Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/z-72Do82eRAsSoPHAbDU_H8dIGQ.roa
File: z-72Do82eRAsSoPHAbDU_H8dIGQ.roa (raw, json)
Hash identifier: 9baE6Yu/0ZcU5hZbVq0/af6bJlKIPvVfaPgOwDCbr6A=
Subject key identifier: CF:EE:F6:0E:8F:36:79:10:2C:4A:83:C7:01:B0:D4:FC:7F:1D:20:64
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01909E65DDC29F2A23E757BF98B85662D9F2
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/z-72Do82eRAsSoPHAbDU_H8dIGQ.roa
Signing time: Wed 10 Jul 2024 20:46:34 +0000
ROA not before: Wed 10 Jul 2024 20:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215186
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:65:dd:c2:9f:2a:23:e7:57:bf:98:b8:56:62:d9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jul 10 20:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfeef60e8f3679102c4a83c701b0d4fc7f1d2064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:28:3e:c9:f9:35:48:72:b0:7f:1e:8e:55:
33:dd:23:f7:62:47:78:5d:80:b6:f5:23:9d:d7:16:
ea:96:7b:35:85:22:0e:6f:fe:fc:3c:ca:1a:5b:da:
a7:b6:1e:5d:14:ad:36:f9:3c:06:ad:3f:c5:fa:5e:
90:4f:4e:0f:45:02:db:ba:a4:01:49:14:c9:31:60:
56:ee:5f:93:f6:01:42:50:d1:08:52:0d:90:20:6d:
28:26:e9:74:82:20:72:1d:ad:d3:55:11:fa:14:e6:
41:9e:40:fc:28:60:d9:ef:42:b3:c9:cc:46:9f:65:
85:76:82:47:6e:62:59:26:99:76:3b:50:af:b0:39:
23:a1:4d:20:3c:03:df:45:17:02:1a:c9:e5:31:27:
5b:4d:f0:c9:b9:c2:b9:40:95:a5:2d:cc:24:5c:a6:
c7:d3:6d:e9:ad:57:22:56:09:f8:f0:8a:12:e7:3b:
a7:dd:3d:06:29:6f:01:69:40:ab:39:88:a9:41:57:
ab:68:2d:a2:ad:69:95:d0:08:6b:cd:0f:1c:86:cc:
bb:13:b5:48:bd:00:f4:10:7a:73:72:26:8c:f7:66:
3f:08:11:3d:1a:b5:3d:37:d3:7c:2d:c2:48:68:9d:
4c:24:2e:ed:06:d9:4a:bc:da:96:49:3f:74:f7:62:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EE:F6:0E:8F:36:79:10:2C:4A:83:C7:01:B0:D4:FC:7F:1D:20:64
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/z-72Do82eRAsSoPHAbDU_H8dIGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
39:16:ad:26:ec:fe:39:0d:f6:a9:d3:8e:fc:1d:04:c5:31:30:
1c:23:04:86:18:3d:6b:5b:ea:89:12:b5:48:6a:23:34:e8:f9:
10:bc:ca:c5:a0:77:cd:51:6b:6d:23:b2:c4:4f:1c:ef:73:77:
4b:cb:a0:86:87:af:c9:fc:db:14:16:9f:e3:8e:1d:09:a4:5b:
a3:09:65:35:ef:d6:ea:0f:22:5c:b9:90:ae:4c:6d:d5:03:de:
8a:10:35:53:23:38:85:a8:02:b3:3b:4d:be:4a:16:03:ef:39:
98:d7:fb:ae:a2:90:55:cc:70:c5:3f:a8:05:36:bd:84:49:8a:
90:47:32:78:1b:90:3b:08:39:f3:3f:9c:54:4a:69:71:c5:a4:
5b:e8:db:45:62:d8:b4:9a:3e:58:85:61:4a:1a:91:ad:fe:86:
57:92:e3:99:57:f3:b3:71:40:c3:ff:48:f0:66:f2:8d:1f:db:
47:d7:f8:d7:ea:5b:d2:6f:8e:ba:93:fd:47:78:31:b3:e7:42:
c9:67:6f:5b:af:5d:9a:87:c0:46:33:9a:7d:d4:47:ff:c0:89:
25:cb:4e:95:85:35:8d:cd:f2:f4:d5:ae:5c:63:9d:23:5b:4f:
14:03:93:de:41:9e:5e:ca:a7:66:e9:ac:2f:5d:a6:a5:d2:05:
c1:9d:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:40:14 2024 by rpki-client on console-ams.rpki-client.org