Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/ZJfjMG4UabC8HGk6EvMsBmF0x3g.roa
File: ZJfjMG4UabC8HGk6EvMsBmF0x3g.roa (raw, json)
Hash identifier: Sl9G+OSFwiAn6KQhzAing32LK/fyM5eTscabR/HlLV4=
Subject key identifier: 64:97:E3:30:6E:14:69:B0:BC:1C:69:3A:12:F3:2C:06:61:74:C7:78
Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b
Certificate serial: 018CC424790D1AC220ECE59C8AF92F17CBB9
Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/ZJfjMG4UabC8HGk6EvMsBmF0x3g.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133499
IP address blocks: 94.139.40.0/21 maxlen: 32
185.101.68.0/22 maxlen: 32
121.91.176.0/20 maxlen: 32
119.13.224.0/20 maxlen: 32
212.70.4.0/22 maxlen: 32
212.70.0.0/23 maxlen: 32
212.70.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:79:0d:1a:c2:20:ec:e5:9c:8a:f9:2f:17:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6497e3306e1469b0bc1c693a12f32c066174c778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:ca:32:1c:d1:3b:d0:a4:82:4a:d9:4d:90:
af:a9:1e:72:a2:b2:fb:a1:a1:25:43:b2:81:c9:16:
bd:38:d1:fe:69:f6:d8:6f:ee:5e:4e:cd:03:82:63:
75:6c:39:d2:fe:e5:32:c6:c9:be:f4:b4:a0:d8:1e:
06:6c:d7:28:05:cc:9b:e2:d1:6a:9b:b7:f7:30:12:
b7:35:d1:38:e4:d2:2f:04:fd:c1:b9:84:59:ba:96:
53:60:52:30:53:5d:a7:ff:8f:eb:f3:2b:a0:2b:5d:
20:03:1c:50:f7:da:e1:c2:ae:c1:5f:e7:52:98:b4:
17:30:d7:3d:90:1a:a7:df:f4:4a:c9:25:1a:bd:69:
43:7c:12:ec:69:42:1b:2a:99:bc:65:28:3f:b9:0f:
b0:0d:8d:09:2f:c2:c9:65:10:25:22:33:e4:26:04:
b9:61:7f:28:5b:34:d7:75:fa:f7:45:2e:e6:11:2c:
5e:39:9f:ce:65:cc:e4:1f:93:4b:0a:4a:f6:5e:11:
5e:63:f8:0f:f3:dc:eb:29:b8:15:ba:8c:44:18:89:
2b:33:7a:7c:8a:79:86:7e:db:0b:69:e5:8f:d9:9d:
11:a6:11:b7:e2:49:9a:57:e6:0e:3f:3e:89:75:81:
79:17:98:b3:fa:fb:cf:dc:5f:c3:44:95:af:9e:56:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:E3:30:6E:14:69:B0:BC:1C:69:3A:12:F3:2C:06:61:74:C7:78
X509v3 Authority Key Identifier:
keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/ZJfjMG4UabC8HGk6EvMsBmF0x3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.40.0/21
119.13.224.0/20
121.91.176.0/20
185.101.68.0/22
212.70.0.0/23
212.70.4.0/22
212.70.16.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:3a:1c:1a:4b:84:47:e0:20:2f:5a:f5:6c:9f:2d:ef:f6:de:
60:66:07:a7:47:a3:f7:6a:02:60:13:20:0e:09:0a:58:1d:ce:
f4:f2:2c:1d:73:e1:56:cd:34:ca:84:c2:67:ac:cc:5d:e9:43:
23:b0:71:1c:4d:69:b3:25:e4:c7:2c:ce:3f:9a:a6:19:de:5f:
ff:e0:ed:db:47:9f:53:0a:d9:fb:26:7d:59:4e:58:05:ea:b1:
94:da:84:b6:1a:19:86:16:12:28:df:76:a9:d8:cc:c1:7d:5e:
96:e7:62:a5:a6:fd:30:f8:4a:3c:61:a5:8e:eb:e1:3b:cf:47:
bd:54:f0:b8:f4:7e:b1:3e:ed:3c:7d:6e:9e:c4:5b:63:a6:2b:
3e:f5:31:23:90:7b:56:e3:c5:b5:d1:59:fb:99:60:4e:6c:aa:
bd:d2:c2:6c:4b:6d:d6:ef:e5:32:f8:28:1a:c5:85:d4:52:af:
93:0c:1e:76:4c:24:1d:dc:30:c5:79:3d:c0:c3:2f:f0:d8:94:
8d:53:9e:43:3b:b5:01:e7:ae:f3:09:41:63:2a:7a:c5:1d:44:
a5:ca:0d:16:a5:fe:10:6b:67:77:13:2f:b2:0e:86:00:ac:7f:
e2:24:ff:f0:34:2c:58:92:03:4b:41:1a:3b:b6:d0:38:6a:fd:
9f:b2:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:11:57 2024 by rpki-client on console-ams.rpki-client.org