Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hZz4Xycqa7E2CZS_KjmanN7oYFo.roa
File: hZz4Xycqa7E2CZS_KjmanN7oYFo.roa (raw, json)
Hash identifier: ljEGzmv5EAtx5DMeA+OgnLG22dVUkejKOJ5DxUSw4Z0=
Subject key identifier: 85:9C:F8:5F:27:2A:6B:B1:36:09:94:BF:2A:39:9A:9C:DE:E8:60:5A
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018ED1BE33A5957971ABDD00BD3C5611A09B
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hZz4Xycqa7E2CZS_KjmanN7oYFo.roa
Signing time: Fri 12 Apr 2024 09:58:06 +0000
ROA not before: Fri 12 Apr 2024 09:58:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43201
IP address blocks: 37.72.131.0/24 maxlen: 24
46.175.132.0/24 maxlen: 24
194.104.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:be:33:a5:95:79:71:ab:dd:00:bd:3c:56:11:a0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 12 09:58:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=859cf85f272a6bb1360994bf2a399a9cdee8605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:90:6c:b8:92:0f:55:e4:79:87:b4:96:ca:
59:91:0e:04:3b:36:5b:23:82:ab:06:37:18:77:6e:
cb:a1:c4:08:0f:dd:13:14:1b:ef:61:20:17:b0:c9:
23:f3:5b:67:e4:93:b1:ec:4f:6e:d3:fa:90:86:9a:
06:08:f4:69:d1:29:6a:56:e6:7f:ad:3d:bf:22:90:
1c:3d:61:35:5a:59:b9:c0:46:c1:d2:74:67:65:a2:
8d:47:f9:4b:4f:f2:3e:a3:ab:b5:84:c8:1b:ec:a2:
72:4d:39:09:c1:d3:57:86:26:21:45:bd:54:f6:17:
ab:ce:37:12:5d:cf:5b:5f:d2:65:1a:ec:b3:58:5b:
6f:ad:7a:49:2b:be:26:18:b3:06:9e:09:29:0c:74:
b8:fa:d7:04:52:07:a0:3a:10:24:79:cb:59:7f:80:
c5:7a:4a:66:8c:d0:77:91:6b:e2:29:b4:37:26:86:
c1:2d:b3:ca:31:9d:de:7f:af:b5:2c:05:dd:b7:f8:
19:64:d6:6e:53:a9:35:9c:1b:bf:c7:d4:28:87:b6:
c9:ec:33:ff:e0:2a:58:62:5c:8c:b8:d8:86:ac:0b:
84:b3:6c:72:05:dd:f4:85:56:3e:24:d0:6f:0f:ec:
a1:75:7d:87:99:68:9b:71:ae:17:df:8a:8e:9e:cc:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:F8:5F:27:2A:6B:B1:36:09:94:BF:2A:39:9A:9C:DE:E8:60:5A
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/hZz4Xycqa7E2CZS_KjmanN7oYFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.131.0/24
46.175.132.0/24
194.104.139.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f3:8f:3f:01:be:b0:b5:90:55:df:a5:f6:e9:a0:7a:b3:f1:
45:8b:b7:93:64:b4:c2:d7:36:d1:fd:6b:47:de:0a:54:a9:a0:
11:69:2c:01:54:67:60:62:92:f7:63:52:99:86:cd:da:63:67:
58:4b:c3:9d:35:41:03:4d:91:0b:9e:35:c1:5b:a4:25:3f:85:
2e:a2:c9:22:68:a9:ac:96:90:6a:15:8b:7c:88:26:88:68:3b:
55:21:b8:2b:64:4c:91:86:50:2f:32:76:4f:bc:ef:68:b2:28:
2c:b6:c5:e2:23:fa:02:e6:1a:0c:1b:e1:6b:ac:ac:17:0b:8e:
88:9a:c6:0e:4f:5f:b9:23:5c:00:ad:ca:0e:6e:08:08:a6:99:
b7:85:c2:dc:8b:e3:d8:ab:92:f5:f3:4a:7c:a2:87:67:e2:ca:
72:3e:b1:20:51:f1:c4:48:8d:dc:19:75:8a:42:90:c5:10:a2:
fb:27:3f:9e:e3:16:65:a0:a3:53:e9:4e:e0:a2:af:27:08:2f:
db:31:0c:a8:3b:78:6e:59:39:c5:5f:e1:b2:76:99:38:a5:7c:
42:de:f2:1f:e4:29:77:d7:69:c6:25:75:30:83:f4:18:e0:86:
fe:5d:6e:14:d6:4c:4c:08:1c:8b:0a:da:cb:5a:5b:7a:a4:15:
5a:7d:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:27 2024 by rpki-client on console-ams.rpki-client.org