Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/CZN6i_mp6mCJgVrhQTZN4CMPW0w.roa
File: CZN6i_mp6mCJgVrhQTZN4CMPW0w.roa (raw, json)
Hash identifier: w61Ozg3yS2ra+eDwebO/sZFsRYxcD/KgX8N8j8TEGQ4=
Subject key identifier: 09:93:7A:8B:F9:A9:EA:60:89:81:5A:E1:41:36:4D:E0:23:0F:5B:4C
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 0191E5D6DACFE2ECA2B9A9F3E935664158C4
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/CZN6i_mp6mCJgVrhQTZN4CMPW0w.roa
Signing time: Thu 12 Sep 2024 10:45:48 +0000
ROA not before: Thu 12 Sep 2024 10:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204108
IP address blocks: 31.133.32.0/22 maxlen: 22
185.229.232.0/22 maxlen: 24
185.229.232.0/23 maxlen: 24
185.229.234.0/23 maxlen: 24
185.253.40.0/23 maxlen: 24
185.253.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:d6:da:cf:e2:ec:a2:b9:a9:f3:e9:35:66:41:58:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Sep 12 10:45:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09937a8bf9a9ea6089815ae141364de0230f5b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:08:96:0d:db:1c:c4:cf:dc:20:51:86:fa:
21:d1:37:99:16:17:60:fb:23:78:a9:59:29:44:64:
37:95:87:99:a9:ca:0b:43:18:b7:d5:c2:c3:d0:a9:
4f:44:d9:88:86:b2:cd:d0:00:17:19:00:3f:1e:0c:
50:b2:a9:89:cd:89:b6:c3:6c:c2:8c:ff:f7:97:86:
49:84:1e:66:d8:a7:99:d3:bc:07:2f:5e:27:90:0a:
be:7a:2b:0d:c5:0e:4f:f0:dd:c2:47:dc:ca:12:4a:
77:f0:3b:77:eb:ce:78:df:81:73:ae:a7:a8:70:20:
59:9f:16:18:7e:fc:d8:7c:d4:f0:40:ba:3f:b7:ec:
28:27:b8:f8:58:cd:6f:5d:0b:63:ac:9d:38:c2:57:
1c:b4:2b:b5:a9:2b:ce:72:5c:c6:ed:78:fd:64:49:
ab:b3:7a:22:8f:14:d6:79:1f:f2:ad:84:4f:75:da:
aa:96:c3:c7:0c:83:12:63:d5:3b:2a:5e:f6:f3:c7:
4e:0d:8d:a8:f7:ff:a1:60:8e:9c:bd:e4:52:c5:0e:
42:45:21:a0:cc:ad:30:5e:7e:6e:c6:92:07:5f:25:
b3:f7:b3:72:2a:f6:46:f4:c2:bf:68:d0:5c:f3:a5:
2f:ef:71:6e:4c:f0:d2:fc:a7:13:96:f6:b1:58:e0:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:93:7A:8B:F9:A9:EA:60:89:81:5A:E1:41:36:4D:E0:23:0F:5B:4C
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/CZN6i_mp6mCJgVrhQTZN4CMPW0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.32.0/22
185.229.232.0/22
185.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
87:5f:1f:fa:bd:29:22:23:fb:af:5a:e1:0f:6e:b2:ad:37:5f:
bf:bc:06:aa:d0:47:92:ff:53:29:dc:c1:10:d5:39:32:f8:7b:
37:2e:00:a1:fa:c0:1b:e8:3c:3e:b2:29:ce:31:69:42:a8:c5:
be:ce:88:73:85:9e:2b:c9:80:45:ae:45:8a:0e:ec:67:a3:c2:
61:80:af:9b:dc:0e:6a:03:7e:85:2a:c9:f0:10:58:5d:36:83:
b3:11:ab:ec:cd:92:99:a3:b7:e8:0a:22:e9:c9:ec:04:8d:4b:
2f:be:f2:11:37:c2:82:f6:2f:e9:37:30:6a:55:c8:d3:a3:ae:
a1:2d:08:d6:88:18:f9:f7:a2:58:6f:bf:3a:a0:f9:0a:72:db:
9f:ef:ed:db:d9:9d:ca:4c:ab:33:55:81:31:de:fd:3f:49:e9:
1c:a9:ab:d2:01:a5:9b:06:80:03:23:e2:ca:4d:d6:86:36:ab:
da:8d:59:3d:7b:80:7b:18:b3:ea:f1:89:08:77:f3:8a:2f:83:
36:dd:02:d4:7e:ae:25:15:b3:bf:f9:86:b9:6c:3e:f6:c4:61:
43:27:7e:43:ff:5d:c3:ae:4d:86:f7:96:b9:5b:83:d9:a8:92:
89:35:ec:f7:03:74:76:15:b1:83:9f:a3:4e:45:da:ce:9a:0a:
45:ea:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:56 2024 by rpki-client on console-fra.rpki-client.org