Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zhY5FrRBQ0N5ecp-aC_VJIIElbE.roa
File: zhY5FrRBQ0N5ecp-aC_VJIIElbE.roa (raw, json)
Hash identifier: KAHyy/M0XGviWR6UeYtxNop1Hv96LkHC5FnpeU4krNw=
Subject key identifier: CE:16:39:16:B4:41:43:43:79:79:CA:7E:68:2F:D5:24:82:04:95:B1
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018CC8DE3B001071E6FA9BEEB10CFEE90416
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zhY5FrRBQ0N5ecp-aC_VJIIElbE.roa
Signing time: Tue 02 Jan 2024 06:30:56 +0000
ROA not before: Tue 02 Jan 2024 06:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202265
IP address blocks: 94.199.1.0/24 maxlen: 24
2a04:5b81:1fff::/48 maxlen: 48
2a04:5b80:53::/48 maxlen: 48
2a04:5b86:1::/48 maxlen: 48
2a04:5b81:1000::/40 maxlen: 40
2a04:5b87:1::/48 maxlen: 48
2a04:5b80:202::/48 maxlen: 48
2a04:5b84:1::/48 maxlen: 48
2a04:5b81:2010::/44 maxlen: 44
2a04:5b81:2060::/44 maxlen: 44
2a04:5b82::/44 maxlen: 44
2a04:5b82:8::/48 maxlen: 48
2a04:5b80:200::/48 maxlen: 48
2a04:5b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:3b:00:10:71:e6:fa:9b:ee:b1:0c:fe:e9:04:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 2 06:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce163916b44143437979ca7e682fd524820495b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:8d:4d:75:c0:41:b2:03:3d:78:43:d7:49:
a3:34:ee:e5:ba:88:55:84:e3:98:db:b4:3d:4e:28:
93:9b:fa:5e:c9:13:e9:6f:bb:46:c5:03:69:33:a6:
6d:ce:71:5e:90:cb:52:99:59:f6:8d:48:22:ec:5a:
0a:33:4f:c8:54:bd:f3:3d:37:0e:88:e8:0e:60:aa:
2b:b7:f9:39:58:ed:5d:a8:1c:d4:76:28:a0:d0:d5:
16:87:ad:ef:44:97:38:4c:c9:43:f0:e2:3d:e5:0b:
7d:ed:53:57:84:76:74:cf:93:68:4b:2b:db:11:67:
36:24:99:48:ce:92:96:b4:83:d6:48:15:37:99:6d:
4e:4e:4d:cd:0a:7f:b2:80:c3:7f:9f:ff:9c:2d:82:
a4:7f:89:6a:73:7d:2e:95:77:fb:65:6f:b1:54:0b:
55:c3:b9:06:8d:24:e9:5f:49:1e:fb:21:1b:b2:43:
41:de:39:e1:e2:65:96:c7:aa:2f:1a:0f:6d:f9:e1:
10:18:79:13:6a:bb:60:1f:fd:8e:d6:5a:ea:bf:6a:
0f:50:c7:93:da:72:94:b4:5c:1a:2b:ca:a3:56:a3:
bb:34:bf:6b:17:e2:7d:d8:77:cc:8a:94:81:7b:da:
61:12:ad:6e:8f:f5:30:e3:3d:2b:dd:aa:7c:a2:60:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:16:39:16:B4:41:43:43:79:79:CA:7E:68:2F:D5:24:82:04:95:B1
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zhY5FrRBQ0N5ecp-aC_VJIIElbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.1.0/24
IPv6:
2a04:5b80::/48
2a04:5b80:53::/48
2a04:5b80:200::/48
2a04:5b80:202::/48
2a04:5b81:1000::/40
2a04:5b81:1fff::/48
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b82::/44
2a04:5b84:1::/48
2a04:5b86:1::/48
2a04:5b87:1::/48
Signature Algorithm: sha256WithRSAEncryption
a1:35:5f:cb:ba:45:e1:a6:25:7f:0a:d3:fb:93:5a:c1:87:eb:
68:23:a4:90:74:5c:a4:9a:82:77:b9:53:2f:a6:6e:85:45:08:
8d:0d:84:61:00:99:41:e8:8f:7d:6a:3c:85:73:9e:e0:fd:68:
bc:d0:83:29:f7:34:5f:f6:78:5d:ca:4a:d8:c5:be:f4:13:77:
eb:d5:f8:b2:47:e6:99:25:93:b8:3c:d5:0f:fb:86:a3:5d:17:
51:da:02:ee:94:63:3c:ad:9b:48:67:b2:49:08:d1:a3:15:ad:
9d:3e:b4:23:50:9d:e2:30:9f:c8:5b:25:85:7d:5e:d0:82:f9:
3a:95:e7:f7:06:15:60:55:3a:50:ef:ab:3c:f1:4d:f4:90:93:
11:c8:77:8d:e5:b1:76:a0:ff:40:4e:3b:2d:45:e4:3b:fd:f8:
fa:d1:1a:18:ee:b4:49:42:14:66:7d:c3:2a:f6:05:3d:f8:91:
2b:3e:7b:4a:07:93:c1:0e:b3:07:ea:c1:e8:41:d3:3a:3e:33:
43:f0:2d:8e:f0:04:2a:2f:32:7b:be:d6:fa:82:f2:f7:92:97:
4d:92:ab:b9:ac:e9:50:5e:29:52:47:28:2c:97:80:11:82:1b:
9a:cb:65:69:6d:d1:4f:97:e8:bb:39:85:6e:01:4b:06:7f:94:
e2:51:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:22:53 2024 by rpki-client on console-ams.rpki-client.org