:e1:39:59:61:17:64:
95:4c:23:e1:56:fe:3d:17:d0:2e:74:86:bc:ea:ac:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:1F:C7:5B:E8:78:AF:30:6B:64:BC:24:87:25:EB:A7:65:29:5E
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/zBQfx1voeK8wa2S8JIcl66dlKV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.116.0/22
Signature Algorithm: sha256WithRSAEncryption
97:5d:7a:12:5e:24:09:93:66:f5:c0:b4:99:16:79:0e:2e:e7:
41:bb:ec:53:e6:7d:53:94:bf:d6:5b:78:03:55:3f:e5:fb:89:
d7:bd:ec:79:39:f1:a1:7b:5c:10:f0:e2:a6:44:18:89:d9:98:
89:be:db:8c:9b:2d:07:26:72:23:dd:9b:77:c7:17:18:d4:30:
d6:60:83:fd:b0:27:0f:94:5c:b0:0e:b4:cd:52:f7:9a:a0:ea:
3a:ff:95:7f:18:43:4c:b0:9d:b0:48:a5:a5:47:fc:88:cd:a8:
52:75:80:98:90:54:fd:49:e3:dd:5e:6f:78:f3:c1:fc:cf:db:
b9:d1:c6:74:9d:0a:42:21:06:53:36:83:d9:82:07:8f:32:b0:
e7:a8:d2:c4:14:fc:10:94:16:4d:43:fa:77:19:a4:01:93:d5:
80:00:f7:14:e6:7c:21:b1:86:db:ce:06:f2:95:2e:e6:1c:a6:
bd:86:d6:99:e0:c9:fa:1b:5c:73:f7:e5:83:37:78:8a:c7:65:
6c:87:20:1b:dc:c4:2f:dc:3b:fc:77:01:fd:be:4f:a0:f3:86:
36:04:ff:19:73:04:1c:81:87:fa:e5:1d:d8:f4:af:5a:d0:03:
45:9d:55:38:e5:e6:0a:f3:a1:2d:2e:48:3c:c0:36:9b:a8:de:
56:0d:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:53 2024 by rpki-client on console-fra.rpki-client.org