Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/zf5J4NI4AgBzGzZpgZ657S_Aqlc.roa
File: zf5J4NI4AgBzGzZpgZ657S_Aqlc.roa (raw, json)
Hash identifier: Mtv9zZ09qe3wWFdw+tB8DIIDquZ3e/9Jxv4dHDZji1I=
Subject key identifier: CD:FE:49:E0:D2:38:02:00:73:1B:36:69:81:9E:B9:ED:2F:C0:AA:57
Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial: 018E5177BC96718A2A74517FF0F3895C9EAF
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/zf5J4NI4AgBzGzZpgZ657S_Aqlc.roa
Signing time: Mon 18 Mar 2024 12:09:45 +0000
ROA not before: Mon 18 Mar 2024 12:09:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43259
IP address blocks: 89.145.170.0/24 maxlen: 24
89.145.171.0/24 maxlen: 24
89.145.172.0/22 maxlen: 24
185.177.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:77:bc:96:71:8a:2a:74:51:7f:f0:f3:89:5c:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Validity
Not Before: Mar 18 12:09:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdfe49e0d2380200731b3669819eb9ed2fc0aa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:62:dd:0a:08:9d:9d:35:34:01:15:46:d9:
8b:84:92:ec:75:dc:ed:77:b1:c3:41:ae:c0:e0:61:
ee:af:4c:d5:fa:e9:05:45:73:22:6d:0e:ee:69:3c:
2d:9f:af:96:e2:3c:75:14:80:b2:26:ff:aa:e9:49:
10:85:b0:84:6e:f1:25:be:3e:b2:2e:7b:ee:0a:7b:
31:71:77:08:51:ce:a5:a3:78:0e:7b:d9:fb:d2:4f:
2c:c4:54:63:41:37:b1:46:9c:ae:60:b7:5f:11:82:
44:ab:8f:c1:56:68:5e:6e:66:c0:8d:5a:b0:80:a7:
ad:51:e5:db:64:2d:11:47:40:f5:8e:a2:28:e1:2c:
1c:08:7c:fe:2f:f8:cd:b9:57:16:c6:ac:13:a1:55:
5d:e3:25:20:a0:11:46:eb:7a:08:7b:b8:f6:c4:b6:
3b:7a:ff:da:20:46:75:5f:17:bb:7a:f7:12:85:72:
da:1c:2b:48:00:3e:ae:0c:a2:d0:a7:1b:82:57:4b:
87:27:61:cd:df:56:e1:a2:53:7e:55:8f:67:28:af:
ad:99:26:61:95:44:c6:db:c5:14:7b:af:70:bc:b5:
fb:7d:cb:d3:15:dd:0b:1f:2b:f0:20:d6:21:53:e0:
a0:6e:92:b1:e6:13:cf:f6:47:fc:b7:17:98:b7:59:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FE:49:E0:D2:38:02:00:73:1B:36:69:81:9E:B9:ED:2F:C0:AA:57
X509v3 Authority Key Identifier:
keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/zf5J4NI4AgBzGzZpgZ657S_Aqlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.170.0-89.145.175.255
185.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:9d:83:e5:9c:e2:71:3f:f6:72:fe:78:e8:f7:e1:bd:27:74:
dc:e3:88:d1:a6:f7:43:a9:71:25:82:bb:03:42:c7:e3:32:a3:
c1:89:02:e6:da:a4:a3:3b:36:c0:43:78:90:74:75:af:08:05:
e8:1a:cd:fb:79:41:4a:48:d0:b0:60:94:c3:7a:f7:36:78:f6:
7e:ad:38:3d:3a:68:d1:53:99:73:30:22:78:ba:9a:fc:ef:03:
5f:16:e9:b7:a5:71:08:10:9b:dc:1a:a0:81:d6:65:bf:ff:23:
0e:f7:95:a8:4b:32:b3:9a:79:43:ec:dd:92:4d:1a:64:df:98:
a3:e8:ac:69:b7:52:e2:39:a8:e7:14:38:6e:e1:d2:77:77:97:
8a:92:3f:b9:ce:38:10:90:ce:8a:6a:01:0d:16:d5:fb:50:29:
e1:36:e1:05:e6:60:7d:4b:9f:cb:cb:80:7b:76:ec:6f:52:41:
56:7e:fc:8f:75:5a:bd:67:15:77:f1:e2:77:25:d8:9f:84:04:
28:92:43:39:8d:4a:e6:cc:d0:cd:7a:1e:81:8e:fd:5d:9f:1a:
d7:db:9e:78:25:38:64:15:82:c7:19:ca:c6:32:06:ef:f6:16:
a9:15:57:a9:86:b6:72:9d:1a:60:59:f3:82:a7:4b:d4:82:25:
9d:7e:2b:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:53:45 2024 by rpki-client on console-ams.rpki-client.org