Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoxJIV_OYhaT3bxL-6edaTEmFWg.roa
File: ZoxJIV_OYhaT3bxL-6edaTEmFWg.roa (raw, json)
Hash identifier: ISiylCQCOQ6V2XfY6fnO8ZXbvtMFy+6Gjk7Klj1T3Zk=
Subject key identifier: 66:8C:49:21:5F:CE:62:16:93:DD:BC:4B:FB:A7:9D:69:31:26:15:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01900B04FE4D37B332E1B968AA775B35C217
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoxJIV_OYhaT3bxL-6edaTEmFWg.roa
Signing time: Wed 12 Jun 2024 05:56:34 +0000
ROA not before: Wed 12 Jun 2024 05:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47924
IP address blocks: 45.148.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jul 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:04:fe:4d:37:b3:32:e1:b9:68:aa:77:5b:35:c2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 12 05:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668c49215fce621693ddbc4bfba79d6931261568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:66:f8:1b:05:c7:c7:9a:77:32:4b:3c:2b:
f9:ef:22:fc:d6:65:e8:ea:15:0f:72:37:6e:b8:5f:
f6:b5:af:4b:67:0f:0a:f6:8e:38:dc:3b:9f:43:ff:
47:05:e1:a9:ee:11:aa:7b:ac:28:6c:c2:29:1e:07:
0f:51:ad:15:60:d5:6b:59:c3:dd:e8:9e:07:c1:07:
e0:36:a9:f6:72:d2:63:d9:9a:29:e1:4f:69:56:18:
d7:54:af:7d:20:10:87:ed:37:54:6d:27:1e:f4:e1:
ac:47:5c:78:8a:cc:0b:ec:11:47:b8:76:e0:bf:0c:
5b:73:3e:13:63:95:50:44:05:4b:0a:f3:ea:09:44:
86:71:4e:b1:2d:c4:69:bd:15:f1:fd:4c:2e:71:4e:
12:35:2c:73:10:90:af:1e:fc:78:33:bc:9b:cc:fb:
c3:53:48:07:cc:85:c6:b9:76:a8:3e:83:60:ee:52:
ef:a0:73:b2:3c:7c:e1:75:ac:3f:eb:f5:5d:67:3f:
91:68:e4:e2:fc:46:05:81:42:24:85:df:1e:96:a3:
cf:13:85:8d:9c:33:6c:da:de:08:5b:5d:5d:b0:92:
ed:db:00:a2:24:92:58:3f:b9:a0:01:bd:a3:37:89:
0b:b6:2d:33:ac:37:75:db:53:95:84:40:b1:0d:4b:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:49:21:5F:CE:62:16:93:DD:BC:4B:FB:A7:9D:69:31:26:15:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZoxJIV_OYhaT3bxL-6edaTEmFWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
Signature Algorithm: sha256WithRSAEncryption
87:96:a2:62:5c:34:cf:bb:e8:79:ae:d2:d1:ab:60:c9:55:7b:
16:d4:53:54:44:ee:e4:38:0b:ad:6d:5d:6b:ac:18:fc:52:86:
95:76:32:fc:03:55:84:99:df:68:e5:fa:d6:68:e4:44:91:f6:
b4:06:4f:71:1a:7e:88:8c:38:da:0b:01:dc:5d:db:b7:3d:58:
15:3e:91:58:34:52:51:b5:52:44:ff:1f:b9:1b:be:47:28:c1:
03:dc:25:71:e5:a7:be:d2:62:49:41:fc:c5:20:10:3b:7e:56:
ca:53:5b:3c:40:4b:b9:9f:af:67:ad:2d:8e:2a:33:d9:7a:0f:
6c:b3:92:ff:82:79:5a:5a:ae:e0:fe:7b:cb:59:97:89:44:c1:
28:82:90:7b:79:0e:5d:ed:6d:ab:ba:a8:4d:d2:c8:46:2f:5c:
e3:a0:6c:d9:91:61:47:0f:91:95:c4:d0:7c:24:26:a6:44:47:
9c:d2:3a:d4:75:70:3b:17:6e:8f:5a:8e:f3:7c:c4:8e:f9:c5:
7a:c7:e5:62:85:2e:10:e9:be:0a:03:a6:db:93:ce:d6:00:4a:
d2:8b:69:39:e1:aa:b4:ca:04:28:ab:3d:9b:1b:34:22:6a:35:
12:0a:8e:45:8b:22:4a:9b:b9:03:39:48:de:84:63:01:ed:b4:
3e:10:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 05:54:53 2024 by rpki-client on console-fra.rpki-client.org