Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zlPMlMsQeMeYMEbrqTjkOwk--R0.roa
File: zlPMlMsQeMeYMEbrqTjkOwk--R0.roa (raw, json)
Hash identifier: kW7p8WEa6PNI99B0L95hnRxjJrP0Cia4zDk81gi8ktY=
Subject key identifier: CE:53:CC:94:CB:10:78:C7:98:30:46:EB:A9:38:E4:3B:09:3E:F9:1D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018D7A36C999484F0CF04FFD8B75EE65CFE7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zlPMlMsQeMeYMEbrqTjkOwk--R0.roa
Signing time: Mon 05 Feb 2024 17:00:27 +0000
ROA not before: Mon 05 Feb 2024 17:00:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204020
IP address blocks: 95.46.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:36:c9:99:48:4f:0c:f0:4f:fd:8b:75:ee:65:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 5 17:00:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce53cc94cb1078c7983046eba938e43b093ef91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:e6:e6:75:1d:11:12:84:1b:01:e3:b3:02:
ed:b6:8e:62:b8:11:8d:db:c2:94:5a:3a:0d:e3:e6:
e5:0e:d6:52:51:4a:82:e5:fe:58:81:1b:98:d8:89:
b4:92:e8:cd:e7:5f:6f:72:ba:05:dc:20:9b:85:07:
fe:36:25:37:b2:a3:89:32:01:8f:21:d3:f6:88:f9:
a8:7d:dd:89:7a:c6:bd:73:9d:b2:32:a8:61:c4:6c:
7c:af:7b:52:df:4d:d6:2a:77:85:7b:ac:75:bf:f8:
a4:1d:19:06:70:85:22:ee:35:64:50:87:5f:a4:45:
d0:ca:eb:f6:3e:2a:e1:3c:0c:1e:87:78:4c:d3:47:
89:a7:90:7b:e2:ae:f4:01:26:b6:33:b4:e5:81:ac:
e1:a7:2a:28:ac:16:93:79:05:c8:95:6b:74:47:33:
c7:0d:71:53:46:69:a1:63:21:b6:c0:c2:36:3e:e9:
46:fb:a2:1d:00:29:ff:55:26:8f:57:8e:1e:1f:99:
99:77:10:25:fc:58:5f:5c:9a:78:85:0c:00:ce:d6:
8f:7f:22:0a:d7:ae:22:5b:c1:d2:91:cd:03:35:7a:
23:35:a7:c5:a2:b0:a6:a8:58:3d:90:18:2b:f9:b7:
1e:8a:86:7e:99:52:e2:12:73:9b:d3:ae:12:0b:82:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:CC:94:CB:10:78:C7:98:30:46:EB:A9:38:E4:3B:09:3E:F9:1D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zlPMlMsQeMeYMEbrqTjkOwk--R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.209.0/24
Signature Algorithm: sha256WithRSAEncryption
34:de:f2:a9:5b:b4:e1:50:1f:ad:99:a8:22:28:89:9e:04:21:
e7:12:2e:26:50:d5:43:4b:69:a6:f1:3c:16:9b:51:71:cb:a6:
99:93:d4:65:89:17:51:ad:dc:04:63:c8:7e:bf:86:f1:1e:22:
5c:ca:34:55:95:26:4f:5b:ca:90:be:5d:0d:2f:8a:bd:01:5b:
d2:20:5b:5c:06:1a:c5:4e:6f:f0:1b:d5:36:bc:81:b3:cc:7a:
6a:81:81:af:28:24:63:f2:e8:06:46:fe:50:a9:5f:c5:3c:db:
1c:57:ac:f6:fe:63:43:b2:ff:9d:3b:7e:c3:98:05:f8:b8:00:
be:13:bc:7e:58:34:3b:03:81:5a:62:e9:dc:b5:08:b3:75:b2:
44:07:b2:f6:bf:97:0b:90:9e:05:fc:ec:12:fd:fa:da:fe:4e:
81:74:f6:64:0d:81:2e:98:5f:04:eb:a7:17:4a:be:57:b2:48:
0f:c5:5a:92:77:e8:fc:de:eb:a8:00:50:d9:90:26:14:77:65:
a5:17:9a:aa:1f:88:73:da:2f:26:f7:d5:0c:f8:4c:a1:17:41:
c7:e3:41:3f:93:9e:bc:50:f9:df:fc:e0:62:07:30:48:d7:e9:
01:b3:85:a5:e2:00:7d:63:7a:66:6c:11:ef:48:ab:d2:82:33:
5d:12:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 07:55:31 2024 by rpki-client on console-ams.rpki-client.org