Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1zUhkZylHNG7Ea7wt0APJfS8zmo.roa
File: 1zUhkZylHNG7Ea7wt0APJfS8zmo.roa (raw, json)
Hash identifier: bHuGNXI49qlMm3iHAS8G+Nucb0dMGldSp0NQpNoackg=
Subject key identifier: D7:35:21:91:9C:A5:1C:D1:BB:11:AE:F0:B7:40:0F:25:F4:BC:CE:6A
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018CC7941B1ADDA15F054D19F32DA873FBD4
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1zUhkZylHNG7Ea7wt0APJfS8zmo.roa
Signing time: Tue 02 Jan 2024 00:30:21 +0000
ROA not before: Tue 02 Jan 2024 00:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50025
IP address blocks: 109.248.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:1b:1a:dd:a1:5f:05:4d:19:f3:2d:a8:73:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 00:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d73521919ca51cd1bb11aef0b7400f25f4bcce6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:5d:b7:d0:5e:eb:80:e6:7b:66:90:98:22:
41:d7:20:59:d5:81:f8:27:8e:b4:a9:bc:98:43:a1:
58:bd:ac:80:8e:3b:4d:63:02:b8:c6:cd:71:68:4b:
93:ee:a3:2f:24:62:fd:e4:f2:f5:a5:46:d9:25:25:
67:cb:fa:b4:76:f2:7e:4b:8d:60:79:e2:8a:84:be:
12:fd:ad:c9:da:81:7f:b3:91:de:15:c1:18:22:0c:
15:6c:c3:3e:f0:a1:db:02:e8:30:1c:9d:21:46:1c:
2b:91:65:43:2f:85:44:c2:48:88:e9:70:a6:68:12:
d0:8a:eb:50:1f:2a:4a:13:25:bb:20:c8:13:23:34:
eb:13:94:2f:62:67:99:21:4f:6d:73:e5:e8:72:74:
f2:21:c1:78:78:92:3f:42:27:eb:01:46:83:e5:aa:
65:0f:5e:45:93:4a:93:44:c6:d1:0c:f3:64:47:6e:
5f:eb:eb:75:bc:58:d1:ec:91:ee:65:c8:df:0e:6c:
71:fa:13:da:2c:3c:89:fa:0f:f5:fa:ad:0a:6b:ce:
17:53:a6:ac:df:88:09:2e:9f:bd:f8:2d:4a:2c:01:
d0:0d:3e:25:3d:84:40:d4:cc:8a:08:b6:28:48:fc:
47:9b:76:c5:ec:cd:c1:74:e5:f8:73:95:47:e8:16:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:21:91:9C:A5:1C:D1:BB:11:AE:F0:B7:40:0F:25:F4:BC:CE:6A
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1zUhkZylHNG7Ea7wt0APJfS8zmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.220.0/23
Signature Algorithm: sha256WithRSAEncryption
32:39:b4:60:bc:c1:9d:7d:d7:eb:78:0c:b8:48:22:0f:77:07:
c1:f9:11:f6:5e:67:c6:19:b6:0e:e3:0b:aa:d7:50:cd:32:b7:
57:77:bb:5b:9c:f0:ab:6f:5a:89:12:41:ec:28:ed:07:31:ca:
19:1a:5b:df:8b:d3:11:c3:7b:d8:ec:af:a5:e2:3e:6c:a9:33:
9e:2c:42:d8:00:91:ab:ec:f4:86:79:c4:a9:59:19:c3:2c:f7:
71:e1:c7:27:90:66:65:c2:d1:c1:0d:08:25:82:50:a5:ec:ba:
f5:e8:ad:df:86:c9:6c:cd:5f:92:5e:c6:14:f7:f5:73:81:a1:
30:34:a5:52:8e:47:15:fc:d8:f8:04:01:16:2c:78:54:49:9c:
2e:6d:80:44:51:6f:36:a6:c2:12:a5:b2:16:c4:95:bd:3e:31:
8c:76:2b:bb:7c:00:c3:5f:2e:06:9f:35:cb:4c:d3:95:7a:db:
bf:41:e4:50:d3:68:1d:60:df:c0:3b:e5:5a:0a:cb:dd:9b:9c:
9f:a5:35:b3:31:52:ab:90:21:a0:7e:7d:b0:32:58:41:c4:e9:
c5:c6:8e:81:d6:be:4d:89:4b:c5:93:47:eb:65:82:5a:13:06:
d7:9a:4b:b6:f4:96:64:aa:fa:25:8c:6f:c9:e4:20:25:8c:1c:
3f:39:13:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:39:20 2024 by rpki-client on console-ams.rpki-client.org