Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ZxVaSBLvppU3BakqJmfT8wLD7GE.roa
File: ZxVaSBLvppU3BakqJmfT8wLD7GE.roa (raw, json)
Hash identifier: em9K2eQHJYZMSXxi2C8440X8DuB7twWTYrmPrLC2gNM=
Subject key identifier: 67:15:5A:48:12:EF:A6:95:37:05:A9:2A:26:67:D3:F3:02:C3:EC:61
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 018FB88EE1CCCC1FEFE411B230730A7D5B58
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ZxVaSBLvppU3BakqJmfT8wLD7GE.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 195.226.205.0/24 maxlen: 24
213.249.73.0/24 maxlen: 24
213.249.74.0/23 maxlen: 24
213.249.76.0/22 maxlen: 24
213.249.81.0/24 maxlen: 24
213.249.82.0/23 maxlen: 24
213.249.84.0/22 maxlen: 24
213.249.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e1:cc:cc:1f:ef:e4:11:b2:30:73:0a:7d:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67155a4812efa6953705a92a2667d3f302c3ec61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:5c:f8:c1:21:f8:e4:6d:fa:e1:3e:99:37:
37:d6:ea:69:8c:e6:96:66:92:07:0b:71:ed:2d:81:
57:f2:d0:f3:ee:3f:fd:8b:9b:01:9a:76:dc:8f:f0:
fb:70:42:dd:f0:7b:36:6f:a1:51:8f:03:c3:8e:34:
b6:b4:d5:fa:e7:06:ba:3e:73:98:51:83:ab:4c:9d:
02:b1:ec:5d:ad:21:73:b5:51:fa:73:5a:44:e5:86:
c5:f2:92:68:ba:2a:42:f2:d3:d0:c6:3d:2a:8e:5d:
9c:f0:11:1b:2f:6c:31:14:b7:4c:c4:7d:1a:fc:bf:
08:6a:91:5e:af:5b:a2:3f:d5:55:60:9e:ac:28:11:
ca:86:1b:d3:75:c1:13:47:5a:b7:5d:39:4b:0b:1a:
b5:8f:27:df:3f:93:1d:01:26:4e:1e:04:f2:5f:ff:
56:da:c9:5a:cb:94:27:8c:7c:29:e1:8a:f4:98:b7:
45:dc:c8:b4:d3:4e:02:01:7e:44:25:0f:52:c3:cf:
8b:20:2e:d9:8a:e0:70:8b:e7:68:f1:71:a4:3f:de:
fe:7d:78:dd:23:97:c2:6e:fd:f1:e9:15:70:34:34:
79:b5:c3:10:10:97:d6:09:bb:7a:5c:2b:d1:67:af:
e1:e7:b3:5a:5e:08:79:93:df:26:1a:e2:33:33:7c:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:5A:48:12:EF:A6:95:37:05:A9:2A:26:67:D3:F3:02:C3:EC:61
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/ZxVaSBLvppU3BakqJmfT8wLD7GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.205.0/24
213.249.73.0-213.249.79.255
213.249.81.0-213.249.91.255
Signature Algorithm: sha256WithRSAEncryption
91:c9:f9:9d:36:cd:eb:44:fe:c2:3b:17:55:00:86:3b:43:08:
f8:2d:a9:96:1a:84:b1:55:e9:ee:3e:d0:26:15:79:91:45:aa:
19:b5:bc:0b:14:b9:40:30:3e:6b:95:10:72:23:42:75:f8:b4:
1a:30:c1:28:94:32:da:8c:df:a0:58:e8:0f:b6:8e:6c:58:c6:
30:de:9d:ba:65:f0:cb:17:8a:09:17:e9:5c:8d:a0:cc:2b:7c:
4d:78:ae:9c:c0:6d:88:56:2e:c1:e6:c6:e8:35:39:28:97:a7:
9e:5d:f5:c3:bd:76:30:ab:21:be:f8:d5:fc:b6:a5:98:21:3e:
f4:0f:1f:5c:94:d5:74:c8:2c:56:6d:de:c4:25:00:c6:be:06:
40:a0:44:a7:ba:79:55:58:2f:39:6a:50:81:1e:8c:5f:b2:32:
fc:4e:04:50:49:a8:c3:17:87:49:3e:0d:c1:41:ed:bd:ae:c4:
be:48:44:03:ba:f7:7e:b1:1c:ed:e0:58:11:bd:d1:0a:f8:51:
06:cc:3e:60:d7:93:f7:16:04:34:22:5d:1a:0c:78:92:76:dc:
3b:57:a2:ce:f8:eb:34:c1:7d:ad:3a:0d:d1:87:68:f0:c7:cc:
19:a4:a8:f2:9c:8d:df:53:34:ee:cb:c2:aa:7c:d3:b9:90:92:
e0:06:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:58 2024 by rpki-client on console-ams.rpki-client.org