Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/zlGre1HI3QgDki2y48vB5K78dKU.roa
File: zlGre1HI3QgDki2y48vB5K78dKU.roa (raw, json)
Hash identifier: u0r3Y/yH2NV0pGG+wY0JrEFpe3ETVzPG4rbbyTHLmIE=
Subject key identifier: CE:51:AB:7B:51:C8:DD:08:03:92:2D:B2:E3:CB:C1:E4:AE:FC:74:A5
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018F5CA6F64480FB048E8EC1130236F311C6
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/zlGre1HI3QgDki2y48vB5K78dKU.roa
Signing time: Thu 09 May 2024 09:19:56 +0000
ROA not before: Thu 09 May 2024 09:19:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215827
IP address blocks: 185.121.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:5c:a6:f6:44:80:fb:04:8e:8e:c1:13:02:36:f3:11:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: May 9 09:19:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce51ab7b51c8dd0803922db2e3cbc1e4aefc74a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:1a:c0:10:70:8e:a8:4f:46:be:04:81:fe:
6c:cf:7b:94:5f:de:40:4e:49:79:42:a9:8e:27:40:
9e:e7:ae:f5:33:34:8e:ad:2c:42:3a:0e:b7:45:57:
c8:fb:a6:18:4d:d0:71:b7:e0:41:78:80:0b:d7:81:
4e:51:04:cd:b7:62:89:b2:52:71:cb:ea:7b:47:7b:
5d:df:b2:b3:6d:6e:e3:db:38:ab:65:c8:37:32:57:
d1:ff:6b:8b:f5:7e:5a:48:b0:c0:2f:cb:c9:2d:5f:
7d:f4:07:ed:53:57:da:19:71:5e:84:3a:6f:54:5a:
df:58:b7:18:1e:9a:f8:3c:b4:dc:bf:93:30:1a:24:
77:ba:4c:a4:9c:0b:61:67:c5:d9:19:2a:c3:06:18:
4a:96:7a:4b:47:3d:8a:dc:06:3a:fc:32:f2:b3:9a:
6f:b6:9e:a3:6d:03:9f:96:dd:d3:b7:10:00:19:2c:
89:5c:a3:68:a3:80:c1:c7:0d:a2:21:c9:3b:98:c7:
a0:61:6b:19:4f:84:53:f6:9b:b8:a2:ba:2b:18:a1:
36:f2:59:37:4a:ab:c6:77:40:d4:40:37:4a:d9:05:
16:9c:c3:dc:7e:d4:8f:15:c9:27:eb:dd:65:d9:6f:
00:31:a5:d3:ce:4a:aa:5a:53:c4:7c:94:6f:11:62:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:AB:7B:51:C8:DD:08:03:92:2D:B2:E3:CB:C1:E4:AE:FC:74:A5
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/zlGre1HI3QgDki2y48vB5K78dKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.133.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0f:9e:e9:24:f4:78:c5:72:48:83:eb:74:09:86:75:fd:6a:
d5:85:81:01:94:c6:4a:ae:a9:6f:c7:e3:2e:a9:20:4d:c2:c4:
5d:60:56:16:a9:76:dd:d0:e8:2c:bc:3a:dc:61:93:52:32:33:
b8:6a:1c:86:ef:b2:a2:d7:19:82:79:25:e2:f7:eb:d9:4e:86:
63:2d:3c:d3:75:5e:5b:e5:53:69:41:db:96:b8:9b:f4:82:5a:
a0:19:16:01:07:74:d2:a5:4a:a3:ab:ec:65:8f:dd:62:3b:7e:
3b:f1:cd:d3:34:74:99:61:fa:93:1f:62:4d:e2:81:6b:9e:76:
d1:44:d7:9d:5a:27:8f:6c:4f:4d:74:f2:1a:44:29:58:b7:4a:
9e:0d:59:1e:88:7c:0f:4a:37:56:83:b0:3e:c4:e6:f4:f4:aa:
97:e5:4e:cf:c9:73:97:70:50:a1:82:cc:51:9f:e0:ac:ee:d4:
f3:27:e4:20:47:11:ed:12:f1:ff:89:d8:10:30:57:ad:93:c2:
33:bc:96:32:68:a1:f8:55:9a:54:c1:49:f9:6f:2d:db:02:8b:
d7:8f:2e:d4:b6:0d:d7:78:1b:ea:51:3b:2a:89:01:68:09:c9:
b1:61:5a:bd:d8:45:11:cf:74:7d:f8:bb:ec:a7:9e:c4:4a:e0:
4d:2f:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:02:33 2024 by rpki-client on console-fra.rpki-client.org