Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ZJAmGWbys_aVuV0yOdHf6gT-ebw.roa
File: ZJAmGWbys_aVuV0yOdHf6gT-ebw.roa (raw, json)
Hash identifier: 8lDH6I9rQrwi2aZsPnK7MLCYo5Smz5QjSh+ADj8gIZI=
Subject key identifier: 64:90:26:19:66:F2:B3:F6:95:B9:5D:32:39:D1:DF:EA:04:FE:79:BC
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 018CC2DABAF5BA0DED946C2251BD516FA705
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ZJAmGWbys_aVuV0yOdHf6gT-ebw.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 185.229.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ba:f5:ba:0d:ed:94:6c:22:51:bd:51:6f:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6490261966f2b3f695b95d3239d1dfea04fe79bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:4a:61:17:fd:50:b7:f8:40:1d:bf:45:12:
1d:3d:79:70:3a:08:1b:4f:fd:2a:bf:80:ee:9e:14:
1e:6b:e1:e9:60:43:67:fb:95:b0:0c:c2:d0:49:2e:
47:c2:d1:db:9a:93:a0:36:91:6b:b5:27:f3:de:c8:
96:7d:90:0e:7f:94:be:0e:17:22:ca:e3:6f:89:d2:
61:1a:2f:8f:97:cd:a5:62:5b:85:21:e9:0c:a2:2f:
2f:a9:7e:da:e1:d0:64:77:80:d9:99:a9:da:11:bf:
53:c7:ed:c5:73:f1:78:a6:d9:73:89:3b:6c:66:b4:
76:0e:f0:25:e6:ce:fb:ed:b1:af:c4:ce:b5:85:ef:
0e:05:7e:ff:83:41:c6:60:ea:93:af:5e:7b:65:fe:
eb:74:37:31:9d:9a:ab:15:6e:cd:c7:5e:25:0c:d5:
4b:9c:19:d2:14:4e:9e:eb:0c:c3:bc:5c:52:c5:5f:
20:62:b3:d4:06:c4:a2:e5:29:b2:0f:ba:41:98:9b:
6b:a1:7c:3b:51:34:64:ef:ee:56:42:31:f1:64:43:
d3:ad:75:45:f3:f7:7f:90:ab:c4:15:63:ce:bc:cf:
7e:78:45:26:b2:33:5a:ae:ff:35:2e:a8:4a:cf:4d:
16:e1:0e:0e:1d:f2:9e:c8:ac:6f:36:77:57:ba:f7:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:26:19:66:F2:B3:F6:95:B9:5D:32:39:D1:DF:EA:04:FE:79:BC
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/ZJAmGWbys_aVuV0yOdHf6gT-ebw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:58:ec:52:77:fd:45:ba:9a:f2:8f:7e:33:d0:13:71:9b:43:
56:e8:fe:32:65:b7:48:63:c7:f8:3e:70:99:ce:7b:62:65:9e:
91:db:02:95:6a:14:e6:86:e8:39:92:ff:5c:9b:72:83:94:1f:
4d:a8:2e:a3:9a:ae:9d:81:8f:b1:ad:16:6f:99:0b:94:3e:0d:
ae:9f:c5:65:db:6c:60:9c:c1:6c:03:1a:fd:a3:e5:ec:89:e9:
a1:d8:ef:fe:6a:71:fe:2c:73:b9:08:81:3d:21:0a:cd:62:db:
93:3a:13:7e:71:9a:d6:c6:e1:ac:e1:f0:79:7a:37:2c:1e:f9:
c0:69:35:08:80:46:80:4d:e4:9c:8a:e6:b7:6f:8c:16:09:5a:
c6:91:78:0b:fc:f0:b0:f4:25:a3:23:29:7d:8a:48:4e:a6:60:
b7:4b:13:d9:a2:18:0c:99:55:48:f9:a3:fd:da:70:ab:be:a8:
09:c0:b8:5b:6e:05:4c:29:f3:f2:c7:84:c2:d7:a4:5b:54:74:
8f:0a:e0:81:62:06:b2:97:21:ad:50:a0:a3:a0:97:b7:29:1f:
82:f1:98:ef:f5:9a:10:21:12:21:18:b6:f4:5d:17:8b:8b:75:
c9:37:63:b9:42:57:9a:2d:99:fd:fb:2b:79:8f:d9:b3:73:c6:
15:67:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:20:54 2024 by rpki-client on console-ams.rpki-client.org