Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/zBamjjkUwUoXkgglVanZ6LWcuPc.roa
File: zBamjjkUwUoXkgglVanZ6LWcuPc.roa (raw, json)
Hash identifier: M98t1oVnDIE0NiKrsPKYrFAFZSkHTfiq6a/ABiKmOjs=
Subject key identifier: CC:16:A6:8E:39:14:C1:4A:17:92:08:25:55:A9:D9:E8:B5:9C:B8:F7
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 018EB34EDDF0FB7877137329935E6E706E0F
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/zBamjjkUwUoXkgglVanZ6LWcuPc.roa
Signing time: Sat 06 Apr 2024 12:07:54 +0000
ROA not before: Sat 06 Apr 2024 12:07:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209609
IP address blocks: 109.71.76.0/24 maxlen: 24
195.210.38.0/23 maxlen: 23
195.210.38.0/24 maxlen: 24
195.210.39.0/24 maxlen: 24
2001:678:900::/48 maxlen: 48
2a0c:3340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:4e:dd:f0:fb:78:77:13:73:29:93:5e:6e:70:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Apr 6 12:07:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc16a68e3914c14a1792082555a9d9e8b59cb8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:32:1f:0b:f3:c7:38:70:f0:12:5b:cc:a0:
de:4e:d7:f3:d8:89:e6:f8:ae:bc:76:7d:be:c4:7c:
db:6c:5a:07:28:ff:e1:39:3f:e2:66:27:be:5f:2d:
b6:8b:1e:14:bc:fa:59:cc:4b:53:25:b9:c6:ee:e7:
e8:5a:21:94:ff:21:cb:49:09:e3:4f:72:4b:02:e8:
fc:ce:04:27:56:ea:14:00:1c:0c:51:37:5a:09:e7:
6b:a4:39:14:79:b0:12:4c:fa:4e:63:74:d4:2a:17:
7d:04:28:d5:55:73:17:4a:d6:b5:32:61:8e:4f:2b:
32:8f:b3:a2:ca:e1:ce:07:3b:83:93:e5:ad:2d:16:
56:dc:ab:a1:0f:f2:c3:8a:20:af:cd:5a:11:a7:4b:
ca:63:63:b1:f5:55:c0:3e:20:65:91:91:5f:8a:5a:
b3:2d:9b:3e:09:08:e3:1b:3c:7d:83:b7:10:d6:eb:
64:54:13:cb:c5:d2:d0:86:c5:4f:85:20:ce:54:c0:
3c:0f:a4:fa:fc:9e:5e:e7:0a:ef:a2:35:bf:68:ff:
15:9c:68:28:f9:89:83:25:2c:16:69:51:57:e5:13:
10:83:cd:ed:b7:61:a9:03:de:a4:f8:4b:5a:73:f1:
c5:62:08:64:a5:c5:5d:94:6e:5e:37:98:4a:ed:ac:
a6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:A6:8E:39:14:C1:4A:17:92:08:25:55:A9:D9:E8:B5:9C:B8:F7
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/zBamjjkUwUoXkgglVanZ6LWcuPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.76.0/24
195.210.38.0/23
IPv6:
2001:678:900::/48
2a0c:3340::/29
Signature Algorithm: sha256WithRSAEncryption
65:8f:1d:83:3e:3b:61:fa:d7:89:3a:c0:b1:c4:d7:ef:9b:bb:
4a:b9:33:0b:62:25:86:52:11:b5:e5:90:cf:4d:61:33:92:88:
53:b2:ea:de:d5:3b:ef:0f:59:d7:39:ad:8b:86:7a:5e:3c:bb:
cb:cd:b7:ed:6b:97:e8:b8:69:1a:70:f1:53:e8:0c:bc:8b:c1:
a4:c3:b1:fa:d3:ca:35:dd:6e:cb:89:29:5a:49:29:d2:17:7d:
cd:a3:26:ed:eb:53:62:b1:5d:6e:dc:e1:22:fa:b2:46:40:82:
aa:30:85:85:cc:c2:11:69:53:9e:db:26:35:2b:a9:97:2c:0a:
30:37:b9:8d:d3:44:3e:94:82:9e:5d:52:30:8b:79:8b:e3:51:
98:1d:19:8c:b4:16:97:bf:e1:b4:b8:7b:05:be:1b:61:1a:d5:
49:d5:ab:51:c0:cc:03:58:f7:3d:93:1e:c6:bb:96:32:00:b2:
29:56:40:15:b7:a5:c2:4e:42:0c:4b:0e:23:49:75:67:0f:12:
d8:c7:d8:cf:9a:69:23:73:25:10:a8:69:cc:fc:19:6c:4d:ad:
0c:7e:48:5c:73:e5:62:b0:81:52:22:bb:5e:ea:03:5c:18:e4:
dc:5a:d7:3f:f6:ac:ab:79:e4:c7:ac:b6:82:1b:c8:38:2b:be:
6c:f3:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:09:18 2024 by rpki-client on console-fra.rpki-client.org